last executing test programs: 31.811917476s ago: executing program 0 (id=432): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3590], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route(r6, 0x0, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000006000000000084e27fa40000000f000000c5000000a000020095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) process_mrelease(0xffffffffffffffff, 0x0) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000340)='io_uring_register\x00', r7}, 0x10) 22.193219901s ago: executing program 0 (id=444): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8000, 0x20000000019}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x40, &(0x7f0000000200)=0x102, 0x4) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x2, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) r4 = dup(r0) sendmsg$IPSET_CMD_TYPE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x20000001) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@ipv4_delroute={0x1c, 0x19, 0x1, 0x70bd28, 0x25dfdbfb, {0x2, 0x14, 0x0, 0x8, 0xfe, 0x0, 0xff, 0x1}}, 0x1c}, 0x1, 0x0, 0x0, 0x2400c091}, 0x4000000) connect$unix(r4, &(0x7f0000002200)=@file={0x0, './file0\x00'}, 0x6e) fchown(0xffffffffffffffff, 0x0, 0xee01) 22.144801196s ago: executing program 1 (id=445): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4080c}, 0x2000c845) syz_mount_image$udf(&(0x7f0000000500), &(0x7f00000000c0)='./file3\x00', 0x0, &(0x7f0000000700)=ANY=[], 0x43, 0xc11, &(0x7f0000000d00)="$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") sched_setaffinity(0x0, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000100), &(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x3, 0x1510, &(0x7f0000003640)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0x48080, 0x6d) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='.\x00', 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x2000, 0x1) unlink(&(0x7f0000000200)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket(0x11, 0x3, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) getsockopt$sock_int(r3, 0x1, 0x3e, 0x0, 0x0) 20.697710155s ago: executing program 0 (id=447): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, 0x0, 0x280}}], 0x1, 0x40048d1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 19.599469931s ago: executing program 3 (id=449): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x7, 0x5) close(r2) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f0000000180)='./file0\x00', 0x1000840, &(0x7f0000000f00)=ANY=[@ANYBLOB="696f636861727365743d6b6f69382d72752c73686f72746e616d653d77696e6e742c636f6465706167653d3935302c757466383d312c6e6f6e756d7461696c3d302c73686f72746e616d653d6c6f7765722c757466383d302c756e695f786c6174653d302c696f636861727365743d63703836352c757466383d312c73686f72746e616d653d6c6f7765722c757466383d302c73686f72746e616d653d77696e6e742c001d46d61beb"], 0x3, 0x384, &(0x7f0000000b40)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10138, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x18) socket$inet_udp(0x2, 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0900000001000000420000004000000002"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400), &(0x7f0000000780)="f684eeb9ace920", 0x3ff, r7}, 0x38) mmap(&(0x7f0000b34000/0x3000)=nil, 0x3000, 0x3, 0x8031, 0xffffffffffffffff, 0x9a974000) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f0000000080)={r7, &(0x7f0000000040)="848bbd55b4e8906b71c01c3a3b8c45a784d0cac0395ead89da8ed410c069faf101beec524abd0f6547b941e3856d", &(0x7f0000000480)=""/199}, 0x20) write$cgroup_int(r3, &(0x7f0000000040)=0x7, 0x12) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000540)="b5ec", 0x2}], 0x1) 18.528256533s ago: executing program 1 (id=450): syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file0\x00', 0x8c0, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x1, 0x443b, &(0x7f0000009e40)="$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") r0 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000140)=""/189, 0xbd) 15.372317895s ago: executing program 3 (id=454): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$inet6(0xa, 0x1, 0x0) open(&(0x7f0000000740)='./bus\x00', 0x143c62, 0x0) r4 = open(&(0x7f0000000080)='./bus\x00', 0x4a003, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f00000003c0)={0xd8}) mmap(&(0x7f000029a000/0x1000)=nil, 0x1000, 0x0, 0x4002011, r4, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffeffffff3f7e, 0x0, 0x0) sendmsg$inet(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) 15.300336186s ago: executing program 1 (id=455): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x4, 0x93, &(0x7f00000003c0)=""/147}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) chdir(&(0x7f00000003c0)='./bus\x00') r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000001fc0)=""/184, 0x20002078) 14.028297431s ago: executing program 3 (id=456): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r4, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r4, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x10000, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0xfffffffffffffffd}, {0x0, 0x8, 0x0, 0x8}, 0x0, 0x0, 0x1, 0x0, 0x1}, {{@in=@remote, 0x2, 0x6c}, 0x0, @in=@empty, 0x0, 0x5, 0x0, 0xb7}}, 0xe8) sendmmsg(r4, &(0x7f0000007fc0), 0x800001d, 0xb00) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 13.981639322s ago: executing program 2 (id=457): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x181200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$evdev(0x0, 0x0, 0x60000) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_ADD(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x24000080}, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x50) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000500)={0x0, 0x1, 0x1000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) r4 = openat$vim2m(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r4, 0xc0145608, &(0x7f00000002c0)={0x2, 0x1, 0x4}) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f00000004c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x60}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0x6, 0x9, 0x0, 0x0, 0x1ff}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x20}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x7, 0x0}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.966768303s ago: executing program 4 (id=458): mremap(&(0x7f00003ad000/0x400000)=nil, 0x400000, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_emit_ethernet(0x17, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaa00e5dbda0900810000000000b2"], 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@union, @const]}}, 0x0, 0x32}, 0x20) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x800448d4, &(0x7f0000000480)={0x0, 0x1, "00fa00"}) mremap(&(0x7f0000a6e000/0x2000)=nil, 0x2000, 0x4000, 0x3, &(0x7f00005b7000/0x4000)=nil) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x8f}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, 0xffffffffffffffff, 0x0) 13.009041512s ago: executing program 3 (id=459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000710000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x15, 0xc, &(0x7f0000000640)=ANY=[@ANYRES64=r0, @ANYRESOCT, @ANYRESHEX=r0, @ANYRES64=r0, @ANYRESDEC, @ANYBLOB="5a0923dda9e74418f04c5adabeb470f4866e5fa71ab6e5333938c34dc78975ddbc6c911c38735a866479b25d58a95ca785a77984bcf7ffbe6ff31bb03223aaa299cd378f00c35d85574237e9ce752a49a2fd671a591b99e07dad32df19f53d1334e11c6972fa387dcea64c826b5a2d72a5fa428e9a47bb", @ANYRES8, @ANYRES8, @ANYRES32=0x0], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x286ca06bbee933dc, 0x10, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, 0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f0000000080)={0x19}) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r4, 0x3b81, &(0x7f0000000200)={0x15, 0x0, 0x0}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, &(0x7f00000000c0)={0x28, 0x7, r5, 0x0, &(0x7f0000800000/0x800000)=nil, 0x800000}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, r5, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000240)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1ecbb5}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r4, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x334e8b}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x6, r6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7b}) 12.835809441s ago: executing program 0 (id=460): r0 = memfd_create(0x0, 0x3) write$binfmt_elf64(r0, 0x0, 0x78) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-512-generic\x00'}, 0x58) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x74) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) fcntl$addseals(0xffffffffffffffff, 0x409, 0x8) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r3, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000540)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000300)) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000040)=0x9) ioctl$TIOCSTI(r3, 0x5412, &(0x7f0000000000)=0x7e) 12.022453087s ago: executing program 4 (id=461): pipe2(&(0x7f0000001cc0), 0x800) socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0xc090) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) newfstatat(0xffffffffffffff9c, 0x0, 0x0, 0x4000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001d80)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket(0x1, 0x6, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x48000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) mbind(&(0x7f00001fa000/0x2000)=nil, 0x2000, 0x1, 0x0, 0x0, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x600000)=nil, 0x60000b, 0x9) 11.543589967s ago: executing program 2 (id=462): socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) socket$inet6(0xa, 0x80003, 0xff) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getdents64(0xffffffffffffffff, 0x0, 0x22) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x0, &(0x7f0000000180)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, 0x0, 0x1, 0x70bd2c, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x1c}, {0x5, 0x83, 0x1}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004859}, 0x4000) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_ADDRFORM(r4, 0x3a, 0x1, &(0x7f00000000c0), 0x4) syz_emit_ethernet(0x66, &(0x7f00000068c0)={@link_local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\a\x00', 0x30, 0x3a, 0x0, @local, @mcast2, {[], @dest_unreach={0x1, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "0100", 0x0, 0x0, 0x0, @mcast2, @loopback}}}}}}}, 0x0) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r6, 0x6, 0x4, 0x0, &(0x7f0000000040)) close_range(r5, 0xffffffffffffffff, 0x2) r7 = openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) write$vga_arbiter(r7, 0x0, 0xc) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) 10.091844969s ago: executing program 1 (id=464): write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x78) sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f00000001c0), 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(0xffffffffffffffff, 0xc0205648, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$snapshot(0xffffffffffffff9c, &(0x7f00000000c0), 0xc2d41, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x80) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, 0x0, &(0x7f0000000180)) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x7d, 0x0, &(0x7f0000000080)) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = getpid() syz_pidfd_open(r3, 0x0) 8.91621122s ago: executing program 4 (id=465): r0 = openat$ubi_ctrl(0xffffffffffffff9c, 0x0, 0x8400, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) writev(r4, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) io_setup(0x8, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00'}) write$P9_RSTATu(r0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40186f40, &(0x7f0000000440)=0x800) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x4, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.181033809s ago: executing program 0 (id=466): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x109942, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSPASS(r3, 0x40107447, &(0x7f0000000240)={0x0, 0x0}) ioctl$PPPIOCSACTIVE(r3, 0x40107446, &(0x7f0000000080)={0x1, &(0x7f00000000c0)=[{0x6, 0x0, 0x3}]}) openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000b80)={0x2020}, 0x2045) openat$sysfs(0xffffffffffffff9c, 0x0, 0x20800, 0x182) write$evdev(0xffffffffffffffff, &(0x7f0000000040), 0x373) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r4, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) 7.798263911s ago: executing program 2 (id=467): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x0, 0x0, &(0x7f0000000100)='syzkaller\x00', 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000000)='sched_switch\x00', r1, 0x0, 0xffffffffffffffff}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) pread64(r1, &(0x7f0000000400)=""/74, 0x4a, 0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_sctp(0x2, 0x1, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'lc\x00', 0x4, 0x83, 0x77}, {@rand_addr=0x64010102, 0x4e23, 0x2, 0xcd, 0x3d71, 0x3}}, 0x44) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000040)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, r5, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r6 = fsopen(&(0x7f0000000080)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_FD(r6, 0x5, &(0x7f00000005c0)='fd', 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x1c, 0x6, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000850}, 0x800) 5.990941698s ago: executing program 1 (id=468): socket(0x15, 0x5, 0x0) socket(0x18, 0x5, 0x86b0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000001c0)={&(0x7f0000000300)=""/112, 0x103000, 0x6bc22fd484172ea7, 0xc, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) r3 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000240)={'\x00', 0x8, 0x8a, 0x9, 0xffffffffffffffff, 0x400, r0}) fsconfig$FSCONFIG_SET_BINARY(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000100), 0x2, 0x0) mmap$binder(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x1, 0x11, 0xffffffffffffffff, 0x800000000000) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r5, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r5, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 5.98978067s ago: executing program 4 (id=469): r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) io_setup(0x8, &(0x7f0000004200)=0x0) syz_open_procfs(0x0, 0x0) io_submit(r4, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0xc) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) mount$afs(&(0x7f0000000040)=@cell={0x7f, 'syz1:', 'syz0'}, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r6, 0x29, 0x33, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) 5.945294105s ago: executing program 3 (id=470): socket$inet6_sctp(0xa, 0x1, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000380)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c1300000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000048aa005e850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e0000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r0, &(0x7f0000000e80)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x7fff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x1}, 0x1c, &(0x7f00000002c0)=[{&(0x7f0000000380)='1', 0x1}], 0x1, 0x0, 0x280}}], 0x1, 0x40048d1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) syz_open_dev$dmmidi(0x0, 0x2, 0x8901) r2 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r2, 0xc008561c, &(0x7f0000000300)={0xf0f002, 0x1}) socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r3, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)={0x1c, r4, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x84) 5.579567159s ago: executing program 0 (id=471): r0 = socket$inet6(0xa, 0x400000000001, 0x0) bind$inet6(r0, &(0x7f0000fa0fe4)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0xffffffac, 0x20000008, &(0x7f00000001c0)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000180)=0x80000039f8, 0x4) sendto$inet6(r0, &(0x7f0000000000)="8d", 0x1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f0000003dc0)=[{{0x0, 0x0, 0x0}, 0xfffff001}], 0x1, 0x40012250, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = dup(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$rds(0x15, 0x5, 0x0) sendmsg$IPVS_CMD_GET_INFO(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x0) r5 = socket(0x40000000015, 0x5, 0x0) r6 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prctl$PR_PAC_RESET_KEYS(0x36, 0x5) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000200)={@fallback=r4, 0x12, 0x0, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@fallback=r5, r2, 0x0, 0x2000, 0x0, @value=r2, @void, @void, @void, r7}, 0x20) r8 = dup(r6) sendfile(r8, r2, 0x0, 0x89ffc) 4.604183909s ago: executing program 2 (id=472): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7c, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) creat(0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r4 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r4}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r5, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 3.781241161s ago: executing program 1 (id=473): syz_mount_image$hfs(&(0x7f0000000180), &(0x7f0000000100)='./file0\x00', 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="71756965742c636f6465706167653d69736f383835392d31352c706172743d3078303030303030300000000000000000662c00a20000000700000000ede9debf530c3cc4d04b548919aca0c2937d4da1fc31dc42fc2e3e", @ANYRESDEC=0x0, @ANYRESOCT, @ANYRES16, @ANYRES16], 0x11, 0x2d2, &(0x7f0000000bc0)="$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") bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mq_unlink(0x0) r3 = socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$net_dm(0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=@newlink={0x48, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}, @IFLA_ADDRESS={0xa}]}, 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 3.374952151s ago: executing program 4 (id=474): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000007c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) write$cgroup_subtree(r2, 0x0, 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r7 = ioctl$KVM_CREATE_VM(r6, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, &(0x7f0000000400)={0x0, 0x3, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r8 = ioctl$KVM_CREATE_VCPU(r7, 0xae41, 0x7) syz_kvm_setup_cpu$x86(r8, r8, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, &(0x7f00000006c0)="2ef2dd050080000048b84441000000000000b9130b00000f320f21f8350000ce00010123f836362e6726af4b0f20c1350e000000440f22c0b805000000b9009800000f01d97c0f01c9c947338c01c4c40f79d226660f013b", 0x58}], 0x1, 0x50, 0x0, 0x0) 1.09067732s ago: executing program 2 (id=475): ioctl$AUTOFS_DEV_IOCTL_VERSION(0xffffffffffffffff, 0xc0189371, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000340)={[{0x2b, 'cpuset'}]}, 0x8) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440), 0x10) r0 = socket(0xa, 0x3, 0x3a) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000003700), 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) connect$packet(r0, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) fsopen(&(0x7f0000000000)='jfs\x00', 0x1) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000380), 0x2, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) chdir(0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000180)={0x5, 0xfffffffe}, 0x8) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 1.089383313s ago: executing program 3 (id=476): madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) bind$alg(0xffffffffffffffff, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001140)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x2200c840) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x3b, 0x2, [{0xfe}, {0xfbfffffa}]}}) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) 0s ago: executing program 4 (id=477): ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) socket(0x10, 0x3, 0x0) openat$urandom(0xffffffffffffff9c, 0x0, 0x5752c1, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_open_dev$loop(0x0, 0x9, 0x20a5c3) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x87}, 0x0) r0 = syz_io_uring_setup(0xc5d, &(0x7f00000004c0)={0x0, 0xd5a5, 0x1, 0x1, 0x147}, &(0x7f0000000000)=0x0, &(0x7f00000000c0)) io_uring_register$IORING_REGISTER_FILES(r0, 0x2, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47f6, 0x0, 0x0, 0x0, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000000)='fdinfo/3\x00') read$msr(r2, &(0x7f0000000180)=""/174, 0xae) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000000c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='qnx6\x00', 0x200000, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r4 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) ftruncate(r4, 0x80079a0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 69.122086][ T5820] cgroup: Unknown subsys name 'net' [ 69.297602][ T5820] cgroup: Unknown subsys name 'cpuset' [ 69.307380][ T5820] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.721158][ T5820] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.417810][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.424311][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 74.873566][ T5834] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.882741][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.891168][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.899875][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.907827][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.926832][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.935409][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.943501][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.952331][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.960461][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.968452][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.976900][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.987261][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.991619][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.996405][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.001864][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.012240][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.023835][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.035713][ T5834] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.045436][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.052769][ T5834] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.061915][ T5834] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.069319][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.115925][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.126523][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.714781][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 75.808027][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 75.881663][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 75.913675][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 76.029608][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 76.066015][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.073338][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.080879][ T5830] bridge_slave_0: entered allmulticast mode [ 76.087979][ T5830] bridge_slave_0: entered promiscuous mode [ 76.155878][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.163039][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.170505][ T5830] bridge_slave_1: entered allmulticast mode [ 76.177577][ T5830] bridge_slave_1: entered promiscuous mode [ 76.219707][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.226929][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.234205][ T5837] bridge_slave_0: entered allmulticast mode [ 76.242269][ T5837] bridge_slave_0: entered promiscuous mode [ 76.280135][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.317517][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.325174][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.332319][ T5837] bridge_slave_1: entered allmulticast mode [ 76.340733][ T5837] bridge_slave_1: entered promiscuous mode [ 76.363622][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.378371][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.385627][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.392809][ T5836] bridge_slave_0: entered allmulticast mode [ 76.400487][ T5836] bridge_slave_0: entered promiscuous mode [ 76.422238][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.429511][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.436989][ T5833] bridge_slave_0: entered allmulticast mode [ 76.444356][ T5833] bridge_slave_0: entered promiscuous mode [ 76.491477][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.499451][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.507292][ T5836] bridge_slave_1: entered allmulticast mode [ 76.514824][ T5836] bridge_slave_1: entered promiscuous mode [ 76.531531][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.538900][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.547028][ T5833] bridge_slave_1: entered allmulticast mode [ 76.554731][ T5833] bridge_slave_1: entered promiscuous mode [ 76.563830][ T5830] team0: Port device team_slave_0 added [ 76.573020][ T5830] team0: Port device team_slave_1 added [ 76.625202][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.685682][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.698430][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.709677][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.735813][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.748381][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.768703][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.775992][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.783163][ T5835] bridge_slave_0: entered allmulticast mode [ 76.791393][ T5835] bridge_slave_0: entered promiscuous mode [ 76.865432][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.872422][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.899862][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.912044][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.920435][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.927685][ T5835] bridge_slave_1: entered allmulticast mode [ 76.935067][ T5835] bridge_slave_1: entered promiscuous mode [ 76.935450][ T5843] Bluetooth: hci0: command tx timeout [ 76.958887][ T5836] team0: Port device team_slave_0 added [ 76.966560][ T5836] team0: Port device team_slave_1 added [ 76.985373][ T5837] team0: Port device team_slave_0 added [ 77.005626][ T5833] team0: Port device team_slave_0 added [ 77.012275][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.019697][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.045661][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.079066][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.090066][ T5837] team0: Port device team_slave_1 added [ 77.095902][ T5843] Bluetooth: hci1: command tx timeout [ 77.102401][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.109500][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.136565][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.149335][ T5833] team0: Port device team_slave_1 added [ 77.174325][ T5843] Bluetooth: hci4: command tx timeout [ 77.174526][ T5154] Bluetooth: hci2: command tx timeout [ 77.180019][ T5843] Bluetooth: hci3: command tx timeout [ 77.206068][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.227293][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.234324][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.260480][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.289170][ T5830] hsr_slave_0: entered promiscuous mode [ 77.296289][ T5830] hsr_slave_1: entered promiscuous mode [ 77.329348][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.336567][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.362832][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.394038][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.401446][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.427927][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.452528][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.459611][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.486060][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.499788][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.507069][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.533201][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.552277][ T5835] team0: Port device team_slave_0 added [ 77.607445][ T5835] team0: Port device team_slave_1 added [ 77.631292][ T5837] hsr_slave_0: entered promiscuous mode [ 77.637642][ T5837] hsr_slave_1: entered promiscuous mode [ 77.643717][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 77.649758][ T5837] Cannot create hsr debugfs directory [ 77.727916][ T5836] hsr_slave_0: entered promiscuous mode [ 77.734707][ T5836] hsr_slave_1: entered promiscuous mode [ 77.741107][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 77.746918][ T5836] Cannot create hsr debugfs directory [ 77.776598][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.783645][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.810329][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.822846][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.829937][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.856412][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.899843][ T5833] hsr_slave_0: entered promiscuous mode [ 77.907116][ T5833] hsr_slave_1: entered promiscuous mode [ 77.913167][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 77.919050][ T5833] Cannot create hsr debugfs directory [ 78.121861][ T5835] hsr_slave_0: entered promiscuous mode [ 78.128141][ T5835] hsr_slave_1: entered promiscuous mode [ 78.134996][ T5835] debugfs: 'hsr0' already exists in 'hsr' [ 78.140738][ T5835] Cannot create hsr debugfs directory [ 78.520200][ T5833] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.547462][ T5833] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.576805][ T5833] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.601897][ T5833] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.655983][ T5830] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.669134][ T5830] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.690941][ T5830] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.703268][ T5830] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.773253][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.797660][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.821923][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.835365][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.929294][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.943912][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.967725][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.979584][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.014419][ T5843] Bluetooth: hci0: command tx timeout [ 79.111670][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.122982][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 79.136351][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 79.150574][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 79.161319][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.174583][ T5843] Bluetooth: hci1: command tx timeout [ 79.201118][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.246082][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.253346][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.255950][ T5843] Bluetooth: hci3: command tx timeout [ 79.267131][ T5154] Bluetooth: hci2: command tx timeout [ 79.267150][ T5843] Bluetooth: hci4: command tx timeout [ 79.332364][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.339540][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.366027][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.399028][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.433946][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.444981][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.487042][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.494210][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.513599][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.555307][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.562484][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.572168][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.579374][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.591816][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.632029][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.639240][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.652562][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.659765][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.688390][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.695600][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.801563][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.912815][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.968613][ T3540] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.975832][ T3540] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.996460][ T3540] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.003739][ T3540] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.173040][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.310885][ T5833] veth0_vlan: entered promiscuous mode [ 80.388158][ T5833] veth1_vlan: entered promiscuous mode [ 80.412600][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.496370][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.579517][ T5833] veth0_macvtap: entered promiscuous mode [ 80.626417][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.643607][ T5833] veth1_macvtap: entered promiscuous mode [ 80.661913][ T5830] veth0_vlan: entered promiscuous mode [ 80.682345][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.727093][ T5830] veth1_vlan: entered promiscuous mode [ 80.763053][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.773630][ T5836] veth0_vlan: entered promiscuous mode [ 80.813172][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.856272][ T5836] veth1_vlan: entered promiscuous mode [ 80.868172][ T59] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.882869][ T59] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.906758][ T5830] veth0_macvtap: entered promiscuous mode [ 80.925351][ T59] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.935442][ T59] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.950811][ T5830] veth1_macvtap: entered promiscuous mode [ 80.988316][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.047068][ T5835] veth0_vlan: entered promiscuous mode [ 81.059833][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.097566][ T5843] Bluetooth: hci0: command tx timeout [ 81.111766][ T5835] veth1_vlan: entered promiscuous mode [ 81.146629][ T3540] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.156244][ T3540] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.171905][ T5836] veth0_macvtap: entered promiscuous mode [ 81.215789][ T3540] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.225418][ T2993] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.247432][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.256517][ T5843] Bluetooth: hci1: command tx timeout [ 81.269246][ T5836] veth1_macvtap: entered promiscuous mode [ 81.276965][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.334435][ T5843] Bluetooth: hci4: command tx timeout [ 81.344949][ T5839] Bluetooth: hci3: command tx timeout [ 81.350746][ T5843] Bluetooth: hci2: command tx timeout [ 81.361574][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.369001][ T1022] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.378451][ T1022] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.405764][ T5837] veth0_vlan: entered promiscuous mode [ 81.426235][ T5835] veth0_macvtap: entered promiscuous mode [ 81.448223][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.483594][ T5837] veth1_vlan: entered promiscuous mode [ 81.496376][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.539581][ T5835] veth1_macvtap: entered promiscuous mode [ 81.561226][ T3540] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.582334][ T1022] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.607344][ T1022] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.629906][ T3540] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.644764][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.688431][ T1022] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.731440][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.800192][ T5837] veth0_macvtap: entered promiscuous mode [ 81.822002][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.838818][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.855294][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.888326][ T5837] veth1_macvtap: entered promiscuous mode [ 81.931461][ T2993] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.951140][ T5951] loop0: detected capacity change from 0 to 40427 [ 81.962808][ T2993] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.992431][ T5951] F2FS-fs (loop0): invalid crc value [ 82.145584][ T5951] F2FS-fs (loop0): Start checkpoint disabled! [ 82.147683][ T1151] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.201088][ T5951] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 82.204793][ T1151] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.220088][ T13] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.241177][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.258791][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.350193][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 82.837156][ T5931] kernel write not supported for file bpf-prog (pid: 5931 comm: kworker/0:6) [ 82.957308][ T59] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.995570][ T13] kworker/u8:1: attempt to access beyond end of device [ 82.995570][ T13] loop0: rw=1, sector=45096, nr_sectors = 8 limit=40427 [ 83.020904][ T1022] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.049755][ T59] kworker/u8:4: attempt to access beyond end of device [ 83.049755][ T59] loop0: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 83.095044][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 83.095071][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.095083][ T59] Workqueue: writeback wb_workfn (flush-7:0) [ 83.095130][ T59] Call Trace: [ 83.095138][ T59] [ 83.095146][ T59] dump_stack_lvl+0x189/0x250 [ 83.095181][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.095202][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 83.095225][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 83.095250][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.095272][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.095297][ T59] ? f2fs_hw_is_readonly+0x39b/0x470 [ 83.095322][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 83.095349][ T59] f2fs_write_end_io+0x495/0x810 [ 83.095370][ T59] ? blkg_put+0x22/0x240 [ 83.095405][ T59] __submit_merged_bio+0x27a/0x6a0 [ 83.095432][ T59] __submit_merged_write_cond+0x255/0x530 [ 83.095459][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 83.095516][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 83.095583][ T59] ? check_path+0x21/0x40 [ 83.095605][ T59] ? check_noncircular+0xe0/0x160 [ 83.095646][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.095667][ T59] ? rcu_is_watching+0x15/0xb0 [ 83.095687][ T59] ? __kasan_check_byte+0x12/0x40 [ 83.095711][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.095734][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.095754][ T59] ? lock_release+0x4b/0x3e0 [ 83.095771][ T59] ? unwind_next_frame+0x19ae/0x2390 [ 83.095791][ T59] ? deref_stack_reg+0x19f/0x230 [ 83.095810][ T59] ? __bfs+0x151/0x2a0 [ 83.095828][ T59] ? __pfx_hlock_conflict+0x10/0x10 [ 83.095859][ T59] ? __lock_acquire+0xab9/0xd20 [ 83.095883][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 83.095904][ T59] do_writepages+0x32e/0x550 [ 83.095933][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 83.095954][ T59] ? writeback_sb_inodes+0x384/0x1010 [ 83.095985][ T59] __writeback_single_inode+0x145/0xff0 [ 83.096007][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 83.096035][ T59] writeback_sb_inodes+0x6c7/0x1010 [ 83.096085][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 83.096151][ T59] ? rcu_is_watching+0x15/0xb0 [ 83.096182][ T59] wb_writeback+0x43b/0xaf0 [ 83.096213][ T59] ? queue_io+0x3a1/0x590 [ 83.096238][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 83.096268][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.096296][ T59] wb_workfn+0x409/0xef0 [ 83.096332][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 83.096356][ T59] ? __lock_acquire+0xab9/0xd20 [ 83.096387][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.096416][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.096437][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.096456][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.096479][ T59] process_scheduled_works+0xae1/0x17b0 [ 83.096533][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.096572][ T59] worker_thread+0x8a0/0xda0 [ 83.096622][ T59] kthread+0x70e/0x8a0 [ 83.096643][ T59] ? __pfx_worker_thread+0x10/0x10 [ 83.096664][ T59] ? __pfx_kthread+0x10/0x10 [ 83.096682][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.096704][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.096726][ T59] ? __pfx_kthread+0x10/0x10 [ 83.096744][ T59] ret_from_fork+0x3fc/0x770 [ 83.096769][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 83.096796][ T59] ? __switch_to_asm+0x39/0x70 [ 83.096811][ T59] ? __switch_to_asm+0x33/0x70 [ 83.096826][ T59] ? __pfx_kthread+0x10/0x10 [ 83.096843][ T59] ret_from_fork_asm+0x1a/0x30 [ 83.096877][ T59] [ 83.099701][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 83.100696][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.138560][ T59] CPU: 0 UID: 0 PID: 59 Comm: kworker/u8:4 Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 83.138585][ T59] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 83.138596][ T59] Workqueue: writeback wb_workfn (flush-7:0) [ 83.138624][ T59] Call Trace: [ 83.138633][ T59] [ 83.138640][ T59] dump_stack_lvl+0x189/0x250 [ 83.138669][ T59] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.138689][ T59] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 83.138713][ T59] ? __pfx_queue_work_on+0x10/0x10 [ 83.138737][ T59] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 83.138759][ T59] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 83.138783][ T59] ? f2fs_hw_is_readonly+0x39b/0x470 [ 83.138807][ T59] f2fs_handle_critical_error+0x37c/0x540 [ 83.138832][ T59] f2fs_write_end_io+0x495/0x810 [ 83.138852][ T59] ? blkg_put+0x22/0x240 [ 83.138886][ T59] __submit_merged_bio+0x27a/0x6a0 [ 83.138911][ T59] __submit_merged_write_cond+0x255/0x530 [ 83.138974][ T59] f2fs_write_data_pages+0x261d/0x3000 [ 83.139027][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 83.139090][ T59] ? check_path+0x21/0x40 [ 83.139111][ T59] ? check_noncircular+0xe0/0x160 [ 83.139151][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.139171][ T59] ? rcu_is_watching+0x15/0xb0 [ 83.139190][ T59] ? __kasan_check_byte+0x12/0x40 [ 83.139213][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.139235][ T59] ? unwind_next_frame+0xa5/0x2390 [ 83.139254][ T59] ? lock_release+0x4b/0x3e0 [ 83.139270][ T59] ? unwind_next_frame+0x19ae/0x2390 [ 83.139290][ T59] ? deref_stack_reg+0x19f/0x230 [ 83.139309][ T59] ? __bfs+0x151/0x2a0 [ 83.139325][ T59] ? __pfx_hlock_conflict+0x10/0x10 [ 83.139355][ T59] ? __lock_acquire+0xab9/0xd20 [ 83.139378][ T59] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 83.139400][ T59] do_writepages+0x32e/0x550 [ 83.139427][ T59] ? reacquire_held_locks+0x127/0x1d0 [ 83.139447][ T59] ? writeback_sb_inodes+0x384/0x1010 [ 83.139477][ T59] __writeback_single_inode+0x145/0xff0 [ 83.139498][ T59] ? do_raw_spin_unlock+0x122/0x240 [ 83.139519][ T59] writeback_sb_inodes+0x6c7/0x1010 [ 83.139565][ T59] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 83.139628][ T59] ? rcu_is_watching+0x15/0xb0 [ 83.139657][ T59] wb_writeback+0x43b/0xaf0 [ 83.139686][ T59] ? queue_io+0x3a1/0x590 [ 83.139710][ T59] ? __pfx_wb_writeback+0x10/0x10 [ 83.139739][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.139766][ T59] wb_workfn+0x409/0xef0 [ 83.139800][ T59] ? __pfx_wb_workfn+0x10/0x10 [ 83.139822][ T59] ? __lock_acquire+0xab9/0xd20 [ 83.139852][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.139879][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.139900][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.139919][ T59] ? process_scheduled_works+0x9ef/0x17b0 [ 83.139948][ T59] process_scheduled_works+0xae1/0x17b0 [ 83.139998][ T59] ? __pfx_process_scheduled_works+0x10/0x10 [ 83.140035][ T59] worker_thread+0x8a0/0xda0 [ 83.140084][ T59] kthread+0x70e/0x8a0 [ 83.140103][ T59] ? __pfx_worker_thread+0x10/0x10 [ 83.140123][ T59] ? __pfx_kthread+0x10/0x10 [ 83.140141][ T59] ? _raw_spin_unlock_irq+0x23/0x50 [ 83.140163][ T59] ? lockdep_hardirqs_on+0x9c/0x150 [ 83.140184][ T59] ? __pfx_kthread+0x10/0x10 [ 83.140204][ T59] ret_from_fork+0x3fc/0x770 [ 83.140227][ T59] ? __pfx_ret_from_fork+0x10/0x10 [ 83.140254][ T59] ? __switch_to_asm+0x39/0x70 [ 83.140269][ T59] ? __switch_to_asm+0x33/0x70 [ 83.140283][ T59] ? __pfx_kthread+0x10/0x10 [ 83.140300][ T59] ret_from_fork_asm+0x1a/0x30 [ 83.140332][ T59] [ 83.140340][ T59] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 83.172933][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.210666][ T5843] Bluetooth: hci0: command tx timeout [ 83.256826][ T5962] syz.3.8 uses obsolete (PF_INET,SOCK_PACKET) [ 83.327437][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.364204][ T5843] Bluetooth: hci1: command tx timeout [ 83.385018][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.418558][ T5843] Bluetooth: hci4: command tx timeout [ 83.454323][ T5839] Bluetooth: hci2: command tx timeout [ 83.457130][ T5154] Bluetooth: hci3: command tx timeout [ 83.516376][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.007572][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.022939][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.187698][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.202628][ T1151] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.247571][ T1151] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.264255][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.418408][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.451863][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.616623][ T5974] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 84.974385][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.982941][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 84.991865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 85.012276][ T0] NOHZ tick-stop error: local softirq work is pending, handler #140!!! [ 85.111829][ T5985] netlink: 12 bytes leftover after parsing attributes in process `syz.0.11'. [ 85.255865][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 85.494512][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 86.193110][ T5964] loop1: detected capacity change from 0 to 32768 [ 86.541648][ T5964] bcachefs (loop1): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,str_hash=crc32c,noacl,usrquota,grpquota,nojournal_transaction_names,allocator_stuck_timeout=256 [ 86.541676][ T5964] allowing incompatible features above 0.0: (unknown version) [ 86.541687][ T5964] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 86.761061][ T5964] bcachefs (loop1): Using encoding defined by superblock: utf8-12.1.0 [ 86.788862][ T48] cfg80211: failed to load regulatory.db [ 86.795866][ T5964] bcachefs (loop1): initializing new filesystem [ 86.857934][ T5964] bcachefs (loop1): going read-write [ 86.948561][ T5964] bcachefs (loop1): marking superblocks [ 87.048754][ T5964] bcachefs (loop1): initializing freespace [ 87.106046][ T5964] bcachefs (loop1): done initializing freespace [ 87.150918][ T5964] bcachefs (loop1): reading snapshots table [ 87.175477][ T5964] bcachefs (loop1): reading snapshots done [ 87.351869][ T5964] bcachefs (loop1): done starting filesystem [ 87.454654][ T5964] syz.1.2 (5964) used greatest stack depth: 16456 bytes left [ 87.518229][ T5836] bcachefs (loop1): shutting down [ 87.523496][ T5836] bcachefs (loop1): going read-only [ 87.574894][ T5836] bcachefs (loop1): finished waiting for writes to stop [ 87.596769][ T5836] bcachefs (loop1): flushing journal and stopping allocators, journal seq 3 [ 87.736635][ T5836] bcachefs (loop1): flushing journal and stopping allocators complete, journal seq 3 [ 87.812258][ T5836] bcachefs (loop1): clean shutdown complete, journal seq 4 [ 87.845224][ T5836] bcachefs (loop1): marking filesystem clean [ 87.914016][ T6031] loop2: detected capacity change from 0 to 128 [ 87.951358][ T5836] bcachefs (loop1): shutdown complete [ 88.031466][ T6031] EXT4-fs: Ignoring removed nobh option [ 88.090253][ T6031] EXT4-fs (loop2): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 88.171702][ T6031] ext4 filesystem being mounted at /7/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 88.172416][ T6023] loop3: detected capacity change from 0 to 32768 [ 88.258892][ T6023] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.277432][ T6031] fscrypt (loop2, inode 12): Unsupported log2_data_unit_size in encryption policy: 232 [ 88.379986][ T6023] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 88.441201][ T6023] XFS (loop3): Starting recovery (logdev: internal) [ 88.475829][ T6023] XFS (loop3): Ending recovery (logdev: internal) [ 88.568069][ T5830] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 88.846022][ T5835] EXT4-fs (loop2): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 88.884835][ T6050] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 88.892536][ T6050] macsec1: entered allmulticast mode [ 88.893370][ T6048] loop0: detected capacity change from 0 to 32768 [ 88.898034][ T6050] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 88.908158][ T6048] ======================================================= [ 88.908158][ T6048] WARNING: The mand mount option has been deprecated and [ 88.908158][ T6048] and is ignored by this kernel. Remove the mand [ 88.908158][ T6048] option from the mount to silence this warning. [ 88.908158][ T6048] ======================================================= [ 89.129383][ T6048] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 89.253726][ T30] audit: type=1800 audit(1751554102.812:2): pid=6048 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.31" name="file1" dev="loop0" ino=17058 res=0 errno=0 [ 89.377189][ T5833] ocfs2: Unmounting device (7,0) on (node local) [ 89.424665][ T979] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 89.625192][ T979] usb 4-1: Using ep0 maxpacket: 32 [ 89.644540][ T979] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 89.674204][ T979] usb 4-1: config 0 has no interface number 0 [ 89.709409][ T979] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 89.744367][ T979] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.766251][ T979] usb 4-1: Product: syz [ 89.770456][ T979] usb 4-1: Manufacturer: syz [ 89.772327][ T6058] loop4: detected capacity change from 0 to 32768 [ 89.781917][ T979] usb 4-1: SerialNumber: syz [ 89.820783][ T979] usb 4-1: config 0 descriptor?? [ 89.879097][ T979] smsc95xx v2.0.0 [ 90.030991][ T6052] loop2: detected capacity change from 0 to 40427 [ 90.072317][ T6052] F2FS-fs (loop2): heap/no_heap options were deprecated [ 90.136101][ T6052] F2FS-fs (loop2): build fault injection rate: 19 [ 90.153300][ T6052] F2FS-fs (loop2): build fault injection type: 0x3bfe8c [ 90.215423][ T6052] F2FS-fs (loop2): invalid crc value [ 90.283956][ T6052] F2FS-fs (loop2): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 90.501321][ T6052] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of read_node_folio+0x20a/0x3f0 [ 90.549397][ T6052] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 90.593703][ T6052] F2FS-fs (loop2): inject slab alloc in f2fs_kmem_cache_alloc of f2fs_new_node_folio+0x1d9/0xa40 [ 90.605981][ T30] audit: type=1800 audit(1751554104.172:3): pid=6052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.33" name="file1" dev="loop2" ino=10 res=0 errno=0 [ 90.613963][ T6052] F2FS-fs (loop2): inject no more block in inc_valid_block_count of f2fs_map_blocks+0x130e/0x4510 [ 90.646325][ T6052] syz.2.33: attempt to access beyond end of device [ 90.646325][ T6052] loop2: rw=34817, sector=45096, nr_sectors = 128 limit=40427 [ 90.662048][ T6052] F2FS-fs (loop2): inject inconsistent blkaddr in f2fs_truncate_data_blocks_range of f2fs_do_truncate_blocks+0x994/0x10c0 [ 90.714406][ T979] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 90.854772][ T5835] F2FS-fs (loop2): inject inconsistent footer in sanity_check_node_footer of f2fs_get_dnode_of_data+0xa20/0x1b50 [ 90.868820][ T5835] F2FS-fs (loop2): inconsistent node block, node_type:0, nid:12, node_footer[nid:12,ino:3,ofs:191576,cpver:0,blkaddr:0] [ 90.902517][ T979] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 90.975600][ T979] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 91.030490][ T979] usb 4-1: USB disconnect, device number 2 [ 91.212057][ T6089] netlink: 4 bytes leftover after parsing attributes in process `syz.4.37'. [ 91.363336][ T6085] loop0: detected capacity change from 0 to 32768 [ 91.412813][ T6085] XFS (loop0): Mounting V5 Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 91.459290][ T6085] XFS (loop0): Ending clean mount [ 91.470135][ T6085] XFS (loop0): Metadata CRC error detected at xfs_inobt_read_verify+0x42/0xe0, xfs_finobt block 0x20 [ 91.481550][ T6085] XFS (loop0): Unmount and run xfs_repair [ 91.487416][ T6085] XFS (loop0): First 128 bytes of corrupted metadata buffer: [ 91.495455][ T6085] 00000000: 46 49 42 33 00 00 00 01 ff ff ff ff ff ff ff ff FIB3............ [ 91.504397][ T6085] 00000010: 00 00 00 00 00 00 00 20 00 00 00 01 00 00 00 40 ....... .......@ [ 91.513261][ T6085] 00000020: 9f 1c ad 42 11 bd 4e 12 8f 0b f0 78 76 b8 1d 9a ...B..N....xv... [ 91.522208][ T6085] 00000030: 00 00 00 00 8a d2 18 46 00 00 16 80 00 00 40 37 .......F......@7 [ 91.531132][ T6085] 00000040: ff ff ff ff ff ff fe 00 00 00 00 00 00 00 00 00 ................ [ 91.540086][ T6085] 00000050: 00 00 00 00 00 00 00 00 00 00 00 00 00 09 00 00 ................ [ 91.549011][ T6085] 00000060: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.557923][ T6085] 00000070: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.569462][ T6085] XFS (loop0): metadata I/O error in "xfs_btree_read_buf_block+0x290/0x470" at daddr 0x20 len 8 error 74 [ 91.583112][ T6085] XFS (loop0): Failed to initialize disk quotas, err -117. [ 91.685157][ T5833] XFS (loop0): Unmounting Filesystem 9f1cad42-11bd-4e12-8f0b-f07876b81d9a [ 91.720765][ T6102] netlink: 4 bytes leftover after parsing attributes in process `syz.3.48'. [ 91.723174][ T5833] XFS (loop0): Uncorrected metadata errors detected; please run xfs_repair. [ 91.752897][ T6104] loop1: detected capacity change from 0 to 64 [ 91.912955][ T6106] loop4: detected capacity change from 0 to 2048 [ 91.926831][ T30] audit: type=1800 audit(1751554105.492:4): pid=6108 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.49" name="file2" dev="loop1" ino=19 res=0 errno=0 [ 92.005005][ T6106] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 92.176055][ T5204] udevd[5204]: worker [5881] terminated by signal 33 (Unknown signal 33) [ 92.214494][ T5204] udevd[5204]: worker [5881] failed while handling '/devices/virtual/block/loop4' [ 93.014897][ T24] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 93.276204][ T24] usb 1-1: config 2 has an invalid descriptor of length 0, skipping remainder of the config [ 93.328164][ T24] usb 1-1: New USB device found, idVendor=7a69, idProduct=0001, bcdDevice=a8.6b [ 93.341513][ T24] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 93.350208][ T24] usb 1-1: Product: syz [ 93.358405][ T24] usb 1-1: Manufacturer: syz [ 93.363033][ T24] usb 1-1: SerialNumber: syz [ 93.423582][ T24] usb 1-1: dvb_usb_v2: found a '774 Friio White ISDB-T USB2.0' in warm state [ 93.551975][ T6138] loop2: detected capacity change from 0 to 8192 [ 93.564837][ T5898] IPVS: starting estimator thread 0... [ 93.654249][ T6143] IPVS: using max 32 ests per chain, 76800 per kthread [ 93.661332][ T1151] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.004825][ T1151] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.249274][ T1151] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.430220][ T24] usb 1-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 94.449495][ T1151] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.482893][ T24] usb 1-1: USB disconnect, device number 2 [ 94.830236][ T1151] bridge_slave_1: left allmulticast mode [ 94.838732][ T1151] bridge_slave_1: left promiscuous mode [ 94.858797][ T1151] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.909635][ T1151] bridge_slave_0: left allmulticast mode [ 94.934262][ T1151] bridge_slave_0: left promiscuous mode [ 94.950373][ T1151] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.239606][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 95.249897][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 95.260746][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 95.345101][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 95.352940][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 95.512762][ T6157] loop0: detected capacity change from 0 to 32768 [ 95.554481][ T6147] loop4: detected capacity change from 0 to 40427 [ 95.592541][ T6147] F2FS-fs (loop4): Invalid log sectors per block(0) log sectorsize(9) [ 95.666968][ T6147] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 95.713037][ T6147] F2FS-fs (loop4): invalid crc value [ 95.784954][ T6157] bcachefs (loop0): starting version 1.7: mi_btree_bitmap opts=errors=continue,metadata_checksum=none,data_checksum=none,compression=lz4,foreground_target=invalid label 767,background_target=invalid device 7,nojournal_transaction_names [ 95.784981][ T6157] allowing incompatible features above 0.0: (unknown version) [ 95.784992][ T6157] features: lz4,new_siphash,inline_data,new_extent_overwrite,btree_ptr_v2,new_varint,journal_no_flush,alloc_v2,extents_across_btree_nodes [ 95.829690][ T6157] bcachefs (loop0): Using encoding defined by superblock: utf8-12.1.0 [ 95.837935][ T6157] bcachefs (loop0): initializing new filesystem [ 95.852640][ T6157] bcachefs (loop0): going read-write [ 95.924304][ T6157] bcachefs (loop0): marking superblocks [ 95.937774][ T6157] bcachefs (loop0): initializing freespace [ 95.952575][ T6157] bcachefs (loop0): done initializing freespace [ 95.962296][ T6157] bcachefs (loop0): reading snapshots table [ 95.968361][ T6157] bcachefs (loop0): reading snapshots done [ 96.032465][ T6157] bcachefs (loop0): done starting filesystem [ 96.311611][ T6149] loop2: detected capacity change from 0 to 40427 [ 96.351781][ T5833] bcachefs (loop0): shutting down [ 96.358469][ T6147] F2FS-fs (loop4): Start checkpoint disabled! [ 96.382942][ T5833] bcachefs (loop0): going read-only [ 96.398402][ T6149] F2FS-fs (loop2): Small segment_count (9 < 1 * 24) [ 96.420139][ T6147] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 96.434536][ T5833] bcachefs (loop0): finished waiting for writes to stop [ 96.442804][ T6149] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 96.467222][ T5833] bcachefs (loop0): flushing journal and stopping allocators, journal seq 3 [ 96.476069][ T6147] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 96.606504][ T5833] bcachefs (loop0): flushing journal and stopping allocators complete, journal seq 3 [ 96.652394][ T5833] bcachefs (loop0): clean shutdown complete, journal seq 4 [ 96.660431][ T3540] kworker/u8:10: attempt to access beyond end of device [ 96.660431][ T3540] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 96.698812][ T5833] bcachefs (loop0): marking filesystem clean [ 96.707683][ T3540] CPU: 1 UID: 0 PID: 3540 Comm: kworker/u8:10 Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 96.707714][ T3540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 96.707723][ T3540] Workqueue: writeback wb_workfn (flush-7:4) [ 96.707747][ T3540] Call Trace: [ 96.707754][ T3540] [ 96.707761][ T3540] dump_stack_lvl+0x189/0x250 [ 96.707788][ T3540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.707808][ T3540] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 96.707828][ T3540] ? __pfx_queue_work_on+0x10/0x10 [ 96.707846][ T3540] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 96.707867][ T3540] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.707889][ T3540] ? f2fs_hw_is_readonly+0x39b/0x470 [ 96.707915][ T3540] f2fs_handle_critical_error+0x37c/0x540 [ 96.707934][ T3540] f2fs_write_end_io+0x495/0x810 [ 96.707950][ T3540] ? blkg_put+0x22/0x240 [ 96.707977][ T3540] __submit_merged_bio+0x27a/0x6a0 [ 96.707997][ T3540] __submit_merged_write_cond+0x255/0x530 [ 96.708018][ T3540] f2fs_write_data_pages+0x261d/0x3000 [ 96.708064][ T3540] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.708126][ T3540] ? __lock_acquire+0xab9/0xd20 [ 96.708191][ T3540] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 96.708209][ T3540] do_writepages+0x32e/0x550 [ 96.708233][ T3540] ? reacquire_held_locks+0x127/0x1d0 [ 96.708251][ T3540] ? writeback_sb_inodes+0x384/0x1010 [ 96.708269][ T6149] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 96.708279][ T3540] __writeback_single_inode+0x145/0xff0 [ 96.708300][ T3540] ? do_raw_spin_unlock+0x122/0x240 [ 96.708317][ T3540] writeback_sb_inodes+0x6c7/0x1010 [ 96.708357][ T3540] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 96.708421][ T3540] ? rcu_is_watching+0x15/0xb0 [ 96.708451][ T3540] wb_writeback+0x43b/0xaf0 [ 96.708481][ T3540] ? queue_io+0x3a1/0x590 [ 96.708505][ T3540] ? __pfx_wb_writeback+0x10/0x10 [ 96.708535][ T3540] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.708563][ T3540] wb_workfn+0x409/0xef0 [ 96.708597][ T3540] ? __pfx_wb_workfn+0x10/0x10 [ 96.708625][ T3540] ? __lock_acquire+0xab9/0xd20 [ 96.708654][ T3540] ? process_scheduled_works+0x9ef/0x17b0 [ 96.708682][ T3540] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.708707][ T3540] ? process_scheduled_works+0x9ef/0x17b0 [ 96.708726][ T3540] ? process_scheduled_works+0x9ef/0x17b0 [ 96.708748][ T3540] process_scheduled_works+0xae1/0x17b0 [ 96.708798][ T3540] ? __pfx_process_scheduled_works+0x10/0x10 [ 96.708837][ T3540] worker_thread+0x8a0/0xda0 [ 96.708861][ T3540] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 96.708898][ T3540] ? __kthread_parkme+0x7b/0x200 [ 96.708930][ T3540] kthread+0x70e/0x8a0 [ 96.708949][ T3540] ? __pfx_worker_thread+0x10/0x10 [ 96.708969][ T3540] ? __pfx_kthread+0x10/0x10 [ 96.708987][ T3540] ? _raw_spin_unlock_irq+0x23/0x50 [ 96.709009][ T3540] ? lockdep_hardirqs_on+0x9c/0x150 [ 96.709032][ T3540] ? __pfx_kthread+0x10/0x10 [ 96.709048][ T3540] ret_from_fork+0x3fc/0x770 [ 96.709072][ T3540] ? __pfx_ret_from_fork+0x10/0x10 [ 96.709100][ T3540] ? __switch_to_asm+0x39/0x70 [ 96.709115][ T3540] ? __switch_to_asm+0x33/0x70 [ 96.709129][ T3540] ? __pfx_kthread+0x10/0x10 [ 96.709146][ T3540] ret_from_fork_asm+0x1a/0x30 [ 96.709178][ T3540] [ 96.709187][ T3540] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 96.910061][ T6149] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 96.970988][ T6180] loop3: detected capacity change from 0 to 32768 [ 97.055635][ T6149] syz.2.68: attempt to access beyond end of device [ 97.055635][ T6149] loop2: rw=2049, sector=53248, nr_sectors = 8 limit=40427 [ 97.064976][ T6180] btrfs: Deprecated parameter 'usebackuproot' [ 97.082047][ T6180] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.115717][ T5833] bcachefs (loop0): shutdown complete [ 97.127970][ T6180] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.71 (6180) [ 97.159810][ T6180] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.203178][ T6180] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 97.234514][ T6180] BTRFS info (device loop3): using free-space-tree [ 97.235078][ T5835] syz-executor: attempt to access beyond end of device [ 97.235078][ T5835] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 97.293061][ T5835] CPU: 0 UID: 0 PID: 5835 Comm: syz-executor Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 97.293089][ T5835] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 97.293099][ T5835] Call Trace: [ 97.293107][ T5835] [ 97.293115][ T5835] dump_stack_lvl+0x189/0x250 [ 97.293148][ T5835] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.293170][ T5835] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 97.293194][ T5835] ? __pfx_queue_work_on+0x10/0x10 [ 97.293220][ T5835] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 97.293244][ T5835] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 97.293269][ T5835] ? f2fs_hw_is_readonly+0x39b/0x470 [ 97.293296][ T5835] f2fs_handle_critical_error+0x37c/0x540 [ 97.293326][ T5835] f2fs_write_end_io+0x495/0x810 [ 97.293346][ T5835] ? blkg_put+0x22/0x240 [ 97.293385][ T5835] __submit_merged_bio+0x27a/0x6a0 [ 97.293414][ T5835] __submit_merged_write_cond+0x255/0x530 [ 97.293445][ T5835] f2fs_write_data_pages+0x261d/0x3000 [ 97.293511][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.293548][ T5835] ? arch_stack_walk+0xfc/0x150 [ 97.293619][ T5835] ? __mod_zone_page_state+0xd7/0x140 [ 97.293656][ T5835] ? folios_put_refs+0x560/0x640 [ 97.293689][ T5835] ? __pfx_folios_put_refs+0x10/0x10 [ 97.293706][ T5835] ? rcu_is_watching+0x15/0xb0 [ 97.293740][ T5835] ? __lock_acquire+0xab9/0xd20 [ 97.293782][ T5835] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 97.293806][ T5835] do_writepages+0x32e/0x550 [ 97.293842][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 97.293866][ T5835] filemap_fdatawrite+0x199/0x240 [ 97.293890][ T5835] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 97.293974][ T5835] ? do_raw_spin_unlock+0x122/0x240 [ 97.293997][ T5835] f2fs_sync_dirty_inodes+0x31f/0x830 [ 97.294041][ T5835] f2fs_write_checkpoint+0x95a/0x1df0 [ 97.294091][ T5835] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 97.294168][ T5835] ? call_rcu+0x6ff/0x9c0 [ 97.294187][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.294212][ T5835] ? kill_f2fs_super+0x298/0x6c0 [ 97.294240][ T5835] kill_f2fs_super+0x2c3/0x6c0 [ 97.294269][ T5835] ? __pfx_kill_f2fs_super+0x10/0x10 [ 97.294289][ T5835] ? radix_tree_delete_item+0x2b6/0x400 [ 97.294323][ T5835] ? shrinker_free+0x2ce/0x3e0 [ 97.294346][ T5835] deactivate_locked_super+0xb9/0x130 [ 97.294371][ T5835] cleanup_mnt+0x425/0x4c0 [ 97.294391][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.294419][ T5835] task_work_run+0x1d1/0x260 [ 97.294442][ T5835] ? __pfx_task_work_run+0x10/0x10 [ 97.294457][ T5835] ? __x64_sys_umount+0x122/0x160 [ 97.294487][ T5835] ? exit_to_user_mode_loop+0x40/0x110 [ 97.294512][ T5835] exit_to_user_mode_loop+0xec/0x110 [ 97.294533][ T5835] do_syscall_64+0x2bd/0x3b0 [ 97.294548][ T5835] ? lockdep_hardirqs_on+0x9c/0x150 [ 97.294578][ T5835] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.294595][ T5835] ? clear_bhb_loop+0x60/0xb0 [ 97.294618][ T5835] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.294634][ T5835] RIP: 0033:0x7fe78d78fc57 [ 97.294661][ T5835] Code: a8 ff ff ff f7 d8 64 89 01 48 83 c8 ff c3 0f 1f 44 00 00 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 a8 ff ff ff f7 d8 64 89 02 b8 [ 97.294674][ T5835] RSP: 002b:00007ffd270e56e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 97.294693][ T5835] RAX: 0000000000000000 RBX: 00007fe78d810925 RCX: 00007fe78d78fc57 [ 97.294705][ T5835] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd270e57a0 [ 97.294716][ T5835] RBP: 00007ffd270e57a0 R08: 0000000000000000 R09: 0000000000000000 [ 97.294726][ T5835] R10: 00000000ffffffff R11: 0000000000000246 R12: 00007ffd270e6830 [ 97.294737][ T5835] R13: 00007fe78d810925 R14: 0000000000017b75 R15: 00007ffd270e6870 [ 97.294772][ T5835] [ 97.669940][ T1151] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.670784][ T5154] Bluetooth: hci3: command tx timeout [ 97.691314][ T1151] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.695524][ T5835] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 97.715554][ T1151] bond0 (unregistering): Released all slaves [ 97.846939][ T3540] BTRFS warning (device loop3): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0x26333c6f level 0 [ 97.941801][ T6180] BTRFS warning (device loop3): couldn't read tree root [ 97.950200][ T6180] BTRFS warning (device loop3): try to load backup roots slot 1 [ 97.965346][ T2993] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x78ca8373 level 0 [ 98.026601][ T6180] BTRFS warning (device loop3): couldn't read tree root [ 98.033686][ T6180] BTRFS warning (device loop3): try to load backup roots slot 2 [ 98.057333][ T13] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 98.115155][ T6180] BTRFS warning (device loop3): couldn't read tree root [ 98.123265][ T6180] BTRFS warning (device loop3): try to load backup roots slot 3 [ 98.254394][ T6180] BTRFS info (device loop3): rebuilding free space tree [ 98.470180][ T6180] BTRFS info (device loop3): checking UUID tree [ 98.806690][ T6215] loop4: detected capacity change from 0 to 32768 [ 98.845427][ T6215] [ 98.845427][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.845427][ T6215] [ 98.865850][ T6215] [ 98.865850][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.865850][ T6215] [ 98.876691][ T6215] [ 98.876691][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.876691][ T6215] [ 98.887164][ T6215] [ 98.887164][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.887164][ T6215] [ 98.897688][ T6215] [ 98.897688][ T6215] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.897688][ T6215] [ 98.929415][ T112] [ 98.929415][ T112] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.929415][ T112] [ 98.930330][ T5830] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.973829][ T5837] [ 98.973829][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 98.973829][ T5837] [ 99.036649][ T5837] [ 99.036649][ T5837] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 99.036649][ T5837] [ 99.277673][ T6230] netlink: 104 bytes leftover after parsing attributes in process `syz.4.76'. [ 99.581133][ T6236] loop2: detected capacity change from 0 to 1024 [ 99.690866][ T6239] loop4: detected capacity change from 0 to 2048 [ 99.730958][ T1151] hsr_slave_0: left promiscuous mode [ 99.737428][ T5154] Bluetooth: hci3: command tx timeout [ 99.807761][ T1151] hsr_slave_1: left promiscuous mode [ 99.831180][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.856310][ T5204] udevd[5204]: worker [6059] terminated by signal 33 (Unknown signal 33) [ 99.864029][ T6239] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 99.889876][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.919279][ T1151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.934901][ T1151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.944824][ T5204] udevd[5204]: worker [6059] failed while handling '/devices/virtual/block/loop2' [ 99.984806][ T5204] udevd[5204]: worker [5968] terminated by signal 33 (Unknown signal 33) [ 100.011085][ T5204] udevd[5204]: worker [5968] failed while handling '/devices/virtual/block/loop4' [ 100.045695][ T59] hfsplus: b-tree write err: -5, ino 4 [ 100.053151][ T1151] veth1_macvtap: left promiscuous mode [ 100.061010][ T6239] EXT4-fs error (device loop4): ext4_validate_block_bitmap:441: comm syz.4.78: bg 0: block 234: padding at end of block bitmap is not set [ 100.108438][ T1151] veth0_macvtap: left promiscuous mode [ 100.142742][ T1151] veth1_vlan: left promiscuous mode [ 100.148657][ T6239] EXT4-fs (loop4): Remounting filesystem read-only [ 100.168947][ T1151] veth0_vlan: left promiscuous mode [ 100.294607][ T5906] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 100.322887][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.457578][ T5906] usb 4-1: too many configurations: 9, using maximum allowed: 8 [ 100.476875][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.500625][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.530068][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.609593][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.644251][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.693375][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.732552][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.752244][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.788872][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.805823][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.834128][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.864181][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.877447][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 100.894136][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 100.954166][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 100.984293][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.010668][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.019063][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.034147][ T30] audit: type=1326 audit(1751554114.592:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.064547][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.074013][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 101.101061][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.108761][ T30] audit: type=1326 audit(1751554114.622:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.135856][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.545618][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.546612][ T30] audit: type=1326 audit(1751554114.622:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.582645][ T30] audit: type=1326 audit(1751554114.632:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.672674][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.711829][ T5906] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 101.787281][ T30] audit: type=1326 audit(1751554114.632:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.787971][ T5906] usb 4-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 101.821882][ T5154] Bluetooth: hci3: command tx timeout [ 101.872264][ T30] audit: type=1326 audit(1751554114.632:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 101.958216][ T5906] usb 4-1: config 0 interface 0 has no altsetting 0 [ 101.997653][ T30] audit: type=1326 audit(1751554114.632:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6257 comm="syz.2.84" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe78d78e929 code=0x7ffc0000 [ 102.061052][ T5906] usb 4-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 102.094135][ T5906] usb 4-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 102.102555][ T5906] usb 4-1: Product: syz [ 102.144835][ T5906] usb 4-1: Manufacturer: syz [ 102.149483][ T5906] usb 4-1: SerialNumber: syz [ 102.187865][ T5906] usb 4-1: config 0 descriptor?? [ 102.266765][ T5906] yurex 4-1:0.0: USB YUREX device now attached to Yurex #0 [ 102.535105][ C1] usb 4-1: yurex_control_callback - control failed: -71 [ 102.543985][ T5906] usb 4-1: USB disconnect, device number 3 [ 102.553502][ T6288] yurex 4-1:0.0: yurex_write - failed to send bulk msg, error -19 [ 102.553875][ T1151] team0 (unregistering): Port device team_slave_1 removed [ 102.566428][ T5906] yurex 4-1:0.0: USB YUREX #0 now disconnected [ 102.622111][ T1151] team0 (unregistering): Port device team_slave_0 removed [ 103.042242][ T6156] chnl_net:caif_netlink_parms(): no params data found [ 103.227161][ T6295] loop0: detected capacity change from 0 to 2048 [ 103.331165][ T6203] loop0: p1 < > p4 [ 103.351661][ T6203] loop0: p4 size 8388608 extends beyond EOD, truncated [ 103.392846][ T6295] loop0: p1 < > p4 [ 103.402547][ T6156] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.430485][ T6295] loop0: p4 size 8388608 extends beyond EOD, truncated [ 103.438415][ T6156] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.454947][ T6156] bridge_slave_0: entered allmulticast mode [ 103.489143][ T6156] bridge_slave_0: entered promiscuous mode [ 103.537461][ T6306] warning: `syz.3.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.588878][ T6156] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.617670][ T6156] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.664290][ T6156] bridge_slave_1: entered allmulticast mode [ 103.688618][ T6156] bridge_slave_1: entered promiscuous mode [ 103.745574][ T6308] loop4: detected capacity change from 0 to 2048 [ 103.763629][ T6308] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 103.866403][ T6246] udevd[6246]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 103.884903][ T6156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.886523][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 103.904348][ T5154] Bluetooth: hci3: command tx timeout [ 103.912923][ T6156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.040590][ T5882] udevd[5882]: inotify_add_watch(7, /dev/loop0p1, 10) failed: No such file or directory [ 104.049120][ T6246] udevd[6246]: inotify_add_watch(7, /dev/loop0p4, 10) failed: No such file or directory [ 104.247001][ T6319] loop0: detected capacity change from 0 to 2048 [ 104.275834][ T6156] team0: Port device team_slave_0 added [ 104.328263][ T6156] team0: Port device team_slave_1 added [ 104.359851][ T6319] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 104.480526][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.483990][ T6331] loop4: detected capacity change from 0 to 4096 [ 104.544271][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.643716][ T6331] ntfs3(loop4): failed to convert "0000" to iso8859-6 [ 104.664217][ T6156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.730387][ T6331] ntfs3(loop4): failed to convert "0030" to iso8859-6 [ 104.755926][ T6331] ntfs3(loop4): failed to convert name for inode 1e. [ 104.768539][ T6331] ntfs3(loop4): failed to convert "0032" to iso8859-6 [ 104.779403][ T6331] ntfs3(loop4): ino=1f, mi_enum_attr [ 104.805345][ T6156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.812340][ T6156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.814437][ T6331] ntfs3(loop4): Mark volume as dirty due to NTFS errors [ 104.894220][ T6156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.914806][ T6331] ntfs3(loop4): failed to convert "0033" to iso8859-6 [ 104.921814][ T6331] ntfs3(loop4): ino=1f, mi_enum_attr [ 105.481452][ T6331] ntfs3(loop4): failed to convert "0000" to iso8859-6 [ 105.488606][ T6331] ntfs3(loop4): failed to convert "0030" to iso8859-6 [ 105.644014][ T1022] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 105.696192][ T1022] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 105.719050][ T6156] hsr_slave_0: entered promiscuous mode [ 105.724495][ T1022] EXT4-fs (loop0): This should not happen!! Data will be lost [ 105.724495][ T1022] [ 105.748846][ T1022] EXT4-fs (loop0): Total free blocks count 0 [ 105.765524][ T6156] hsr_slave_1: entered promiscuous mode [ 105.768481][ T1022] EXT4-fs (loop0): Free/Dirty block details [ 105.771918][ T6156] debugfs: 'hsr0' already exists in 'hsr' [ 105.798557][ T1022] EXT4-fs (loop0): free_blocks=2415919504 [ 105.824302][ T6156] Cannot create hsr debugfs directory [ 105.831989][ T1022] EXT4-fs (loop0): dirty_blocks=8192 [ 105.870404][ T1022] EXT4-fs (loop0): Block reservation details [ 105.890918][ T1022] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 106.124378][ T1022] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 2048 with error 28 [ 106.528328][ T6364] loop2: detected capacity change from 0 to 64 [ 106.566575][ T6364] hfs: unable to locate alternate MDB [ 106.572253][ T6364] hfs: continuing without an alternate MDB [ 106.683243][ T6358] loop3: detected capacity change from 0 to 32768 [ 106.730728][ T6358] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.109 (6358) [ 106.792896][ T6358] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 106.842490][ T6368] loop0: detected capacity change from 0 to 2048 [ 106.850297][ T6358] BTRFS info (device loop3): using crc32c (crc32c-lib) checksum algorithm [ 106.885639][ T6358] BTRFS info (device loop3): disk space caching is enabled [ 106.913740][ T6358] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 106.974861][ T6368] EXT4-fs (loop0): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 108.175798][ T6358] BTRFS info (device loop3): rebuilding free space tree [ 108.331366][ T6358] BTRFS info (device loop3): disabling free space tree [ 108.382670][ T6358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 108.404241][ T6358] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 108.416849][ T36] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 108.465487][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 108.508614][ T36] EXT4-fs (loop0): This should not happen!! Data will be lost [ 108.508614][ T36] [ 108.554468][ T6361] loop4: detected capacity change from 0 to 32768 [ 108.572785][ T36] EXT4-fs (loop0): Total free blocks count 0 [ 108.678404][ T36] EXT4-fs (loop0): Free/Dirty block details [ 108.690685][ T6361] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 108.777982][ T6361] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 108.778123][ T36] EXT4-fs (loop0): free_blocks=2415919504 [ 108.883661][ T36] EXT4-fs (loop0): dirty_blocks=8192 [ 108.985121][ T36] EXT4-fs (loop0): Block reservation details [ 109.019310][ T36] EXT4-fs (loop0): i_reserved_data_blocks=512 [ 109.259352][ T36] EXT4-fs (loop0): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 2048 with error 28 [ 109.289673][ T6361] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 109.349860][ T24] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 109.364742][ T24] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 109.531457][ T5830] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 109.796599][ T24] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 431ms [ 109.900496][ T24] gfs2: fsid=syz:syz.0: jid=0: Done [ 109.951048][ T6361] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 109.999344][ T6361] gfs2: fsid=syz:syz.0: can't create quotad thread: -4 [ 110.120961][ T6156] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 110.183818][ T6156] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 110.337756][ T6156] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 110.421571][ T6156] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 110.976875][ T6156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.083655][ T6156] 8021q: adding VLAN 0 to HW filter on device team0 [ 111.140751][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 111.148732][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 111.221525][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 111.228752][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.074691][ T6434] loop2: detected capacity change from 0 to 32768 [ 112.171787][ T6434] XFS (loop2): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 112.315580][ T6434] XFS (loop2): Ending clean mount [ 112.684626][ T6434] XFS (loop2): Quotacheck needed: Please wait. [ 112.908463][ T6434] XFS (loop2): Quotacheck: Done. [ 113.075170][ T5835] XFS (loop2): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 113.631763][ T6458] loop4: detected capacity change from 0 to 40427 [ 113.677375][ T6458] F2FS-fs (loop4): build fault injection rate: 4 [ 113.686569][ T6458] F2FS-fs (loop4): Image doesn't support compression [ 113.693335][ T6458] F2FS-fs (loop4): build fault injection type: 0x2ac [ 113.789197][ T6458] F2FS-fs (loop4): invalid crc value [ 113.829940][ T6458] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 113.862526][ T6458] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 113.893653][ T6458] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 113.921132][ T6458] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_ra_meta_pages+0x615/0x970 [ 114.012332][ T6458] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of __get_meta_folio+0x157/0x4f0 [ 114.113860][ T6458] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 114.159397][ T5837] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0 [ 114.171059][ T6506] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 114.176871][ T5837] F2FS-fs (loop4): inject page alloc in f2fs_grab_cache_folio of f2fs_grab_meta_folio+0x6a/0x1d0 [ 114.731533][ T6518] netlink: 16 bytes leftover after parsing attributes in process `syz.4.132'. [ 114.789178][ T6520] netlink: 4 bytes leftover after parsing attributes in process `syz.4.132'. [ 116.344266][ T24] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 116.598433][ T24] usb 5-1: config 116 has too many interfaces: 119, using maximum allowed: 32 [ 116.660046][ T24] usb 5-1: config 116 has an invalid descriptor of length 169, skipping remainder of the config [ 116.804115][ T24] usb 5-1: config 116 has 0 interfaces, different from the descriptor's value: 119 [ 117.202904][ T30] audit: type=1400 audit(1751554130.612:12): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=6553 comm="syz.0.141" [ 117.534432][ T24] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 117.543601][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 117.583912][ T24] usb 5-1: Product: syz [ 117.693649][ T24] usb 5-1: Manufacturer: syz [ 117.744391][ T24] usb 5-1: SerialNumber: syz [ 117.809192][ T6156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 117.851056][ T6562] loop0: detected capacity change from 0 to 512 [ 117.987258][ T6562] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 117.999941][ T6562] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.111394][ T6156] veth0_vlan: entered promiscuous mode [ 118.154276][ T24] usb 5-1: USB disconnect, device number 2 [ 118.208312][ T6156] veth1_vlan: entered promiscuous mode [ 118.327134][ T6156] veth0_macvtap: entered promiscuous mode [ 118.358061][ T6156] veth1_macvtap: entered promiscuous mode [ 118.430900][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.443634][ T6544] loop2: detected capacity change from 0 to 32768 [ 118.459879][ T6544] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.140 (6544) [ 118.499629][ T6156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.536986][ T6544] BTRFS info (device loop2): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 118.548679][ T1022] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.550478][ T6544] BTRFS info (device loop2): using sha256 (sha256-x86_64) checksum algorithm [ 118.568880][ T6544] BTRFS info (device loop2): disk space caching is enabled [ 118.582025][ T6544] BTRFS warning (device loop2): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 118.594346][ T1022] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.609482][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.639314][ T1022] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.697054][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.894691][ T6544] BTRFS info (device loop2): rebuilding free space tree [ 118.956799][ T6544] BTRFS info (device loop2): disabling free space tree [ 118.974705][ T6544] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 119.000944][ T6544] BTRFS info (device loop2): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 119.016465][ T3540] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.030257][ T3540] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.207454][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.247160][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.348709][ T5835] BTRFS info (device loop2): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 120.096665][ T6575] loop3: detected capacity change from 0 to 32768 [ 120.132895][ T6575] XFS: attr2 mount option is deprecated. [ 120.176742][ T6575] XFS: ikeep mount option is deprecated. [ 120.417311][ T6575] XFS (loop3): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.428772][ T6575] XFS (loop3): Ending clean mount [ 121.460497][ T6575] XFS (loop3): Quotacheck needed: Please wait. [ 121.491023][ T6636] overlayfs: metacopy with no lower data found - abort lookup (/bus) [ 121.500961][ T6644] netlink: 8 bytes leftover after parsing attributes in process `syz.4.153'. [ 121.596241][ T6647] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 121.598669][ T36] bond0: (slave bond_slave_0): interface is now down [ 121.644236][ T6575] XFS (loop3): Quotacheck: Done. [ 121.650300][ T36] bond0: (slave bond_slave_1): interface is now down [ 121.695309][ T59] bond0: (slave bond_slave_0): interface is now down [ 121.726222][ T59] bond0: (slave bond_slave_1): interface is now down [ 121.780671][ T5830] XFS (loop3): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 121.796120][ T59] bond0: now running without any active interface! [ 121.819579][ T6653] loop2: detected capacity change from 0 to 128 [ 121.915182][ T6653] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 122.049568][ T6653] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 122.220294][ T30] audit: type=1804 audit(1751554135.762:13): pid=6653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.154" name="/newroot/39/file0/bus" dev="loop2" ino=115 res=1 errno=0 [ 123.475899][ T6681] loop0: detected capacity change from 0 to 64 [ 126.050000][ T979] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 126.384147][ T979] usb 5-1: Using ep0 maxpacket: 8 [ 126.393898][ T979] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.409185][ T979] usb 5-1: config 0 has no interfaces? [ 126.414947][ T979] usb 5-1: New USB device found, idVendor=0755, idProduct=2626, bcdDevice= 0.00 [ 126.424198][ T979] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.448852][ T979] usb 5-1: config 0 descriptor?? [ 126.676868][ T979] usb 5-1: USB disconnect, device number 3 [ 126.955477][ T5906] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 127.149369][ T5906] usb 3-1: Using ep0 maxpacket: 8 [ 127.183821][ T5906] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 127.196893][ T5906] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.210055][ T5906] usb 3-1: Product: syz [ 127.216136][ T5906] usb 3-1: Manufacturer: syz [ 127.220950][ T5906] usb 3-1: SerialNumber: syz [ 127.466424][ T5906] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 127.872157][ T5154] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 127.999204][ T6797] loop0: detected capacity change from 0 to 512 [ 128.477049][ T6797] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000d40000 r/w without journal. Quota mode: writeback. [ 128.505349][ T6797] ext4 filesystem being mounted at /40/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 128.614690][ T24] usb 3-1: USB disconnect, device number 2 [ 128.632307][ T24] usblp0: removed [ 128.726097][ T6812] loop3: detected capacity change from 0 to 164 [ 128.803709][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000d40000. [ 128.863549][ T6815] loop1: detected capacity change from 0 to 2048 [ 128.919563][ T6815] EXT4-fs (loop1): mounted filesystem 00000800-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 129.075895][ T6826] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 129.102742][ T6826] team0: Port device dummy0 added [ 129.112590][ T6156] EXT4-fs (loop1): unmounting filesystem 00000800-0000-0000-0000-000000000000. [ 129.119871][ T6826] netlink: 'syz.0.194': attribute type 10 has an invalid length. [ 129.156027][ T6826] team0: Port device dummy0 removed [ 129.192376][ T6826] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 130.808012][ T6851] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 131.484170][ T24] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 131.638184][ T6859] loop1: detected capacity change from 0 to 2048 [ 131.765527][ T24] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 131.783243][ T6859] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 131.784122][ T24] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 131.999250][ T24] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 253 [ 132.038310][ T24] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 132.049826][ T24] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 132.072461][ T24] usb 3-1: Manufacturer: syz [ 132.093615][ T24] usb 3-1: config 0 descriptor?? [ 132.126538][ T24] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 132.262447][ T5154] block nbd3: Receive control failed (result -107) [ 132.344283][ T6871] block nbd3: shutting down sockets [ 132.420847][ T24] usb 3-1: USB disconnect, device number 3 [ 132.874806][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.881153][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.024631][ T24] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 133.194169][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 133.214302][ T24] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 133.253486][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 133.294201][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 133.303977][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 133.361689][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 133.407490][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 133.449878][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.657850][ T6880] loop4: detected capacity change from 0 to 8192 [ 133.978263][ T24] usb 4-1: usb_control_msg returned -32 [ 133.996494][ T24] usbtmc 4-1:16.0: can't read capabilities [ 134.000132][ T2956] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 134.030874][ T2956] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 134.044269][ T2956] EXT4-fs (loop1): This should not happen!! Data will be lost [ 134.044269][ T2956] [ 134.062387][ T2956] EXT4-fs (loop1): Total free blocks count 0 [ 134.068660][ T2956] EXT4-fs (loop1): Free/Dirty block details [ 134.074947][ T2956] EXT4-fs (loop1): free_blocks=2415919504 [ 134.080783][ T2956] EXT4-fs (loop1): dirty_blocks=4096 [ 134.089495][ T6884] loop0: detected capacity change from 0 to 512 [ 134.104111][ T2956] EXT4-fs (loop1): Block reservation details [ 134.120096][ T6884] EXT4-fs (loop0): VFS: Can't find ext4 filesystem [ 134.129587][ T2956] EXT4-fs (loop1): i_reserved_data_blocks=256 [ 134.442134][ T6892] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input5 [ 134.475041][ T1022] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 1024 with error 28 [ 134.490904][ T6890] usbtmc 4-1:16.0: usb_control_msg returned -32 [ 134.605097][ T979] usb 4-1: USB disconnect, device number 4 [ 137.188277][ T6926] input: syz0 as /devices/virtual/input/input6 [ 137.643474][ T6925] process 'syz.1.224' launched '/dev/fd/3' with NULL argv: empty string added [ 139.842014][ T5931] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 140.396335][ T5931] usb 4-1: Using ep0 maxpacket: 16 [ 140.411997][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.496480][ T5931] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 140.506604][ T5931] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 140.524142][ T5931] usb 4-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 140.533286][ T5931] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 140.584767][ T5931] usb 4-1: config 0 descriptor?? [ 141.830671][ T5931] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 141.874140][ T5931] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 141.996462][ T5931] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 142.442700][ T5931] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 142.470298][ T5931] shield 0003:0955:7214.0001: unknown main item tag 0x0 [ 142.503087][ T5931] input: HID 0955:7214 Haptics as /devices/virtual/input/input7 [ 142.568128][ T6965] loop4: detected capacity change from 0 to 256 [ 142.776498][ T5931] shield 0003:0955:7214.0001: Registered Thunderstrike controller [ 142.788132][ T5931] shield 0003:0955:7214.0001: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.3-1/input0 [ 142.801204][ T6965] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 142.881754][ T6972] loop1: detected capacity change from 0 to 64 [ 143.405450][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 143.455864][ T5931] usb 4-1: USB disconnect, device number 5 [ 143.473265][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 143.558617][ T6965] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 143.560724][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 143.600603][ T10] shield 0003:0955:7214.0001: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 145.512708][ T6985] loop1: detected capacity change from 0 to 40427 [ 145.573427][ T6985] F2FS-fs (loop1): Invalid segment count (1) [ 145.579878][ T6985] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 145.607080][ T6985] F2FS-fs (loop1): heap/no_heap options were deprecated [ 145.629168][ T6985] F2FS-fs (loop1): invalid crc value [ 146.281905][ T6985] F2FS-fs (loop1): Try to recover 1th superblock, ret: -30 [ 146.289313][ T6985] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 152.298115][ T7037] loop1: detected capacity change from 0 to 512 [ 152.812927][ T3487] Bluetooth: Error in BCSP hdr checksum [ 153.039640][ T7037] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #17: comm syz.1.254: iget: bogus i_mode (0) [ 153.055851][ T5931] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 153.141730][ T13] Bluetooth: Error in BCSP hdr checksum [ 153.185013][ T7037] EXT4-fs error (device loop1): ext4_orphan_get:1398: comm syz.1.254: couldn't read orphan inode 17 (err -117) [ 153.478821][ T7037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 153.691968][ T49] Bluetooth: Error in BCSP hdr checksum [ 153.701449][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 153.872104][ T49] Bluetooth: Error in BCSP hdr checksum [ 153.999476][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA6, changing to 0x86 [ 154.117003][ T3540] Bluetooth: Error in BCSP hdr checksum [ 154.169551][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 154.180579][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 154.191160][ T5931] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 154.205865][ T49] Bluetooth: Error in BCSP hdr checksum [ 154.214569][ T7037] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2848: Unable to expand inode 12. Delete some EAs or run e2fsck. [ 154.269357][ T5931] usb 1-1: New USB device found, idVendor=05ef, idProduct=020a, bcdDevice=91.36 [ 154.294249][ T5843] Bluetooth: hci5: command 0x1003 tx timeout [ 154.300190][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 154.301492][ T5154] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 154.494267][ T48] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 154.503640][ T3487] Bluetooth: Error in BCSP hdr checksum [ 154.509345][ T5931] usb 1-1: Product: syz [ 154.518740][ T5931] usb 1-1: Manufacturer: syz [ 154.529334][ T5931] usb 1-1: SerialNumber: syz [ 154.545290][ T5931] usb 1-1: config 0 descriptor?? [ 155.318759][ T59] Bluetooth: Error in BCSP hdr checksum [ 155.334718][ T7050] EXT4-fs error (device loop1): ext4_validate_block_bitmap:432: comm ext4lazyinit: bg 0: block 7: invalid block bitmap [ 155.347774][ T48] usb 2-1: Using ep0 maxpacket: 32 [ 155.419895][ T10] usb 1-1: USB disconnect, device number 3 [ 155.494555][ T48] usb 2-1: device descriptor read/all, error -71 [ 155.545966][ T6156] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 156.574508][ T10] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 156.799216][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 156.843967][ T10] usb 5-1: config index 0 descriptor too short (expected 35577, got 27) [ 156.879683][ T10] usb 5-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 156.910640][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 156.933814][ T10] usb 5-1: config 1 has no interface number 0 [ 156.949405][ T10] usb 5-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 157.011494][ T10] usb 5-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 157.156791][ T10] usb 5-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 157.368465][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.235672][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD found [ 158.465367][ T30] audit: type=1400 audit(1751554172.916:14): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=7109 comm="syz.3.270" [ 158.998159][ T10] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now attached [ 159.191815][ T48] usb 5-1: USB disconnect, device number 4 [ 159.459576][ T48] snd_usb_pod 5-1:1.1: Line 6 Pocket POD now disconnected [ 162.721145][ T7134] loop1: detected capacity change from 0 to 32768 [ 162.782038][ T7175] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 164.562600][ T7190] loop1: detected capacity change from 0 to 4096 [ 164.716535][ T7170] loop4: detected capacity change from 0 to 32768 [ 164.786774][ T7170] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.281 (7170) [ 165.547394][ T7203] loop0: detected capacity change from 0 to 256 [ 165.805178][ T30] audit: type=1326 audit(1751554180.286:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7194 comm="syz.2.287" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe78d78e929 code=0x7fc00000 [ 167.839051][ T7221] netlink: 'syz.4.292': attribute type 1 has an invalid length. [ 167.847044][ T7221] netlink: 168864 bytes leftover after parsing attributes in process `syz.4.292'. [ 170.403177][ T7219] syz.1.291 (7219) used greatest stack depth: 16184 bytes left [ 172.914272][ T5906] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 173.376020][ T5906] usb 4-1: Using ep0 maxpacket: 32 [ 173.387299][ T5906] usb 4-1: config 0 has an invalid interface number: 231 but max is 0 [ 173.464557][ T5906] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 174.087647][ T5906] usb 4-1: config 0 has no interface number 0 [ 174.486659][ T5906] usb 4-1: config 0 interface 231 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 174.497137][ T5906] usb 4-1: config 0 interface 231 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 174.517061][ T5906] usb 4-1: New USB device found, idVendor=d024, idProduct=5e5a, bcdDevice=16.a9 [ 174.526246][ T5906] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 174.534686][ T5906] usb 4-1: Product: syz [ 174.538866][ T5906] usb 4-1: Manufacturer: syz [ 174.543499][ T5906] usb 4-1: SerialNumber: syz [ 175.228716][ T5906] usb 4-1: config 0 descriptor?? [ 175.238683][ T7252] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 175.361836][ T5906] usb-storage 4-1:0.231: USB Mass Storage device detected [ 176.219203][ T5906] usb 4-1: USB disconnect, device number 6 [ 176.235365][ T7277] Zero length message leads to an empty skb [ 177.741412][ T5931] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 178.225057][ T5931] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 178.261786][ T5931] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 178.312734][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.356897][ T5931] usb 1-1: config 0 descriptor?? [ 178.391653][ T5931] pwc: Askey VC010 type 2 USB webcam detected. [ 179.210195][ T5931] pwc: recv_control_msg error -32 req 02 val 2b00 [ 179.324453][ T5931] pwc: recv_control_msg error -32 req 02 val 2700 [ 179.332862][ T5931] pwc: recv_control_msg error -32 req 02 val 2c00 [ 179.348016][ T5931] pwc: recv_control_msg error -32 req 04 val 1000 [ 179.414202][ T5931] pwc: recv_control_msg error -32 req 04 val 1300 [ 179.467911][ T5931] pwc: recv_control_msg error -32 req 04 val 1400 [ 179.532990][ T5931] pwc: recv_control_msg error -32 req 02 val 2000 [ 179.873448][ T5931] pwc: recv_control_msg error -32 req 02 val 2100 [ 179.889151][ T5931] pwc: recv_control_msg error -32 req 04 val 1500 [ 180.024321][ T5931] pwc: recv_control_msg error -32 req 02 val 2500 [ 180.994389][ T5931] pwc: recv_control_msg error -71 req 02 val 2600 [ 181.319385][ T5931] pwc: recv_control_msg error -71 req 02 val 2900 [ 181.351831][ T5931] pwc: recv_control_msg error -71 req 02 val 2800 [ 181.380664][ T5931] pwc: recv_control_msg error -71 req 04 val 1100 [ 182.580851][ T5931] pwc: recv_control_msg error -71 req 04 val 1200 [ 182.594987][ T5931] pwc: Registered as video103. [ 182.604089][ T5931] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 182.760096][ T5931] usb 1-1: USB disconnect, device number 4 [ 183.207394][ T7341] loop4: detected capacity change from 0 to 2048 [ 184.432543][ T7341] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 184.774382][ T5931] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 185.707243][ T5931] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 185.728153][ T5931] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 185.747551][ T5931] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 185.770057][ T5931] usb 1-1: Product: syz [ 185.858963][ T7370] Invalid source name [ 185.863048][ T7370] UBIFS error (pid: 7370): cannot open "./file0", error -22 [ 186.449912][ T5931] usb 1-1: Manufacturer: syz [ 186.481013][ T5931] usb 1-1: SerialNumber: syz [ 186.635693][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 187.880473][ T5931] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 5 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 188.171454][ T5931] usb 1-1: USB disconnect, device number 5 [ 188.258018][ T5931] usblp0: removed [ 189.243670][ T5906] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 189.734914][ T5906] usb 5-1: too many configurations: 9, using maximum allowed: 8 [ 189.754156][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 189.945122][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 189.956676][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.318015][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.337805][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.349474][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.361302][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.379696][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.401818][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.415671][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.432922][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.454279][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.462225][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.489267][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.508762][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.549154][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.559640][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.691151][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.705352][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.764202][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.861558][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 190.871226][ T5906] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 190.894690][ T5906] usb 5-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 190.912056][ T7416] netlink: 'syz.3.339': attribute type 1 has an invalid length. [ 190.920628][ T5906] usb 5-1: config 0 interface 0 has no altsetting 0 [ 191.491116][ T7416] 8021q: adding VLAN 0 to HW filter on device bond1 [ 191.534442][ T5906] usb 5-1: string descriptor 0 read error: -71 [ 191.584559][ T5906] usb 5-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 191.878742][ T5906] usb 5-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 191.905003][ T5906] usb 5-1: config 0 descriptor?? [ 191.965542][ T7425] xt_cgroup: invalid path, errno=-2 [ 192.719918][ T30] audit: type=1400 audit(1751554207.006:16): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=7422 comm="syz.2.342" [ 192.873123][ T5906] usb 5-1: can't set config #0, error -71 [ 193.705776][ T7417] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.910018][ T5906] usb 5-1: USB disconnect, device number 5 [ 193.934737][ T7417] bond1: (slave ipip0): The slave device specified does not support setting the MAC address [ 194.186185][ T7430] loop4: detected capacity change from 0 to 2048 [ 194.193222][ T7417] bond1: (slave ipip0): Error -95 calling set_mac_address [ 194.448592][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.455677][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.175176][ T7430] EXT4-fs (loop4): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 195.242704][ T7416] bond1: (slave ip6erspan0): making interface the new active one [ 195.317077][ T7416] bond1: (slave ip6erspan0): Enslaving as an active interface with an up link [ 195.397587][ T7441] netlink: 8 bytes leftover after parsing attributes in process `syz.2.344'. [ 195.894262][ T7438] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 196.367498][ T7451] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 198.093343][ T5837] EXT4-fs (loop4): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 200.096038][ T7465] loop2: detected capacity change from 0 to 4096 [ 201.178991][ T7465] NILFS (loop2): error -4 creating segctord thread [ 201.976966][ T7481] loop0: detected capacity change from 0 to 40427 [ 201.987358][ T5848] Bluetooth: hci1: command 0x0406 tx timeout [ 201.993540][ T5848] Bluetooth: hci4: command 0x0405 tx timeout [ 202.000037][ T5848] Bluetooth: hci0: command 0x0406 tx timeout [ 202.006406][ T5848] Bluetooth: hci2: command 0x0406 tx timeout [ 202.035003][ T7481] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 202.042831][ T7481] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 202.065183][ T7481] F2FS-fs (loop0): invalid crc value [ 202.413923][ T7487] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 202.590311][ T7481] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 202.597717][ T7481] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 204.118689][ T7518] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 209.775054][ T5906] usb 5-1: new full-speed USB device number 6 using dummy_hcd [ 209.831214][ T7559] lo speed is unknown, defaulting to 1000 [ 209.839407][ T7559] lo speed is unknown, defaulting to 1000 [ 209.863555][ T7559] lo speed is unknown, defaulting to 1000 [ 209.927504][ T7559] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 210.127693][ T7559] infiniband s: RDMA CMA: cma_listen_on_dev, error -98 [ 210.281359][ T7559] lo speed is unknown, defaulting to 1000 [ 210.290527][ T7559] lo speed is unknown, defaulting to 1000 [ 210.297876][ T7559] lo speed is unknown, defaulting to 1000 [ 210.308022][ T7559] lo speed is unknown, defaulting to 1000 [ 210.316104][ T7559] lo speed is unknown, defaulting to 1000 [ 210.615921][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 210.642035][ T5906] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 210.662591][ T5906] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a5, bcdDevice= 0.40 [ 210.685387][ T5906] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 210.702354][ T5906] usb 5-1: SerialNumber: syz [ 210.933904][ T5906] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -22 [ 210.946933][ T5906] usb-storage 5-1:1.0: USB Mass Storage device detected [ 210.985647][ T5906] usb-storage 5-1:1.0: Quirks match for vid 0525 pid a4a5: 10000 [ 211.005090][ T5906] scsi host1: usb-storage 5-1:1.0 [ 212.343263][ T5906] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 212.604242][ T5906] usb 3-1: Using ep0 maxpacket: 16 [ 213.021097][ T5906] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 213.064111][ T5906] usb 3-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 213.090077][ T5965] usb 5-1: USB disconnect, device number 6 [ 213.096502][ T5906] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 213.127668][ T5906] usb 3-1: config 0 descriptor?? [ 213.139691][ T5906] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 213.180192][ T7583] loop1: detected capacity change from 0 to 2048 [ 213.300550][ T7583] EXT4-fs (loop1): mounted filesystem 00000000-0700-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 213.752776][ T7590] netlink: 4 bytes leftover after parsing attributes in process `syz.3.382'. [ 214.599996][ T7600] netlink: 'syz.2.378': attribute type 2 has an invalid length. [ 214.608140][ T7600] netlink: 244 bytes leftover after parsing attributes in process `syz.2.378'. [ 215.095852][ T7588] EXT4-fs error (device loop1): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 215.114153][ T7590] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.337309][ T7590] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.221829][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 2048 with error 28 [ 216.227546][ T979] usb 3-1: USB disconnect, device number 4 [ 217.289160][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 217.289160][ T13] [ 217.852285][ T13] EXT4-fs (loop1): Total free blocks count 0 [ 217.858508][ T13] EXT4-fs (loop1): Free/Dirty block details [ 217.864470][ T13] EXT4-fs (loop1): free_blocks=2415919504 [ 217.870212][ T13] EXT4-fs (loop1): dirty_blocks=8192 [ 217.898338][ T13] EXT4-fs (loop1): Block reservation details [ 217.919227][ T13] EXT4-fs (loop1): i_reserved_data_blocks=512 [ 218.308765][ T13] EXT4-fs (loop1): Delayed block allocation failed for inode 18 at logical offset 3072 with max blocks 2048 with error 28 [ 218.339801][ T13] EXT4-fs (loop1): This should not happen!! Data will be lost [ 218.339801][ T13] [ 219.312350][ T13] EXT4-fs (loop1): Total free blocks count 0 [ 219.334799][ T13] EXT4-fs (loop1): Free/Dirty block details [ 219.344210][ T13] EXT4-fs (loop1): free_blocks=2415919504 [ 219.349958][ T13] EXT4-fs (loop1): dirty_blocks=5136 [ 219.360115][ T13] EXT4-fs (loop1): Block reservation details [ 219.424153][ T13] EXT4-fs (loop1): i_reserved_data_blocks=321 [ 220.051182][ T30] audit: type=1400 audit(1751554234.076:17): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=7626 comm="syz.2.391" [ 222.933466][ T6156] EXT4-fs (loop1): unmounting filesystem 00000000-0700-0000-0000-000000000000. [ 222.998309][ T7648] loop2: detected capacity change from 0 to 128 [ 223.016668][ T7648] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 223.067301][ T7648] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 223.272204][ T5839] Bluetooth: hci3: link tx timeout [ 223.280397][ T5839] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 223.554120][ T5965] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 224.385865][ T5965] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.494371][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 225.670814][ T7663] loop4: detected capacity change from 0 to 4096 [ 225.680841][ T7663] ntfs3: Unknown parameter 'discardRÀéNdows_names' [ 225.765113][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 225.785094][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 10 [ 225.799479][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 65535, setting to 64 [ 225.856252][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 225.873127][ T5965] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 225.901489][ T5965] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 225.918418][ T5965] usb 4-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 226.081438][ T5965] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 226.104171][ T5965] usb 4-1: Product: syz [ 226.124243][ T5965] usb 4-1: Manufacturer: syz [ 226.131536][ T5965] usb 4-1: SerialNumber: syz [ 226.931206][ T5965] usb 4-1: config 0 descriptor?? [ 227.198063][ T5965] usb 4-1: can't set config #0, error -71 [ 227.215372][ T5965] usb 4-1: USB disconnect, device number 7 [ 228.693559][ T7680] loop0: detected capacity change from 0 to 512 [ 228.932727][ T7680] EXT4-fs error (device loop0): ext4_orphan_get:1393: inode #17: comm syz.0.404: iget: bogus i_mode (0) [ 229.119671][ T30] audit: type=1400 audit(1751554243.586:18): apparmor="DENIED" operation="change_profile" class="file" info="label not found" error=-2 profile="unconfined" name=3AF4F9904E7FDB3635A70D23C73EEAF23A3F503280080CA26230668AD9DCF8B061228F8599D34E45087D21AA56759E1651B3DD467BDEF390C76D pid=7678 comm="syz.1.403" [ 229.383037][ T7680] EXT4-fs error (device loop0): ext4_orphan_get:1398: comm syz.0.404: couldn't read orphan inode 17 (err -117) [ 229.551552][ T7680] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 231.603344][ T5833] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 232.751631][ T7709] loop1: detected capacity change from 0 to 32768 [ 233.656186][ T7709] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 234.371563][ T7723] loop4: detected capacity change from 0 to 128 [ 236.583852][ T7736] input: syz0 as /devices/virtual/input/input9 [ 236.760600][ T6156] ocfs2: Unmounting device (7,1) on (node local) [ 236.907153][ T7738] mmap: syz.2.416 (7738) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 237.493639][ T7746] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 238.621435][ T7757] loop0: detected capacity change from 0 to 64 [ 239.242917][ T7755] xt_CT: No such helper "netbios-ns" [ 240.689849][ T7774] netlink: 'syz.1.424': attribute type 29 has an invalid length. [ 240.697954][ T7774] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 240.705709][ T7774] netlink: 76 bytes leftover after parsing attributes in process `syz.1.424'. [ 242.043575][ T7783] netlink: 4 bytes leftover after parsing attributes in process `syz.2.427'. [ 247.868052][ T979] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 249.327845][ T979] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 252.320996][ T7829] fido_id[7829]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 252.957766][ T30] audit: type=1400 audit(1751554267.376:19): apparmor="DENIED" operation="change_hat" class="file" info="unconfined can not change_hat" error=-1 profile="unconfined" pid=7845 comm="syz.1.441" [ 253.004208][ T5965] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 254.800831][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 254.826596][ T5965] usb 5-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 254.844264][ T5965] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 254.855372][ T5965] usb 5-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 254.868817][ T5965] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 254.878664][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 254.901152][ T5965] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 254.925164][ T5965] usb 5-1: invalid MIDI out EP 0 [ 254.959859][ T7859] loop1: detected capacity change from 0 to 2048 [ 255.015141][ T7859] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 255.797739][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.804627][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.189969][ T5965] snd-usb-audio 5-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 257.258915][ T7881] loop3: detected capacity change from 0 to 256 [ 257.267553][ T5882] udevd[5882]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 257.321596][ T5965] usb 5-1: USB disconnect, device number 7 [ 257.496509][ T7879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 257.616609][ T7881] FAT-fs (loop3): Directory bread(block 64) failed [ 257.623247][ T7881] FAT-fs (loop3): Directory bread(block 65) failed [ 257.814465][ T7881] FAT-fs (loop3): Directory bread(block 66) failed [ 257.882500][ T7881] FAT-fs (loop3): Directory bread(block 67) failed [ 257.894448][ T7881] FAT-fs (loop3): Directory bread(block 68) failed [ 257.901007][ T7881] FAT-fs (loop3): Directory bread(block 69) failed [ 257.971215][ T7887] overlayfs: overlapping lowerdir path [ 258.120364][ T7881] FAT-fs (loop3): Directory bread(block 70) failed [ 258.217216][ T7881] FAT-fs (loop3): Directory bread(block 71) failed [ 258.386632][ T7881] FAT-fs (loop3): Directory bread(block 72) failed [ 258.474980][ T7881] FAT-fs (loop3): Directory bread(block 73) failed [ 259.726377][ T7883] loop1: detected capacity change from 0 to 32768 [ 259.775872][ T7883] JBD2: Ignoring recovery information on journal [ 259.967528][ T7883] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 260.110541][ T7883] (syz.1.450,7883,1):ocfs2_check_dir_entry:325 ERROR: bad entry in directory #65: directory entry too close to end - offset=32, inode=17057, rec_len=280, name_len=10 [ 260.241280][ T6156] ocfs2: Unmounting device (7,1) on (node local) [ 264.460926][ T7937] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 265.454755][ T7940] random: crng reseeded on system resumption [ 266.978387][ T7953] random: crng reseeded on system resumption [ 267.800871][ T7961] hub 9-0:1.0: USB hub found [ 267.806429][ T7961] hub 9-0:1.0: 1 port detected [ 269.913589][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 271.554401][ T7974] kAFS: unparsable volume name [ 272.287597][ T7983] loop1: detected capacity change from 0 to 64 [ 275.765655][ T8000] [ 275.768020][ T8000] ============================================ [ 275.774163][ T8000] WARNING: possible recursive locking detected [ 275.780318][ T8000] 6.16.0-rc4-next-20250703-syzkaller #0 Not tainted [ 275.786905][ T8000] -------------------------------------------- [ 275.793052][ T8000] syz.3.476/8000 is trying to acquire lock: [ 275.798937][ T8000] ffff88805f99cd20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: __netdev_update_features+0xcb1/0x1be0 [ 275.809930][ T8000] [ 275.809930][ T8000] but task is already holding lock: [ 275.817293][ T8000] ffff88805f99cd20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 275.827242][ T8000] and the lock comparison function returns 0: [ 275.833302][ T8000] [ 275.833302][ T8000] other info that might help us debug this: [ 275.841399][ T8000] Possible unsafe locking scenario: [ 275.841399][ T8000] [ 275.848846][ T8000] CPU0 [ 275.852125][ T8000] ---- [ 275.855396][ T8000] lock(&dev_instance_lock_key#20); [ 275.860694][ T8000] lock(&dev_instance_lock_key#20); [ 275.866007][ T8000] [ 275.866007][ T8000] *** DEADLOCK *** [ 275.866007][ T8000] [ 275.874166][ T8000] May be due to missing lock nesting notation [ 275.874166][ T8000] [ 275.882496][ T8000] 2 locks held by syz.3.476/8000: [ 275.887519][ T8000] #0: ffffffff8f517408 (rtnl_mutex){+.+.}-{4:4}, at: dev_ethtool+0x1d0/0x19b0 [ 275.896512][ T8000] #1: ffff88805f99cd20 (&dev_instance_lock_key#20){+.+.}-{4:4}, at: dev_ethtool+0x716/0x19b0 [ 275.906810][ T8000] [ 275.906810][ T8000] stack backtrace: [ 275.912703][ T8000] CPU: 0 UID: 0 PID: 8000 Comm: syz.3.476 Not tainted 6.16.0-rc4-next-20250703-syzkaller #0 PREEMPT(full) [ 275.912728][ T8000] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 275.912742][ T8000] Call Trace: [ 275.912752][ T8000] [ 275.912762][ T8000] dump_stack_lvl+0x189/0x250 [ 275.912794][ T8000] ? __pfx_dump_stack_lvl+0x10/0x10 [ 275.912818][ T8000] ? __pfx__printk+0x10/0x10 [ 275.912838][ T8000] ? print_lock_name+0xde/0x100 [ 275.912857][ T8000] print_deadlock_bug+0x28b/0x2a0 [ 275.912883][ T8000] validate_chain+0x1a3f/0x2140 [ 275.912908][ T8000] ? rcu_is_watching+0x15/0xb0 [ 275.912930][ T8000] ? trace_irq_disable+0x37/0x110 [ 275.912947][ T8000] ? preempt_schedule_irq+0xde/0x150 [ 275.912971][ T8000] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 275.912999][ T8000] __lock_acquire+0xab9/0xd20 [ 275.913022][ T8000] ? __netdev_update_features+0xcb1/0x1be0 [ 275.913043][ T8000] lock_acquire+0x120/0x360 [ 275.913062][ T8000] ? __netdev_update_features+0xcb1/0x1be0 [ 275.913084][ T8000] ? kasan_check_range+0xa5/0x2c0 [ 275.913113][ T8000] __mutex_lock+0x182/0xe80 [ 275.913130][ T8000] ? __netdev_update_features+0xcb1/0x1be0 [ 275.913153][ T8000] ? __lock_acquire+0xab9/0xd20 [ 275.913173][ T8000] ? __netdev_update_features+0xcb1/0x1be0 [ 275.913196][ T8000] ? __pfx___mutex_lock+0x10/0x10 [ 275.913220][ T8000] __netdev_update_features+0xcb1/0x1be0 [ 275.913248][ T8000] ? __pfx___netdev_update_features+0x10/0x10 [ 275.913271][ T8000] ? preempt_schedule_irq+0xb5/0x150 [ 275.913296][ T8000] ? __pfx___schedule+0x10/0x10 [ 275.913320][ T8000] ? __lock_acquire+0xab9/0xd20 [ 275.913344][ T8000] ? rcu_is_watching+0x15/0xb0 [ 275.913366][ T8000] netdev_update_features+0x6d/0xe0 [ 275.913383][ T8000] ? __pfx_netdev_update_features+0x10/0x10 [ 275.913404][ T8000] macsec_notify+0x2f5/0x660 [ 275.913430][ T8000] ? __pfx_macsec_notify+0x10/0x10 [ 275.913450][ T8000] ? __pfx_macsec_notify+0x10/0x10 [ 275.913482][ T8000] ? notifier_call_chain+0x164/0x3e0 [ 275.913508][ T8000] notifier_call_chain+0x1b3/0x3e0 [ 275.913534][ T8000] netdev_features_change+0x85/0xc0 [ 275.913551][ T8000] ? __pfx_netdev_features_change+0x10/0x10 [ 275.913581][ T8000] dev_ethtool+0x1536/0x19b0 [ 275.913601][ T8000] ? trace_irq_disable+0x37/0x110 [ 275.913622][ T8000] ? __pfx_dev_ethtool+0x10/0x10 [ 275.913640][ T8000] ? irqentry_exit+0x74/0x90 [ 275.913655][ T8000] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.913683][ T8000] ? dev_load+0x162/0x1f0 [ 275.913701][ T8000] dev_ioctl+0x392/0x1150 [ 275.913717][ T8000] sock_do_ioctl+0x22c/0x300 [ 275.913741][ T8000] ? __pfx_sock_do_ioctl+0x10/0x10 [ 275.913764][ T8000] ? hook_file_ioctl+0x80/0x530 [ 275.913790][ T8000] sock_ioctl+0x576/0x790 [ 275.913814][ T8000] ? __pfx_sock_ioctl+0x10/0x10 [ 275.913837][ T8000] ? __fget_files+0x2a/0x420 [ 275.913852][ T8000] ? __fget_files+0x3a0/0x420 [ 275.913866][ T8000] ? __fget_files+0x2a/0x420 [ 275.913883][ T8000] ? bpf_lsm_file_ioctl+0x9/0x20 [ 275.913905][ T8000] ? __pfx_sock_ioctl+0x10/0x10 [ 275.913927][ T8000] __se_sys_ioctl+0xfc/0x170 [ 275.913949][ T8000] do_syscall_64+0xfa/0x3b0 [ 275.913965][ T8000] ? lockdep_hardirqs_on+0x9c/0x150 [ 275.913985][ T8000] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.913999][ T8000] ? clear_bhb_loop+0x60/0xb0 [ 275.914014][ T8000] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 275.914031][ T8000] RIP: 0033:0x7f2b34f8e929 [ 275.914049][ T8000] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 275.914065][ T8000] RSP: 002b:00007f2b35daa038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 275.914085][ T8000] RAX: ffffffffffffffda RBX: 00007f2b351b6160 RCX: 00007f2b34f8e929 [ 275.914098][ T8000] RDX: 0000200000000080 RSI: 0000000000008946 RDI: 0000000000000004 [ 275.914110][ T8000] RBP: 00007f2b35010b39 R08: 0000000000000000 R09: 0000000000000000 [ 275.914122][ T8000] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 275.914133][ T8000] R13: 0000000000000000 R14: 00007f2b351b6160 R15: 00007ffe6478eba8 [ 275.914152][ T8000] [ 276.558186][ T8002] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 276.568784][ T8002] qnx6: wrong signature (magic) in superblock #1. [ 276.575221][ T8002] qnx6: unable to read the first superblock