last executing test programs: 6m12.410477553s ago: executing program 5 (id=6): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) syz_usb_connect(0x3, 0x3b, &(0x7f0000000040)={{0x12, 0x1, 0x201, 0xc5, 0x2d, 0xe9, 0x40, 0xa0ca, 0x3fc1, 0x6d23, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x29, 0x1, 0x2, 0x80, 0x10, 0xc1, "", [{{0x9, 0x4, 0xe0, 0x2, 0x0, 0xef, 0x4, 0x1, 0x7, [@cdc_ecm={{0x5}, {0x5, 0x24, 0x0, 0x3}, {0xd, 0x24, 0xf, 0x1, 0x2, 0x0, 0x0, 0x10}}]}}]}}]}}, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0}) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f00000004c0), 0x208e24b) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000100)=0x8001, 0x4) bind$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0xa, @empty, 0x9}, 0x1c) sendmmsg$inet6(r1, &(0x7f0000000480)=[{{&(0x7f0000000040)={0xa, 0x4e23, 0xb, @loopback, 0x1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000140)='2', 0x1}], 0x1}}], 0x1, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e23, 0x100002, @ipv4={'\x00', '\xff\xff', @empty}, 0xffff}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r5, 0x8983, &(0x7f0000000180)={0x3, 'veth1_to_hsr\x00', {0x5}, 0x7}) socket$inet_udp(0x2, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x400, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_mount_image$nilfs2(&(0x7f0000000100), &(0x7f0000000300)='./file0\x00', 0x3200842, &(0x7f0000001040)=ANY=[], 0x1, 0xadc, &(0x7f0000001900)="$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") r6 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x42, 0x0) pwrite64(r6, &(0x7f00000000c0)='a', 0x200000c1, 0x9000) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x6c, r4, 0x8, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x58, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x77}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xd}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40800}, 0x80) sendmmsg$inet6(r2, &(0x7f0000000680)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0xab, @loopback, 0x8}, 0x1c, &(0x7f0000000780)=[{&(0x7f0000000900)='2', 0x1}], 0x1}}], 0x1, 0x20000014) 6m9.134196553s ago: executing program 5 (id=9): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x404, &(0x7f0000000480)={[{@nogrpid}, {@barrier}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@errors_remount}, {@nombcache}, {@quota}, {@nojournal_checksum}]}, 0x3, 0x42f, &(0x7f0000000940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet6_udp_int(r3, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) recvmmsg(r4, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=""/106, 0x6a}}], 0x1, 0x40010102, 0x0) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r5, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) connect$inet6(r5, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de00"/120, 0x78) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) open(&(0x7f0000000040)='./bus\x00', 0x80242, 0x10) socket(0x10, 0x3, 0x0) r6 = open(&(0x7f0000000040)='./bus\x00', 0x80202, 0x0) ftruncate(r6, 0x2007ffc) sendfile(r6, r6, 0x0, 0x2000000000006) 6m3.68615734s ago: executing program 5 (id=15): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00'}) sendmsg$NL802154_CMD_SET_CHANNEL(r1, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r3) sendmsg$IEEE802154_ASSOCIATE_REQ(r2, 0x0, 0x4008804) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000032680)=""/102400, 0x19000) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r7 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r8 = dup2(r7, r7) ioctl$BLKTRACESETUP(r8, 0xc0481273, &(0x7f0000000240)={'\x00', 0x40, 0xa, 0x3, 0x40000000, 0x10}) ioctl$BLKTRACETEARDOWN(r8, 0x1276, 0x0) r9 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8402) ioctl$SCSI_IOCTL_GET_PCI(r9, 0x5393, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r4, 0x1, 0x70bd29, 0x25dfdbfb, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x4}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan3\x00'}, @IEEE802154_ATTR_DEV_INDEX={0x8}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8084}, 0x20040000) 5m57.229889575s ago: executing program 5 (id=19): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB='\t\x00'], 0x48) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000001000)='./mnt_trace\x00', 0x1ff) mount(0x0, &(0x7f0000001040)='./mnt_trace\x00', &(0x7f0000001080)='tracefs\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001140)='./mnt_trace/trace_pipe\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000001180)='./mnt_trace/trace_marker\x00', 0x1, 0x0) pselect6(0x40, &(0x7f0000000100)={0x2, 0xfffffffffffffffe, 0x2, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x1f, 0x1, 0xfffffffffffffffd, 0x0, 0x0, 0x6}, &(0x7f0000000280)={0x0, 0x3938700}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r5) sendmsg$ETHTOOL_MSG_RINGS_SET(r5, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)={0x34, r6, 0x1, 0x0, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_TX={0x8}, @ETHTOOL_A_RINGS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x34}}, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r0, 0x89f9, &(0x7f0000000240)={'sit0\x00', &(0x7f0000000100)={@private2, @rand_addr=0x64010100, 0x1b, 0x1c}}) 5m57.210528523s ago: executing program 2 (id=3): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x8, 0x4, 0x4, 0x10002, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value=0x180}, 0x50) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=r2, @ANYBLOB="00000000000000005c001280110001006272696467655f736c617665000000004400058005000500000000000500200001000000"], 0x7c}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x8808}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}, 0x1, 0x0, 0x0, 0x801}, 0x20000800) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x20000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000140)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=ANY=[@ANYBLOB="e0100000", @ANYRES16=r5, @ANYBLOB="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", @ANYRES32=r6, @ANYBLOB="240003"], 0x10e0}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x4080) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x17, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x13, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000fa0000000000000000010000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000006608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f00000001c0)=""/222, 0x41100, 0x8}, 0x94) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r7, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r7, &(0x7f0000000080)={0x2, 0xe26, @dev={0xac, 0x14, 0x14, 0x3a}}, 0x10) connect$inet(r7, &(0x7f00000002c0)={0x2, 0x4620, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000200)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000d, 0x12, r8, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x9, 0x3, 0x200, 0x0, 0xffffffff, 0xffffffff, 0x118, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ip={@multicast1, @multicast2, 0xffffffff, 0xff000000, 'team_slave_1\x00', 'pim6reg\x00', {}, {}, 0x1d, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xa, 0x2, 0xfffffffe, 0x435, 'netbios-ns\x00', 'syz0\x00', {0x7fff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010101, 0x0, 0x0, 'ip6tnl0\x00', 'ip_vti0\x00', {0xff}, {0xff}, 0x33, 0x3, 0x8}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x309f) r9 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r10 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.dequeue\x00', 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xe, 0x0, r9, 0x4, '\x00', 0x0, r10, 0x1, 0x0, 0x4}, 0x50) 5m51.563923795s ago: executing program 2 (id=28): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffd000/0x3000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x6a, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) ioctl$TIOCGPTLCK(0xffffffffffffffff, 0x80045439, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f00000000c0)=0xf) ioctl$TCFLSH(r5, 0x400455c8, 0x1) ioctl$TIOCSETD(0xffffffffffffffff, 0x5412, &(0x7f0000000140)=0xffffffc0) shmctl$IPC_RMID(r1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) madvise(&(0x7f0000000000/0x600000)=nil, 0x600722, 0x66) r6 = socket$inet(0x2, 0x80001, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r6, 0x0, 0x61, 0x0, 0x0) shmctl$SHM_STAT_ANY(r1, 0xf, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00'}) getgid() syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) 5m49.316715314s ago: executing program 2 (id=31): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) tkill(0x0, 0x7) stat(&(0x7f0000000780)='./file1\x00', &(0x7f000000b380)) getegid() sendmsg$netlink(r1, &(0x7f000000b500)={0x0, 0x0, &(0x7f0000006fc0), 0x0, 0x0, 0x0, 0x4001}, 0x400c000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) memfd_create(0x0, 0x0) unshare(0x2c020400) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') 5m45.608717031s ago: executing program 5 (id=35): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) userfaultfd(0x80001) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0x1000002, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x4000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8b0, 0x0, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 5m34.086645672s ago: executing program 32 (id=31): memfd_create(0x0, 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) landlock_create_ruleset(&(0x7f0000000340)={0x110, 0x8, 0x0, 0x28000, 0x2, 0x3}, 0x30, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x32, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat$hwrng(0xffffffffffffff9c, 0x0, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000440)='syzkaller\x00', 0x4, 0xa4, &(0x7f0000000480)=""/164}, 0x80) bpf$OBJ_PIN_PROG(0x11, &(0x7f0000000240)=@generic={&(0x7f0000002000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r3}, 0x18) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x0) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, 0x0) ioctl$FS_IOC_GETFSUUID(0xffffffffffffffff, 0x80111500, 0x0) tkill(0x0, 0x7) stat(&(0x7f0000000780)='./file1\x00', &(0x7f000000b380)) getegid() sendmsg$netlink(r1, &(0x7f000000b500)={0x0, 0x0, &(0x7f0000006fc0), 0x0, 0x0, 0x0, 0x4001}, 0x400c000) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) memfd_create(0x0, 0x0) unshare(0x2c020400) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x1000000000000f, &(0x7f0000000180)=0x57bb, 0x3c) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x34, &(0x7f00000000c0)=r4, 0x4) syz_open_dev$vim2m(&(0x7f0000000200), 0x8000000000ff, 0x2) io_uring_setup(0x6d1a, &(0x7f00000002c0)={0x0, 0x31cd, 0x10000, 0x2, 0x12c}) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') 5m29.326151111s ago: executing program 33 (id=35): openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x10, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$video(&(0x7f0000000040), 0x8, 0xc00) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) userfaultfd(0x80001) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x38, &(0x7f00000002c0)={0x0, 0x36a9, 0x8, 0x0, 0x55}, 0x0, 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000000)='2', 0x1}], 0x1) sendmsg$NFC_CMD_DEV_UP(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x1c}}, 0x840) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x40}}}, &(0x7f0000000300)=0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = dup(r3) syz_ublk_setup_queues(r4, r2, 0x0, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x1, 0x1000002, 0x92}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x4000, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x1f70, 0x2, 0x40000001, 0x19b}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xa8b0, 0x0, 0x0, 0xffffffff}}], 0x1, 0x0, 0x0) 33.182928692s ago: executing program 1 (id=423): r0 = io_uring_setup(0x17ce, &(0x7f0000000140)={0x0, 0x52c1, 0x1, 0x0, 0x31d}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$pagemap(r3, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000001c0), 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000018000613000000"], 0x14}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN_FLAGS(r1, 0x3ba0, &(0x7f0000000240)={0x48, 0x2, r7, 0x0, 0x0, 0x0, 0x0, 0x1}) ioctl$IOMMU_IOAS_MAP$PAGES(r1, 0x3b85, &(0x7f00000007c0)={0x28, 0x5, r7, 0x0, &(0x7f00002ce000/0x1000)=nil, 0x1000, 0x1020800}) close_range(r0, 0xffffffffffffffff, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) r9 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x2002, 0x0) ioctl$SNDCTL_DSP_GETOPTR(r9, 0x5008, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000200)={'erspan0\x00'}) socket$inet_tcp(0x2, 0x1, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bridge0\x00') 26.22903331s ago: executing program 1 (id=433): unshare(0x22020400) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) r0 = getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_emit_vhci(&(0x7f0000000480)=ANY=[], 0x7) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_emit_vhci(&(0x7f0000000080)=ANY=[@ANYBLOB="04021d02aac2"], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x141000) r5 = io_uring_setup(0x5ab7, &(0x7f0000000180)={0x0, 0xe14c, 0x0, 0x3, 0x299}) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_PERSONALITY(r5, 0xa, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r4, 0x4040534e, &(0x7f00000000c0)={0x20a, @time={0x6000000, 0x2}, 0xd, {0x1, 0x74}, 0x8, 0x2, 0x2}) syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000040), r6) sendmsg$NFC_CMD_DEP_LINK_UP(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r7, 0x1, 0x70bd29, 0x25dfdbff, {}, [@NFC_ATTR_DEVICE_INDEX={0x8}, @NFC_ATTR_COMM_MODE={0x5}, @NFC_ATTR_TARGET_INDEX={0x8, 0x4, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x44895}, 0x4800) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) landlock_add_rule$LANDLOCK_RULE_PATH_BENEATH(0xffffffffffffffff, 0x1, 0x0, 0x0) r8 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0201, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f0000001080)=0x91b) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) 23.096206949s ago: executing program 1 (id=436): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4008080}, 0x8000) request_key(0x0, 0x0, &(0x7f0000000340)='\x8e\x00\x9e\xbb\x1e\x1av\xe8M\x00d\xaaI\x00\x00\x00\x00\x00\x00\t<\xe5u\xedA\xa7\aT\xdd\xd1{\xff\xcb\xdb\xb11\xc2s\xcb\xbf\x04\x00\x00\x00<\xfe\xf9\f\xe6E\b\x00\xd7\x85q\xc4\xab\xbd&\x92\x89(\xf3\"\xceJ\x19\x185\xa6- \xe6uK\xe1D\x8f\x9f\x92\xca\x93#\xf5E\xc2\x91Yl\x17\a\x02\t\x17\x7f\xc4\xde\x04\x9b\x89#\xf6&[\xd81\xb3\xdc\x00\x04\x15\x03\x17R\xd24\xeb\xb5\xc2\xff\x1bnF\x8e\xe4\'\x18\xba9.\xd4\xd9\xc6\x98\x8f\xc6D!p\xbeV\xb7x\r@\x1b5\x8br\x11\xdex\x19\x89\xdc\x1el\xcd\x13\xb6\xc2\xdb\x1fr2\x7f?\xfe\x0f\x04\x11\xc3\x8f:uXQ\x0f\v\xfc\xff\x7fL\xfb\xa8]\xd4\xd7\x13?\xe3<#\x1f\x9a\x03C\x8f\xe7\rV1\x99\xaf@Re\x18J\xb6\xee\xeeAnR\n\x8a\xe4\x1a:&\xc7\x15B\x8aG\xa4\a`\xee\xaf\x80T\xddo\xc4D^z\xbf\x1c\x87F?!k\'\xc3\xf9\xa3\xd9\x85\xb1N%\x17\f\xd0#\x05^\xf7\x11\x13\xadKb\x8ck\x10\xd3 >\t\xe0\x16\x80\x82\xb3\xcc\xc7\x05*\x9b\x0eQ\x92\xd7\xbaO\x06\xb2\xdc\xe7/\x1f\x90]IB94(evFMJ\x85\xc4S\xa8\x8b\xbe\xd3\x90\xe9\t\x00\x13\x1e\x9a\x94\x00\x00\x00\x00\x00U\xfbLA\xa6K\xd5\x0eD\xf2Y\xc3,\t4hD\xc4o\xc3\x87$\x9d6\xc8\x93\xa3\x8e:\xfe#\xa0`\xb1k\xacz\xe0\xb3\x95\x17\xdf\xc7\xc2\xedKc\xa3\xbd\xc2\x9f\x86C(/\xe3\xb2\xc6$s^\xd1vU\x9cB)ao\xf1\'', 0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, 0x0, 0x187) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x44000880}, 0x4080) mprotect(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x1000000) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000003000/0x3000)=nil, &(0x7f0000ffd000/0x1000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000000000/0x4000)=nil, &(0x7f0000000000/0x3000)=nil, &(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) r3 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xa90d, 0x1f480, 0x2, 0x254}) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/bus/i2c/devices/i2c-0/new_device\x00', 0x1, 0x0) write(r4, 0x0, 0x0) write(r4, &(0x7f0000000300)='rt1719 0x49\x00', 0xc) write(r4, &(0x7f0000000400)='wusb3801 0x4a\x00', 0xe) syz_emit_ethernet(0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa8863"], 0x0) io_uring_enter(r3, 0x12a, 0xffffffdc, 0x17, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, 0x0, 0x800) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x401, 0x3, 0x0, {0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x3}]}}}]}, 0x3c}}, 0x54) 17.843732603s ago: executing program 0 (id=444): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000040)=0x1) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0x0}) sendto$packet(r6, &(0x7f00000002c0)="05031600d3fc142e00004788031c0910", 0x10, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) ioctl$DRM_IOCTL_MODE_DIRTYFB(0xffffffffffffffff, 0xc01864b1, &(0x7f0000000480)={0x0, 0x2, 0x2, 0x2, &(0x7f0000000440)=[{0x9, 0xb, 0x9, 0x9}, {0x8, 0x101, 0x700, 0x6}]}) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=ANY=[@ANYBLOB="58000000020601010000000000000000010000040c000300686173683a697000050001000700000005000500020000000900020073797a300000000005000400000000001400078008000840000000d3050014"], 0x58}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x8004) ioctl$SG_IO(r4, 0x2285, &(0x7f00000005c0)={0x53, 0xfffffffffffffffe, 0x6, 0x0, @scatter={0x0, 0x20000, 0x0}, &(0x7f0000000240)='\b\x00\x00\x00\x00\x00', 0x0, 0x7, 0x10, 0x8000000, 0x0}) 16.563179555s ago: executing program 0 (id=446): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f00000014c0)=0xb) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) 14.190156714s ago: executing program 0 (id=449): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000040)=0x1) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 8.177838705s ago: executing program 4 (id=453): r0 = fsopen(&(0x7f0000000100)='nfs\x00', 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x804, 0x0, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0x40881, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, &(0x7f0000000100)}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0xffff}, 0x50) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000004000000020000000100000c02000000000000000000000d0000000000005f"], 0x0, 0x34}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000100000000000000801800009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1}, 0x94) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100), 0x0) close(r7) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000500)=@bpf_ext={0x1a, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8792}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000180)='GPL\x00', 0x7, 0x0, 0x0, 0x40f00, 0x20, '\x00', 0x0, 0x19, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x1, r6, 0x0, 0x0, 0x0, 0x10, 0x4a6}, 0x94) syz_mount_image$iso9660(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x3800813, &(0x7f0000000280)={[{@iocharset={'iocharset', 0x3d, 'cp1251'}}, {@utf8}, {@overriderock}, {@nojoliet}, {@nojoliet}, {@overriderock}, {@dmode={'dmode', 0x3d, 0x3}}, {@dmode={'dmode', 0x3d, 0x2}}, {@mode={'mode', 0x3d, 0x80}}, {@hide}, {@block={'block', 0x3d, 0x200}}, {@map_acorn}, {@overriderock}, {@check_relaxed}, {@gid}, {@uid}, {@check_relaxed}, {@sbsector={'sbsector', 0x3d, 0x7}}, {@block={'block', 0x3d, 0xe00}}]}, 0x5, 0xa51, &(0x7f0000001240)="$eJzs3ctvXNd9B/DvHZISQ7u24qiuKzjiSK4UxmEpkqqlCl6kEjmSmPJRkBRgoYsojahCEFu3cQs4RoEoQNFVjBZo0UW7M7rqykA2TReFN0W7a1ZdFCj8LwRdqSsG986QHJIzHIrhy8rnQ8zMffzuOec+zj2cmTv3hC+WtVe3jK2tVY99jt/75yMoMSfYrenPP/n04/Lxw6c5lb68U/xLMpiknvQneSMZmJpeXJjrkdCT5EGSz5Iiyek0X/fkQYq/zsub45+l+Mcy365O7TVlelnjl9pxH38AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAHASFVPT4+MTxanMzN97r96U1HeYml5cKLK2tnPO+jJNP6l6/S5+0jPfpCgfGRxc7+r7jbObs19PUr+YN5tjb1YdkmcwH730+pl3v9JfW1++W2l+Iaf3nuwH3//oyXdWV1e+13FuURxgqU6Y5jFypzE/s7QwM3fzTqM+s7RQv3Ht2viVu7eX6rdnZhtL95eWG3P1qcXGzeWFxfrI1NfrEzduXK03xu4v3Ju/Mz0221ifeP03J8fHr9W/NfZ7jZuLSwvzV741tjR1d2Z2dmb+ThVTzi5jrpcH4u/OLNeXGzfn6vVHj1dXrm4rWV+2Hb9l0ESv9SmDJnsFTY5PTk5MTE5O/LDVe/bGhGvv3Hjn+vh4/3jTy2kNZEfEIR20nCxf6r6bD/4kDvtUa7b/yWxmMp97eS/1jn9Tmc5iFjLXZX7Levt/6Upj12zT1v63Wvn+tvnnyqeLOd8aHezS/ncpy9H9fZDv56M8yXeymtWs5HvHXqKj/buTRuYzk6UsZCZzuVlNqbem1HMj13It4/l27mY4S+nP7cxkNo0s5X6WspxGdURNZTGN3MxyFrKYekYyla+nnoncyI1cTT2NjOV+FnIv87mT6dysUnmUx9V2v7pLGTeCJvYSNLlL0I7GvFv7v2H7Io3t/5zwAqrtupcP4SwO+7PWav9P9Q4dmdoy2n94hQIAAAAO1K//Z145+9p//G9S5KvV9/K3Z2Yb48ddLAAAAOAAVZfrvVm+DJRDX03h/T8AAAC8aIrqN3ZFkqEMN4fWfwnlQwAAAAB4QVTf/59PMbw5wft/AAAAeMH0vsd+z4hidP32v/WHzdeHrYjmWDF0e2a2MTa1MPvuRC5XdxmofmmwI7W+pBiofn7wdi40oy4MNV+HNlMs8xwsoybG3p3I27nYWpGRt8qXt0Y6RE42I7/WjPxae2RftkReLSMB4EV3cZf2eK/t/9sZbUaMnqua/P5zW9rgvqplHdeyAsBJsdHHzv+3ujTr0P6fb94b4Hy39v+3dnn/X0a8lkfDzUsKxvLdvJ/VPMxoWlccDHdKdb03guZlCKM9Pg0Yal2y8NPrtYzu+DxgcGNd22NXMpnRjp8ItKVbrJfhajOu77D2AgAcrYu7tsPr7X/1IXnX9n909/f/bW2uSwoB4CTY6MH+eQeG9x583OsIAGyllQYAAAAAAAAAAAAAAAAAAAAAAAAAAICDt6cb+P/X5WR1dSXZb2cBHQZ++u//+itdY370UjL4PCXcfaCWAynz6SQHsu6HN9CX5Lhy/2aee6lyH5+UTfciDRRPqwr7C6VzzCcmAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAjkSR9HWaXktOJxlPcuXoS3V4nh53AQ5KfX+LFc/yLB/mlYMuDgAAAAAAAAAAAAAAAAAAAAAAAAAAAADAL7vW/f9rab6+1JyU/lpyKcmDJL9/3GV8HoM95j87onKcPH9UPbfd/7+WDGStSH/W1tbWkmJganpxYa48FIrT5fzPP/n04/LRNckfrA/s7FWhTKDMYUvnEq0c2qYMbF3qy9VSQ9MrHzz5s/f/pD59qzowby3fnp2eu7P4O5uBrxc/bnaB0N4Nwnp5/+LSv/1N2+RTrcx/nP5uK7I939tVvtM78/21Tkt3yXcPHq+uTJY5LTfeW/7zP661z3otF5K3RpKRrTn9YfnoktOF7dtzq+JnxV8Vr+Tv86Da/+XWKNaKche9Wq3/lx49Xl0Z++77qw83yvSDxx+2JXAmw0kebq1lPco0XJ1POnqpynWgzHW8CiqfzvZIb1dtKU5sbtct6/Dl6pAZeq51qHdfh0qP7d4q0dXtJVorK8nf/ulXcnnXPX26Q4qXe+TYUfGz4n+Ku/nv/GVb/x+1cv9fSsfa2SGJKrLtSGmft6V61S5trvlk+4xvb0+za63kEPwof5Df3tj/ter8315vJrvUm43z0TfbJnapN+tVq0u9OL21pu6oFy296sXOmvpPr+5oUbbmmrPbWqTW2afbMq1ynm1GdSnnr+YbSf+55zqjfKPHGaXX8vut//9QjOT/8lT/PwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwMlXJH2dpteSS0nOJHm1HK8na9tjnu4jv9pQsZ9iHpj9lPmLp+i6osWzPMuHeeWoSwQAAAAAAADA4bg1/fknn35cPqrv4/vyG7XWnHrSn+RM8XcDU9OLC3M9EhpIHqx/pT/YOaTL5Dwon17eHP+sHHujR37He/kAAHyh/TwAAP//FnluMg==") syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) r8 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, r8, 0x6) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000140)='addr\x00', &(0x7f0000000180)='127.0.0.1\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f00000001c0)='source\x00', 0x0, 0x0) 8.170648448s ago: executing program 0 (id=463): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) io_setup(0x40, &(0x7f0000000000)=0x0) io_submit(r1, 0x8e, &(0x7f0000000b40)=[&(0x7f0000000080)={0x200000000000000, 0x0, 0x0, 0x7, 0x8, r0, 0x0}]) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) prlimit64(0x0, 0x5, 0x0, &(0x7f00000016c0)) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r4, 0xc0189374, &(0x7f0000000240)={{0x1, 0x1, 0x1018, 0xffffffffffffffff, {0x29}}, './file0\x00'}) ioprio_set$pid(0x2, 0x0, 0x2000) mkdirat(0xffffffffffffff9c, &(0x7f0000000440)='./file1\x00', 0x100) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x64) socket(0x2, 0x80805, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f00000001c0)={[{@upperdir={'upperdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@redirect_dir_off}, {@uuid_on}, {@redirect_dir_on}]}) ioctl$AUTOFS_DEV_IOCTL_VERSION(r4, 0xc0189371, &(0x7f0000000280)={{0x1, 0x1, 0x18, r5}, './file0\x00'}) r6 = open(0x0, 0x84242, 0x1df2a23c5997fad6) sendfile(r6, r6, &(0x7f0000000080), 0x7f03) fallocate(r2, 0x0, 0x1, 0x7) r7 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r7, 0x40345410, &(0x7f00000083c0)={{0x1}}) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r7, 0x54a2) 8.169564679s ago: executing program 1 (id=454): r0 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) sendmsg$nl_crypto(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpriority(0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) ioctl$KDFONTOP_SET(0xffffffffffffffff, 0x4b72, &(0x7f0000000180)={0x0, 0x1, 0x12, 0x6, 0x200, &(0x7f0000000880)="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"}) r2 = syz_open_procfs(0x0, &(0x7f0000000280)='net/mcfilter6\x00') read$eventfd(r2, &(0x7f0000000000), 0x8) add_key(&(0x7f00000003c0)='ceph\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYRES32=r2, @ANYRESDEC=r0, @ANYRESOCT=r2], 0x44}, 0x1, 0x0, 0x0, 0x2000d88d}, 0x20040045) r3 = gettid() timer_create(0x7, &(0x7f00000000c0)={0x0, 0x31, 0x2, @tid=r3}, &(0x7f0000bbdffc)) ioctl$sock_FIOSETOWN(r2, 0x8901, &(0x7f0000000040)=r3) r4 = socket(0x11, 0x2, 0x0) setsockopt(r4, 0x107, 0x1, &(0x7f00000001c0)="110000000200060000071a80010061cc", 0x10) close(r4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x48000, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_crypto(0x10, 0x3, 0x15) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r5, 0xc0505350, &(0x7f0000000140)={{0x0, 0x1}, {0xf}}) 8.169163767s ago: executing program 3 (id=455): r0 = memfd_create(0x0, 0x1) r1 = dup(r0) write$binfmt_elf32(r1, &(0x7f0000000040)=ANY=[@ANYRES16=r1], 0x58) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) readv(r2, &(0x7f00000024c0)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r2, r2, 0x0) r3 = landlock_create_ruleset(&(0x7f00000002c0)={0x7f6e, 0x2}, 0x18, 0x0) landlock_restrict_self(r3, 0xe) unlinkat(r1, &(0x7f0000000000)='./file0\x00', 0x200) prlimit64(0x0, 0x2, &(0x7f0000000040)={0x1000000000000009, 0xffffffffffffffff}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x4e, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000ffffffffffff86dd60ecff8000181100fc000000000000000000000000000000ff02000000000000000000000000000100004e220018000000000000000000fa7713cb5d00d98ae8af107c1ab557b36f796528632ea125e7192c562e19dfe56e16ed3e048a53485e8d04dc0326c9e35b1923770ffd9b478929c6cf021ce8b414b40e"], 0x0) gettid() prctl$PR_SET_MM(0x23, 0xa, &(0x7f0000ff9000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0xb, &(0x7f0000ffc000/0x4000)=nil) 6.891080818s ago: executing program 4 (id=456): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x4, &(0x7f0000000440)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x87}]}, &(0x7f0000000000)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) ioctl$BTRFS_IOC_GET_FEATURES(r0, 0x80189439, &(0x7f0000000340)) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f00000000c0), 0x80d02, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r2, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x0, 0x9}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1a2) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x4000000086a82, 0x0) r4 = dup(r3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r4, 0x3554000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_emit_ethernet(0x3a, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x3f, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @dev={0xac, 0x14, 0x14, 0xb}, {[@ra={0x94, 0x4, 0x1}]}}, {{0x4e22, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) setpriority(0x0, 0xffffffffffffffff, 0x8) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) ioctl$SNDCTL_TMR_TIMEBASE(r1, 0xc0045401, &(0x7f0000000280)=0x115) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={0x0}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket(0x10, 0x3, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000000c0)={0x84, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r6, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r5, &(0x7f0000000000), 0x4000000000001f2, 0x0) r7 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0x4) sendmmsg(r7, &(0x7f0000009600)=[{{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000180)="01", 0x1}], 0x1, &(0x7f00000006c0)=[{0x10, 0x1, 0x26}], 0x10}}], 0x1, 0x4008845) r8 = syz_mount_image$fuse(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x2002000, &(0x7f0000000140)={{}, 0x2c, {'rootmode', 0x3d, 0xc000}, 0x2c, {'user_id', 0x3d, 0xee00}, 0x2c, {}, 0x2c, {[{@default_permissions}, {@blksize={'blksize', 0x3d, 0x9d4356f8863922ec}}, {@allow_other}, {@allow_other}, {@allow_other}, {@default_permissions}, {}], [{@fsmagic}, {@dont_measure}, {@smackfsdef={'smackfsdef', 0x3d, '.(&{'}}]}}, 0x0, 0x0, &(0x7f0000000580)="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") unlinkat(r8, &(0x7f0000001580)='./file0\x00', 0x0) 6.607854585s ago: executing program 3 (id=457): syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000500)='./file0\x00', 0x10, &(0x7f0000000540)={[{@min_batch_time={'min_batch_time', 0x3d, 0x3a07}}, {@grpjquota}, {@quota}], [{@obj_type={'obj_type', 0x3d, '/dev/loop'}}, {@subj_user={'subj_user', 0x3d, 'usrquota'}}, {@fsuuid={'fsuuid', 0x3d, {[0x34, 0x38, 0x34, 0x61, 0x65, 0x35, 0x64, 0x66], 0x2d, [0x65, 0x55, 0x30, 0x64], 0x2d, [0x32, 0x61, 0x36, 0x39], 0x2d, [0x33, 0x62, 0x31, 0x62], 0x2d, [0x66, 0x32, 0x62, 0x39, 0x30, 0x30, 0x30, 0x64]}}}, {@subj_user={'subj_user', 0x3d, '/dev/loop'}}, {@smackfsfloor={'smackfsfloor', 0x3d, '\\,(->#'}}]}, 0x2, 0x4ec, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8f}, 0x0) syz_mount_image$ext4(&(0x7f00000004c0)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f00000002c0)={[{@dioread_nolock}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x4}}, {@barrier_val={'barrier', 0x3d, 0xdf}}]}, 0x1, 0x4bf, &(0x7f0000000a00)="$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") pipe2(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = openat$urandom(0xffffffffffffff9c, &(0x7f0000000000), 0x42180, 0x0) splice(r1, 0x0, r0, 0x0, 0x4, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=@ipv6_newaddr={0x34, 0x14, 0x1, 0x70bd2b, 0x25dfdbfa, {0xa, 0x8, 0x1, 0xff, r7}, [@IFA_LOCAL={0x14, 0x2, @mcast1}, @IFA_FLAGS={0x8, 0x8, 0x425}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x10080) setsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000200)={@ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, r7}, 0x14) r8 = syz_open_procfs(0x0, &(0x7f0000000080)='net/ptype\x00') read$FUSE(r8, &(0x7f0000004800)={0x2020}, 0x2020) read$FUSE(r8, &(0x7f00000020c0)={0x2020}, 0x2020) socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffff9}, 0x94) r9 = socket$inet6(0xa, 0x3, 0x8000000003c) getsockopt$inet6_int(r9, 0x29, 0x7, 0x0, &(0x7f0000000080)) socket$inet_tcp(0x2, 0x1, 0x0) 6.473525203s ago: executing program 0 (id=458): socket$nl_generic(0x10, 0x3, 0x10) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, 0x0, 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000019140)='net/fib_trie\x00') syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000019080)={0x0, 0x354, 0xf2, 0x9, 0xe1, 0x1, 0xc}, 0xc) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) sendmsg$NLBL_MGMT_C_ADD(0xffffffffffffffff, 0x0, 0x8040000) sendmsg$NFC_CMD_FW_DOWNLOAD(0xffffffffffffffff, &(0x7f0000019100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, 0x0}, 0x4004) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec02010902"], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) syz_open_dev$tty1(0xc, 0x4, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) 4.902518321s ago: executing program 3 (id=459): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f00000014c0)=0xb) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SUBDIVIDE(r10, 0xc0045009, &(0x7f0000000040)=0x1) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) 3.321191926s ago: executing program 3 (id=464): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_ublk_setup_io_uring(0x21, &(0x7f0000000240)={0x0, 0xcc89, 0x80, 0x1024002, 0x1e7}, &(0x7f0000000000)=0x0, &(0x7f0000000380)=0x0, &(0x7f0000000180)=0x0) syz_io_uring_submit(r4, r5, r6, &(0x7f0000000980)=@IORING_OP_TIMEOUT={0xb, 0x12, 0x0, 0x0, 0xfffffffffffffffb, &(0x7f00000000c0), 0x1, 0x40}) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f0000000800)={0x2e, 0x40, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x98c8, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000002c0)=@new_dev={0x4, 0x412, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x1e0}}}, 0x0) syz_io_uring_complete(r4, r5) syz_ublk_add_dev(r3, r4, r5, r6, &(0x7f00000003c0)={0x2e, 0x5, 0x0, r7, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000200)=@new_dev={0x1, 0xf60, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x180}}}, 0x0) r8 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x2008, 0x0, 0x3e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) r9 = socket$kcm(0x21, 0x7, 0x2) sendmsg$inet(r9, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="1c0000"], 0x30}, 0x20040880) writev(0xffffffffffffffff, &(0x7f0000000380)=[{&(0x7f0000000740)='X', 0x1}], 0x1) mount$overlay(0x0, &(0x7f0000000100)='./bus\x00', &(0x7f0000000440), 0x2000000, &(0x7f0000000280)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@verity_on}]}) r10 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) fsetxattr$security_ima(r11, &(0x7f0000000000), &(0x7f0000000040)=@v2={0x6, 0x3, 0x4, 0x0, 0x2, '&p'}, 0xb, 0x1) ioctl$SNDCTL_DSP_SETFMT(r10, 0xc0045005, &(0x7f00000014c0)=0xb) chdir(&(0x7f00000003c0)='./bus\x00') syz_mount_image$fuse(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x40082, &(0x7f00000002c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r8, @ANYBLOB=',rootmode=00000000000000000060000,user_id=', @ANYRESDEC, @ANYBLOB='0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ip_vti0\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x14, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffed3) mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) newfstatat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x800) lchown(&(0x7f0000000040)='./file0\x00', r3, 0x0) creat(&(0x7f00000000c0)='./file0\x00', 0xc9028ba210c11f8b) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x8) getdents64(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) mount$fuseblk(&(0x7f0000000240), &(0x7f00000002c0)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000000300)={{'fd', 0x3d, r4}, 0x2c, {'rootmode', 0x3d, 0x1000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x6}}]}}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x78}, 0x1, 0x0, 0x0, 0x840}, 0x20000800) r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='mounts\x00') read$FUSE(r6, &(0x7f0000004180)={0x2020}, 0x2020) syz_emit_ethernet(0x5e, &(0x7f00000003c0)={@broadcast, @random="fdf9a684a51b", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "108f84", 0x28, 0x3a, 0xff, @remote, @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @local, [{0x2, 0x1, "042788ca7c5f"}, {0x2, 0x1, "562f7ff4783b"}]}}}}}}, 0x0) kernel console output (not intermixed with test programs): activated: batadv_slave_1 [ 93.919794][ T5644] veth1_macvtap: entered promiscuous mode [ 93.947371][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.961276][ T5644] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.243488][ T5867] process 'syz.3.7' launched './file0' with NULL argv: empty string added [ 94.402922][ T5868] loop5: detected capacity change from 0 to 2048 [ 94.416288][ T5868] ======================================================= [ 94.416288][ T5868] WARNING: The mand mount option has been deprecated and [ 94.416288][ T5868] and is ignored by this kernel. Remove the mand [ 94.416288][ T5868] option from the mount to silence this warning. [ 94.416288][ T5868] ======================================================= [ 94.632434][ T5869] NILFS (loop5): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 95.227274][ T29] rndis_host 6-1:2.224: rndis: master #0/0000000000000000 slave #1/0000000000000000 [ 95.260646][ T29] usb 6-1: USB disconnect, device number 2 [ 95.264928][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.278182][ T48] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.305994][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.352968][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.901888][ T48] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.958319][ T1015] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.081889][ T1015] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.482872][ T5869] NILFS (loop5): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 97.611282][ T5869] NILFS error (device loop5): nilfs_bmap_propagate: broken bmap (inode number=4) [ 97.639516][ T5869] Remounting filesystem read-only [ 97.654237][ T5626] NILFS (loop5): disposed unprocessed dirty file(s) when stopping log writer [ 97.712272][ T58] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.720178][ T36] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.735778][ T58] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.745936][ T36] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.807126][ T1154] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.827400][ T5888] loop1: detected capacity change from 0 to 512 [ 97.840004][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.860334][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.886871][ T5888] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 97.930001][ T5888] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 98.044395][ T5888] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2860: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 98.067408][ T5888] EXT4-fs (loop1): 1 truncate cleaned up [ 98.103130][ T5888] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 98.205746][ T5896] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 98.395982][ T1174] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.776672][ T5898] loop5: detected capacity change from 0 to 512 [ 100.070069][ T5898] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 100.074738][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.082466][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.142887][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.200642][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.209739][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.217956][ T5898] EXT4-fs (loop5): 1 truncate cleaned up [ 100.246984][ T5898] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.257195][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 101.434231][ T5913] netdevsim netdevsim4: loading /lib/firmware/. failed with error -22 [ 101.442817][ T5913] netdevsim netdevsim4: Direct firmware load for . failed with error -22 [ 101.452245][ T5913] netdevsim netdevsim4: Falling back to sysfs fallback for: . [ 101.652838][ T1154] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.765877][ T1154] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.983018][ T1015] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.492601][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.501287][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.597925][ T5626] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.735802][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz.3.16'. [ 104.188494][ T5917] ALSA: mixer_oss: invalid OSS volume 'P' [ 105.792524][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 107.889567][ T5943] loop0: detected capacity change from 0 to 2048 [ 108.073146][ T5949] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 108.757396][ T30] audit: type=1800 audit(1785798412.682:2): pid=5943 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.18" name="bus" dev="loop0" ino=2097152 res=0 errno=0 [ 108.785899][ T5945] Zero length message leads to an empty skb [ 110.137661][ T5959] pim6reg: entered allmulticast mode [ 110.213684][ T5943] NILFS (loop0): nilfs_sufile_do_free: segment 9 is already clean [ 111.696484][ T5970] loop4: detected capacity change from 0 to 131072 [ 111.722298][ T5970] F2FS-fs (loop4): invalid crc value [ 111.799797][ T5970] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 111.815037][ T5970] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 111.863221][ T5955] pim6reg: left allmulticast mode [ 112.851140][ T5978] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 112.867227][ T5979] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 116.144326][ T6009] Bluetooth: MGMT ver 1.23 [ 116.852381][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 118.592531][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c0!!! [ 119.002012][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 120.723647][ T6031] syz.1.33 uses obsolete (PF_INET,SOCK_PACKET) [ 122.452491][ T6042] vxfs: unable to read disk superblock at 1 [ 122.460300][ T6042] vxfs: unable to read disk superblock at 8 [ 122.467192][ T6042] vxfs: can't find superblock. [ 124.055690][ T6033] syz.3.34 (6033) used greatest stack depth: 17264 bytes left [ 125.186340][ T6058] pim6reg: entered allmulticast mode [ 125.227939][ T6058] pim6reg: left allmulticast mode [ 125.764169][ T6052] loop1: detected capacity change from 0 to 512 [ 126.272133][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 126.393815][ T6052] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 126.455608][ T6057] loop0: detected capacity change from 0 to 16 [ 126.894158][ T6057] erofs (device loop0): mounted with root inode @ nid 36. [ 127.429152][ T6065] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5645] was attempted by ""[6065] [ 128.529555][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.635292][ T6074] loop3: detected capacity change from 0 to 32768 [ 129.643913][ T6074] XFS (loop3): sunit and swidth options incompatible with the noalign option [ 130.013053][ T6077] binder_alloc: 6075: pid 6075 spamming oneway? 1 buffers allocated for a total size of 4096 [ 130.173947][ T6080] xt_CONNSECMARK: invalid mode: 66 [ 130.196195][ T6080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 130.775867][ T6082] binder_alloc: 6075: pid 6075 spamming oneway? 2 buffers allocated for a total size of 5120 [ 131.086147][ T6085] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 132.325433][ T6095] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 133.714147][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.722052][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.736244][ T5776] IPVS: starting estimator thread 0... [ 133.876780][ T6099] IPVS: using max 34 ests per chain, 81600 per kthread [ 134.818792][ T5776] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 135.542966][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 135.881028][ T4937] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.911219][ T4937] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.919996][ T4937] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.941358][ T4937] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.957033][ T4937] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 136.381926][ T6152] dummy0: entered allmulticast mode [ 136.392966][ T6152] dummy0: left allmulticast mode [ 137.242138][ T5776] usb 2-1: device descriptor read/all, error -71 [ 138.239017][ T5649] Bluetooth: hci6: command tx timeout [ 138.881399][ T4937] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 138.893100][ T4937] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 138.904059][ T4937] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 138.916870][ T4937] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 138.940997][ T4937] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 139.394334][ T6194] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 140.273353][ T6193] loop4: detected capacity change from 0 to 512 [ 140.698932][ T4937] Bluetooth: hci6: command tx timeout [ 141.205938][ T4937] Bluetooth: hci7: command tx timeout [ 141.485527][ T6193] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 141.873679][ T6200] IPVS: dh: FWM 3 0x00000003 - no destination available [ 142.702069][ T4937] Bluetooth: hci6: command tx timeout [ 143.261917][ T4937] Bluetooth: hci7: command tx timeout [ 143.668203][ T5644] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 144.802252][ T4937] Bluetooth: hci6: command tx timeout [ 145.343811][ T4937] Bluetooth: hci7: command tx timeout [ 147.081147][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.1.64'. [ 147.191344][ T6241] kernel profiling enabled (shift: 5) [ 147.655080][ T4937] Bluetooth: hci7: command tx timeout [ 149.001312][ T6256] loop4: detected capacity change from 0 to 128 [ 149.057291][ T6256] EXT4-fs: Ignoring removed orlov option [ 149.251263][ T6253] loop1: detected capacity change from 0 to 32768 [ 149.258635][ T6253] btrfs: Deprecated parameter 'usebackuproot' [ 149.264919][ T6253] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 149.290648][ T6253] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.66 (6253) [ 149.328628][ T6253] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 149.339590][ T6253] BTRFS info (device loop1): using crc32c checksum algorithm [ 149.589990][ T6133] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.623827][ T6256] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.674724][ T6262] loop0: detected capacity change from 0 to 256 [ 149.682174][ T6262] exfat: Deprecated parameter 'utf8' [ 149.687516][ T6262] exfat: Deprecated parameter 'namecase' [ 149.693324][ T6262] exfat: Deprecated parameter 'namecase' [ 149.698978][ T6262] exfat: Deprecated parameter 'utf8' [ 149.719540][ T6262] exFAT-fs (loop0): failed to load upcase table (idx : 0x00012153, chksum : 0x9bc02125, utbl_chksum : 0xe619d30d) [ 149.734036][ T6262] exFAT-fs (loop0): failed to test first cluster bit of root dir(5) [ 150.013735][ T1174] BTRFS warning (device loop1): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 150.071711][ T6256] ext4 filesystem being mounted at /14/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 150.172333][ T6253] BTRFS error (device loop1): failed to load root extent [ 150.180507][ T6253] BTRFS warning (device loop1): try to load backup roots slot 1 [ 150.218726][ T13] BTRFS warning (device loop1): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 150.419492][ T6253] BTRFS warning (device loop1): couldn't read tree root [ 150.427259][ T6253] BTRFS warning (device loop1): try to load backup roots slot 2 [ 150.493163][ T6275] fuse: Unknown parameter '0x0000000000000009' [ 150.493737][ T5921] BTRFS error (device loop1): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 150.665657][ T6253] BTRFS warning (device loop1): couldn't read tree root [ 150.672792][ T6253] BTRFS warning (device loop1): try to load backup roots slot 3 [ 150.806302][ T6253] BTRFS info (device loop1): rebuilding free space tree [ 150.853612][ T6253] BTRFS info (device loop1): checking UUID tree [ 150.860537][ T6253] BTRFS info (device loop1): enabling ssd optimizations [ 150.867597][ T6253] BTRFS info (device loop1): turning on async discard [ 150.874426][ T6253] BTRFS info (device loop1): enabling free space tree [ 150.881185][ T6253] BTRFS info (device loop1): force clearing of disk cache [ 150.888362][ T6253] BTRFS info (device loop1): enabling auto defrag [ 150.894806][ T6253] BTRFS info (device loop1): trying to use backup root at mount time [ 150.902916][ T6253] BTRFS info (device loop1): use zstd compression, level 3 [ 152.151067][ T5644] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 152.185500][ T6133] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.245984][ T5639] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 153.380950][ T6300] loop4: detected capacity change from 0 to 64 [ 153.868650][ T6308] netlink: 4 bytes leftover after parsing attributes in process `syz.4.75'. [ 154.711337][ T6133] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.918272][ T6315] netlink: 12 bytes leftover after parsing attributes in process `syz.1.76'. [ 157.100776][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.0.78'. [ 157.113588][ T6328] binder: BINDER_SET_CONTEXT_MGR already set [ 157.146616][ T6133] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.170535][ T6328] binder: 6325:6328 ioctl 4018620d 200000004a80 returned -16 [ 159.142746][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 159.962073][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 160.735587][ T6141] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.767227][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.802206][ T6141] bridge_slave_0: entered allmulticast mode [ 160.899905][ T6320] ALSA: mixer_oss: invalid OSS volume 'P' [ 161.565632][ T6141] bridge_slave_0: entered promiscuous mode [ 161.672043][ T6141] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.679333][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.691911][ T6141] bridge_slave_1: entered allmulticast mode [ 161.700079][ T6141] bridge_slave_1: entered promiscuous mode [ 162.762021][ T6141] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.774885][ T6141] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.824233][ T6141] team0: Port device team_slave_0 added [ 162.833969][ T6141] team0: Port device team_slave_1 added [ 163.464100][ T6344] pim6reg: entered allmulticast mode [ 163.468163][ T6356] loop3: detected capacity change from 0 to 256 [ 163.479382][ T6344] pim6reg: left allmulticast mode [ 163.487727][ T6356] exfat: Deprecated parameter 'utf8' [ 163.594012][ T6356] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 163.743956][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.769254][ T6358] netlink: 248 bytes leftover after parsing attributes in process `syz.3.86'. [ 163.780195][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 163.840685][ T6141] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.871153][ T6359] netlink: 28 bytes leftover after parsing attributes in process `syz.3.86'. [ 163.885231][ T6356] veth0_to_bond: mtu less than device minimum [ 163.927772][ T6356] netlink: 40 bytes leftover after parsing attributes in process `syz.3.86'. [ 163.988464][ T6141] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.013054][ T6141] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 164.071969][ T6141] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.357966][ T6361] loop0: detected capacity change from 0 to 32768 [ 164.411044][ T6361] ocfs2: Mounting device (7,0) on (node local, slot 0) with ordered data mode. [ 165.668016][ T6369] loop3: detected capacity change from 0 to 1024 [ 165.677039][ T6371] loop1: detected capacity change from 0 to 512 [ 165.727937][ T6371] EXT4-fs (loop1): couldn't mount as ext3 due to feature incompatibilities [ 165.769479][ T6141] hsr_slave_0: entered promiscuous mode [ 165.791105][ T6141] hsr_slave_1: entered promiscuous mode [ 165.835069][ T6141] debugfs: 'hsr0' already exists in 'hsr' [ 165.860170][ T6141] Cannot create hsr debugfs directory [ 165.914308][ T6373] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5639] was attempted by " Àÿ Ðÿ ð¥ Àÿ Àÿ Ðÿ àÿ ðÿ °ÿ Àÿ ÿÿÿÿ ./file1 ext3  ” /dev/sequencer  ‹  [ 166.039460][ T6133] bridge_slave_1: left allmulticast mode [ 166.886158][ T6133] bridge_slave_1: left promiscuous mode [ 166.895186][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.963259][ T6377] loop1: detected capacity change from 0 to 256 [ 167.740733][ T6379] hfsplus: xattr search failed [ 168.061620][ T6133] bridge_slave_0: left allmulticast mode [ 168.114347][ T6133] bridge_slave_0: left promiscuous mode [ 168.168491][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.648478][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.683870][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.698165][ T6133] bond0 (unregistering): Released all slaves [ 168.719896][ T6382] loop3: detected capacity change from 0 to 32768 [ 168.727696][ T6382] btrfs: Deprecated parameter 'usebackuproot' [ 168.733860][ T6382] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 168.746534][ T6382] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.89 (6382) [ 168.901027][ T6382] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 168.911428][ T6382] BTRFS info (device loop3): using crc32c checksum algorithm [ 168.982573][ T6375] dummy0: entered allmulticast mode [ 169.029824][ T5622] ocfs2: Unmounting device (7,0) on (node local) [ 169.038663][ T6375] dummy0: left allmulticast mode [ 169.072203][ T6138] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 169.150007][ T6382] BTRFS error (device loop3): failed to load root extent [ 169.157174][ T6382] BTRFS warning (device loop3): try to load backup roots slot 1 [ 169.165328][ T6138] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 169.240438][ T6382] BTRFS warning (device loop3): couldn't read tree root [ 169.247961][ T6382] BTRFS warning (device loop3): try to load backup roots slot 2 [ 169.261179][ T12] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 169.317775][ T6382] BTRFS warning (device loop3): couldn't read tree root [ 169.326861][ T6382] BTRFS warning (device loop3): try to load backup roots slot 3 [ 169.356019][ T6382] BTRFS info (device loop3): rebuilding free space tree [ 169.377747][ T6382] BTRFS info (device loop3): checking UUID tree [ 169.386943][ T6382] BTRFS info (device loop3): enabling ssd optimizations [ 169.394338][ T6382] BTRFS info (device loop3): turning on async discard [ 169.401136][ T6382] BTRFS info (device loop3): enabling free space tree [ 169.408090][ T6382] BTRFS info (device loop3): force clearing of disk cache [ 169.415270][ T6382] BTRFS info (device loop3): enabling auto defrag [ 169.421782][ T6382] BTRFS info (device loop3): trying to use backup root at mount time [ 169.429857][ T6382] BTRFS info (device loop3): use zstd compression, level 3 [ 171.495252][ T5645] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 171.623950][ T6420] loop4: detected capacity change from 0 to 128 [ 171.774075][ T6420] EXT4-fs: Ignoring removed orlov option [ 172.029241][ T6420] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 172.153235][ T6420] ext4 filesystem being mounted at /20/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 172.399100][ T6178] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.545176][ T6178] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.730303][ T6178] bridge_slave_0: entered allmulticast mode [ 172.796409][ T6425] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 173.387596][ T6178] bridge_slave_0: entered promiscuous mode [ 175.122173][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 175.175210][ T5644] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.418918][ T6447] capability: warning: `syz.0.97' uses 32-bit capabilities (legacy support in use) [ 176.419478][ T6178] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.445340][ T6178] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.462186][ T6178] bridge_slave_1: entered allmulticast mode [ 176.523183][ T6451] loop0: detected capacity change from 0 to 256 [ 177.565894][ T6451] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 177.933158][ T6178] bridge_slave_1: entered promiscuous mode [ 178.139824][ T5283] 8021q: adding VLAN 0 to HW filter on device eth1 [ 178.460136][ T6133] hsr_slave_0: left promiscuous mode [ 178.494441][ T6133] hsr_slave_1: left promiscuous mode [ 178.509324][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.532086][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.929910][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.010124][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.113361][ T6133] veth1_macvtap: left promiscuous mode [ 180.119010][ T6133] veth0_macvtap: left promiscuous mode [ 180.166284][ T6133] veth1_vlan: left promiscuous mode [ 180.208467][ T6133] veth0_vlan: left promiscuous mode [ 182.097978][ T6505] fuse: Unknown parameter '0x000000000000000a' [ 182.377606][ T6507] loop3: detected capacity change from 0 to 256 [ 182.393917][ T6507] exFAT-fs (loop3): failed to load upcase table (idx : 0x0001fe89, chksum : 0xbf24f927, utbl_chksum : 0xe619d30d) [ 182.440116][ T6507] af_packet: tpacket_rcv: packet too big, clamped from 112 to 4294967272. macoff=96 [ 183.313815][ T6513] overlayfs: failed to resolve './file1': -2 [ 184.722255][ T6519] loop4: detected capacity change from 0 to 32768 [ 184.769734][ T6519] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 184.791197][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 185.376643][ T30] audit: type=1800 audit(1785798489.292:3): pid=6526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.113" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 186.013089][ T6522] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 186.395827][ T6522] loop3: detected capacity change from 0 to 4096 [ 186.861402][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 188.264684][ T5644] ocfs2: Unmounting device (7,4) on (node local) [ 188.583833][ T6521] ntfs3(loop3): mft corrupted [ 189.160537][ T6178] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.291011][ T6516] dummy0: entered allmulticast mode [ 189.320841][ T6516] dummy0: left allmulticast mode [ 190.288687][ T6178] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.012477][ T24] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 191.052702][ T6178] team0: Port device team_slave_0 added [ 191.062044][ T6178] team0: Port device team_slave_1 added [ 191.413989][ T6556] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 191.425223][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 191.432727][ T6556] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 191.489225][ T24] usb 5-1: config 0 interface 0 altsetting 11 endpoint 0x81 has an invalid bInterval 180, changing to 11 [ 191.949108][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.951491][ T24] usb 5-1: config 0 interface 0 has no altsetting 0 [ 192.004320][ T24] usb 5-1: New USB device found, idVendor=146b, idProduct=0902, bcdDevice= 0.00 [ 192.023769][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 192.057974][ T24] usb 5-1: config 0 descriptor?? [ 192.148960][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 192.247559][ T6178] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 192.369623][ T6565] dummy0: entered allmulticast mode [ 192.394639][ T6178] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.468915][ T6178] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 194.431014][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.453209][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.646036][ T6178] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.774171][ T5649] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 194.830845][ T24] usbhid 5-1:0.0: can't add hid device: -71 [ 194.854918][ T24] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 194.869551][ T5649] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 194.884185][ T6565] dummy0: left allmulticast mode [ 194.894611][ T5649] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 194.911551][ T5649] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 194.933268][ T5649] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 195.143634][ T24] usb 5-1: USB disconnect, device number 2 [ 195.332317][ T6581] overlayfs: failed to resolve './file0': -2 [ 195.363548][ T5766] IPVS: starting estimator thread 0... [ 195.462301][ T6569] netlink: 56 bytes leftover after parsing attributes in process `syz.3.122'. [ 196.239214][ T6585] loop0: detected capacity change from 0 to 1024 [ 196.282139][ T6583] IPVS: using max 25 ests per chain, 60000 per kthread [ 197.267410][ T4937] Bluetooth: hci1: command tx timeout [ 197.903231][ T6605] serio: Serial port ptm0 [ 198.328263][ T6607] overlayfs: workdir and upperdir must be separate subtrees [ 199.341938][ T5649] Bluetooth: hci1: command tx timeout [ 200.212145][ T5649] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 200.258413][ T5649] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 200.269230][ T5649] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 200.282454][ T5649] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 200.294531][ T5649] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 201.045998][ T6626] loop0: detected capacity change from 0 to 32768 [ 201.247467][ T6626] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 201.255922][ T6626] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 201.565737][ T5649] Bluetooth: hci1: command tx timeout [ 201.621321][ T6626] gfs2: fsid=syz:syz.0: journal 0 mapped with 5 extents in 0ms [ 201.634125][ T5735] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 201.684028][ T5735] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 201.744097][ T6133] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.003751][ T5735] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 319ms [ 202.088830][ T6640] netlink: 'syz.4.131': attribute type 10 has an invalid length. [ 202.305255][ T5735] gfs2: fsid=syz:syz.0: jid=0: Done [ 202.369606][ T6626] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 202.444779][ T5649] Bluetooth: hci2: command tx timeout [ 202.685719][ T6632] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 202.695173][ T6632] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 202.702841][ T6626] gfs2: fsid=syz:syz.0: found 1 quota changes [ 202.705063][ T6632] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 202.715731][ T5283] 8021q: adding VLAN 0 to HW filter on device eth3 [ 203.057522][ T6640] 8021q: adding VLAN 0 to HW filter on device team0 [ 203.067228][ T6640] bond0: (slave team0): Enslaving as an active interface with an up link [ 203.481802][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 203.614407][ T5649] Bluetooth: hci1: command tx timeout [ 203.955791][ T6656] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 203.965076][ T6656] netlink: 48 bytes leftover after parsing attributes in process `syz.4.133'. [ 204.141343][ T6133] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.301877][ T5766] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 204.371485][ T6133] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.461785][ T6657] Bluetooth: hci2: command tx timeout [ 205.567684][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 205.601765][ T5766] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 205.634543][ T5766] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ac.7e [ 205.651397][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.658423][ T5622] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 11 2339, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 402 [ 205.669917][ T5766] usb 5-1: Product: syz [ 205.688734][ T5766] usb 5-1: Manufacturer: syz [ 205.715517][ T5766] usb 5-1: SerialNumber: syz [ 205.717170][ T5622] gfs2: fsid=syz:syz.0: G: s:EX n:2/923 f:aqonN t:EX d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 205.762053][ T5622] gfs2: fsid=syz:syz.0: H: s:EX f:H e:0 p:5622 [syz-executor] gfs2_quota_sync+0x353/0x450 [ 205.801228][ T6678] overlayfs: failed to resolve './file0': -2 [ 205.814998][ T6668] dummy0: entered allmulticast mode [ 205.848243][ T6668] dummy0: left allmulticast mode [ 205.865005][ T5622] gfs2: fsid=syz:syz.0: I: n:11/2339 t:0 f:0x00 d:0x00000000 s:0 p:0 [ 205.905703][ T6657] Bluetooth: hci5: command 0x0406 tx timeout [ 205.912969][ T6657] Bluetooth: hci4: command 0x0406 tx timeout [ 205.976408][ T5622] CPU: 1 UID: 0 PID: 5622 Comm: syz-executor Tainted: G L syzkaller #0 PREEMPT(full) [ 205.976450][ T5622] Tainted: [L]=SOFTLOCKUP [ 205.976459][ T5622] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 205.976474][ T5622] Call Trace: [ 205.976484][ T5622] [ 205.976495][ T5622] dump_stack_lvl+0xe8/0x150 [ 205.976540][ T5622] gfs2_withdraw+0xc3/0x1b0 [ 205.976572][ T5622] inode_go_instantiate+0xbc7/0x12c0 [ 205.976608][ T5622] ? preempt_schedule_thunk+0x16/0x40 [ 205.976645][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.976679][ T5622] ? __pfx_inode_go_instantiate+0x10/0x10 [ 205.976709][ T5622] ? srso_alias_return_thunk+0x5/0xfbef5 [ 205.976749][ T5622] gfs2_instantiate+0x168/0x220 [ 205.976783][ T5622] gfs2_glock_wait+0x1d4/0x2a0 [ 205.976818][ T5622] do_sync+0x49c/0xbb0 [ 205.976855][ T5622] ? gfs2_quota_sync+0x353/0x450 [ 205.976903][ T5622] ? __pfx_do_sync+0x10/0x10 [ 205.976956][ T5622] ? gfs2_quota_sync+0x353/0x450 [ 205.976998][ T5622] ? do_raw_spin_unlock+0xf5/0x210 [ 205.977036][ T5622] gfs2_quota_sync+0x353/0x450 [ 205.977087][ T5622] gfs2_sync_fs+0x4c/0xb0 [ 205.977124][ T5622] sync_filesystem+0xee/0x230 [ 205.977155][ T5622] generic_shutdown_super+0x77/0x2d0 [ 205.977200][ T5622] kill_block_super+0x44/0x90 [ 205.977229][ T5622] deactivate_locked_super+0xbc/0x130 [ 205.977271][ T5622] cleanup_mnt+0x3d3/0x460 [ 205.977303][ T5622] task_work_run+0x1d9/0x270 [ 205.977333][ T5622] ? __pfx_task_work_run+0x10/0x10 [ 205.977370][ T5622] exit_to_user_mode_loop+0x1fa/0x730 [ 205.977407][ T5622] ? rcu_is_watching+0x15/0xb0 [ 205.977435][ T5622] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.977464][ T5622] do_syscall_64+0x353/0x580 [ 205.977503][ T5622] ? trace_irq_disable+0x3b/0x140 [ 205.977546][ T5622] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.977572][ T5622] RIP: 0033:0x7f4748d9f257 [ 205.977602][ T5622] Code: a2 c7 05 9c 44 25 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 205.977623][ T5622] RSP: 002b:00007ffd1ef3b8a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 205.977649][ T5622] RAX: 0000000000000000 RBX: 00007f4748e3445c RCX: 00007f4748d9f257 [ 205.977666][ T5622] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffd1ef3b960 [ 205.977682][ T5622] RBP: 00007ffd1ef3b960 R08: 00007ffd1ef3c960 R09: 00000000ffffffff [ 205.977700][ T5622] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffd1ef3c9f0 [ 205.977716][ T5622] R13: 00007f4748e3445c R14: 0000000000031860 R15: 00007ffd1ef3ca30 [ 205.977756][ T5622] [ 206.354408][ T5766] usb 5-1: config 0 descriptor?? [ 206.374003][ T5649] Bluetooth: hci3: command 0x0406 tx timeout [ 206.380064][ T5649] Bluetooth: hci0: command 0x0406 tx timeout [ 206.395636][ T5766] hub 5-1:0.0: bad descriptor, ignoring hub [ 206.401541][ T5766] hub 5-1:0.0: probe with driver hub failed with error -5 [ 206.444446][ T5766] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input5 [ 206.464087][ T5622] gfs2: fsid=syz:syz.0: about to withdraw this file system [ 206.541798][ T6654] Bluetooth: hci2: command tx timeout [ 207.245181][ T6688] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[5639] was attempted by ""[6688] [ 207.714326][ T6690] netlink: 60 bytes leftover after parsing attributes in process `syz.3.139'. [ 208.127982][ T6133] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.621817][ T50] Bluetooth: hci2: command tx timeout [ 210.258122][ T6708] dummy0: entered allmulticast mode [ 210.263594][ T6708] dummy0: left allmulticast mode [ 210.318189][ T6714] netlink: 32 bytes leftover after parsing attributes in process `syz.3.143'. [ 210.424371][ T5865] usb 5-1: USB disconnect, device number 3 [ 210.444492][ T30] audit: type=1800 audit(1785798513.364:4): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.142" name="file0" dev="overlay" ino=169 res=0 errno=0 [ 210.531078][ T6714] JFS: charset not found [ 211.538891][ T6733] usb usb8: usbfs: process 6733 (syz.4.145) did not claim interface 0 before use [ 214.633069][ T6741] loop4: detected capacity change from 0 to 2048 [ 216.330403][ T6741] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.168900][ T6749] overlayfs: failed to resolve './file0': -2 [ 218.046338][ T5283] 8021q: adding VLAN 0 to HW filter on device eth2 [ 218.067682][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.133656][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.166139][ T6574] bridge_slave_0: entered allmulticast mode [ 218.286298][ T6574] bridge_slave_0: entered promiscuous mode [ 219.252061][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 219.409403][ T6765] tmpfs: Unknown parameter 'nr_blhcks' [ 219.772094][ T6764] loop3: detected capacity change from 0 to 1024 [ 220.223181][ T6755] dummy0: entered allmulticast mode [ 220.630637][ T6767] hfsplus: xattr search failed [ 220.635650][ T6768] hfsplus: xattr search failed [ 220.878009][ T6755] dummy0: left allmulticast mode [ 221.007581][ T6133] bridge_slave_1: left allmulticast mode [ 221.013958][ T6133] bridge_slave_1: left promiscuous mode [ 221.020382][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.115828][ T6771] loop0: detected capacity change from 0 to 512 [ 221.123461][ T6133] bridge_slave_0: left allmulticast mode [ 221.136896][ T6133] bridge_slave_0: left promiscuous mode [ 221.155222][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.163232][ T6771] ext2: Unknown parameter 'obj_type' [ 223.415479][ T6797] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 223.861113][ T6800] netlink: 104 bytes leftover after parsing attributes in process `syz.4.158'. [ 224.039140][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 224.076298][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 224.104203][ T6133] bond0 (unregistering): Released all slaves [ 224.128656][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.141051][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.148620][ T6574] bridge_slave_1: entered allmulticast mode [ 224.182972][ T6574] bridge_slave_1: entered promiscuous mode [ 224.334574][ T6787] dummy0: entered allmulticast mode [ 224.359132][ T6787] dummy0: left allmulticast mode [ 224.706538][ T6811] loop0: detected capacity change from 0 to 32768 [ 224.714462][ T6811] btrfs: Deprecated parameter 'usebackuproot' [ 224.720549][ T6811] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 224.733645][ T6811] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.159 (6811) [ 224.764112][ T6811] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 224.774322][ T6811] BTRFS info (device loop0): using crc32c checksum algorithm [ 224.873461][ T13] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 224.926751][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.928843][ T6811] BTRFS error (device loop0): failed to load root extent [ 224.943779][ T6811] BTRFS warning (device loop0): try to load backup roots slot 1 [ 224.944707][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.953646][ T12] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 224.977922][ T6811] BTRFS warning (device loop0): couldn't read tree root [ 224.985712][ T6811] BTRFS warning (device loop0): try to load backup roots slot 2 [ 224.997337][ T1174] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 225.008378][ T6811] BTRFS warning (device loop0): couldn't read tree root [ 225.015419][ T6811] BTRFS warning (device loop0): try to load backup roots slot 3 [ 225.045159][ T6811] BTRFS info (device loop0): rebuilding free space tree [ 225.073053][ T6811] BTRFS info (device loop0): checking UUID tree [ 225.089977][ T6811] BTRFS info (device loop0): enabling ssd optimizations [ 225.097005][ T6811] BTRFS info (device loop0): turning on async discard [ 225.103910][ T6811] BTRFS info (device loop0): enabling free space tree [ 225.110722][ T6811] BTRFS info (device loop0): force clearing of disk cache [ 225.117884][ T6811] BTRFS info (device loop0): enabling auto defrag [ 225.124353][ T6811] BTRFS info (device loop0): trying to use backup root at mount time [ 225.132455][ T6811] BTRFS info (device loop0): use zstd compression, level 3 [ 226.722438][ T5622] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 226.761382][ T5283] 8021q: adding VLAN 0 to HW filter on device eth4 [ 227.167013][ T6846] loop4: detected capacity change from 0 to 1024 [ 227.269857][ T6847] netlink: 8 bytes leftover after parsing attributes in process `syz.3.163'. [ 228.023980][ T6853] hfsplus: xattr search failed [ 228.029628][ T6854] hfsplus: xattr search failed [ 229.004989][ T6858] loop1: detected capacity change from 0 to 1024 [ 231.511174][ T30] audit: type=1800 audit(1785798534.434:5): pid=6870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.169" name="file0" dev="overlay" ino=219 res=0 errno=0 [ 231.576103][ T6574] team0: Port device team_slave_0 added [ 231.704306][ T6574] team0: Port device team_slave_1 added [ 232.901806][ T5941] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 233.291959][ T5941] usb 4-1: Using ep0 maxpacket: 32 [ 233.415328][ T5941] usb 4-1: config 0 has no interfaces? [ 233.527015][ T5941] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 234.547840][ T5941] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 234.590244][ T5941] usb 4-1: Product: syz [ 234.728984][ T6908] netlink: 68 bytes leftover after parsing attributes in process `syz.1.170'. [ 234.784303][ T5941] usb 4-1: Manufacturer: syz [ 234.817303][ T5941] usb 4-1: SerialNumber: syz [ 234.954182][ T6133] hsr_slave_0: left promiscuous mode [ 234.971716][ T5941] usb 4-1: config 0 descriptor?? [ 235.055396][ T6133] hsr_slave_1: left promiscuous mode [ 235.079387][ T5941] usb 4-1: can't set config #0, error -71 [ 235.097915][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.187238][ T5941] usb 4-1: USB disconnect, device number 2 [ 235.193324][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.347817][ T6133] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.387169][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.422628][ T6133] veth1_macvtap: left promiscuous mode [ 235.428500][ T6133] veth0_macvtap: left promiscuous mode [ 235.436180][ T6133] veth1_vlan: left promiscuous mode [ 235.441623][ T6133] veth0_vlan: left promiscuous mode [ 236.531945][ T6925] netlink: 104 bytes leftover after parsing attributes in process `syz.3.176'. [ 236.565598][ T6925] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 237.651280][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 237.723272][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 237.980897][ T6934] loop3: detected capacity change from 0 to 32768 [ 238.022911][ T6934] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 238.044873][ T6884] dummy0: entered allmulticast mode [ 238.059509][ T6884] dummy0: left allmulticast mode [ 238.088092][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.095006][ T6934] XFS (loop3): Ending clean mount [ 238.139904][ T6934] XFS (loop3): Quotacheck needed: Please wait. [ 238.144677][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.263966][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.342705][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.380219][ T6934] XFS (loop3): Quotacheck: Done. [ 238.390116][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 238.715143][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.895193][ T30] audit: type=1800 audit(1785798541.694:6): pid=6945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.178" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop3" ino=4429 res=0 errno=0 [ 239.036685][ T6947] loop1: detected capacity change from 0 to 1024 [ 239.066087][ T6950] loop4: detected capacity change from 0 to 1024 [ 239.312075][ T5645] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 240.663813][ T6574] hsr_slave_0: entered promiscuous mode [ 240.670678][ T6574] hsr_slave_1: entered promiscuous mode [ 240.704916][ T6622] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.439804][ T30] audit: type=1800 audit(1785798544.334:7): pid=6962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.183" name="file0" dev="overlay" ino=284 res=0 errno=0 [ 241.475172][ T6622] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.623739][ T6622] bridge_slave_0: entered allmulticast mode [ 241.635709][ T6622] bridge_slave_0: entered promiscuous mode [ 241.648015][ T6622] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.680985][ T6622] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.727515][ T6622] bridge_slave_1: entered allmulticast mode [ 241.784383][ T6622] bridge_slave_1: entered promiscuous mode [ 242.189696][ T6973] binder: 6967:6973 ioctl 40046205 0 returned -22 [ 244.276024][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 244.849704][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 245.064244][ T9] usb 2-1: config 0 has no interfaces? [ 245.277664][ T9] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 245.444667][ T9] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 245.494009][ T6990] netlink: 104 bytes leftover after parsing attributes in process `syz.0.187'. [ 245.552894][ T9] usb 2-1: Product: syz [ 245.647914][ T9] usb 2-1: Manufacturer: syz [ 245.713035][ T9] usb 2-1: SerialNumber: syz [ 246.106236][ T9] usb 2-1: config 0 descriptor?? [ 246.132733][ T6622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 246.139313][ T9] usb 2-1: can't set config #0, error -71 [ 246.349920][ T9] usb 2-1: USB disconnect, device number 4 [ 246.450741][ T6622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.153334][ T7011] loop3: detected capacity change from 0 to 64 [ 248.806520][ T7022] dummy0: entered allmulticast mode [ 248.849332][ T7022] dummy0: left allmulticast mode [ 249.990144][ T6622] team0: Port device team_slave_0 added [ 250.046978][ T6622] team0: Port device team_slave_1 added [ 250.148965][ T7044] loop1: detected capacity change from 0 to 1024 [ 250.191839][ T5735] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 250.384031][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 250.497140][ T7048] loop3: detected capacity change from 0 to 1024 [ 251.103322][ T7053] hfsplus: xattr search failed [ 251.253627][ T5735] usb 5-1: config 0 has no interfaces? [ 251.317386][ T5735] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 251.366121][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 251.424780][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.450093][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 251.594501][ T5735] usb 5-1: Product: syz [ 251.618745][ T5735] usb 5-1: Manufacturer: syz [ 251.637823][ T5735] usb 5-1: SerialNumber: syz [ 251.646612][ T30] audit: type=1800 audit(1785798554.564:8): pid=7057 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.196" name="file0" dev="overlay" ino=251 res=0 errno=0 [ 251.940498][ T7060] hfsplus: xattr search failed [ 251.945506][ T7061] hfsplus: xattr search failed [ 252.144511][ T5735] usb 5-1: config 0 descriptor?? [ 252.365180][ T6622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.430313][ T6622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.520005][ T6622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 252.715186][ T5735] usb 5-1: can't set config #0, error -71 [ 252.862687][ T6622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.882085][ T5735] usb 5-1: USB disconnect, device number 4 [ 254.951952][ T5735] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 255.147012][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.177039][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.312924][ T5735] usb 5-1: Using ep0 maxpacket: 32 [ 255.470318][ T5735] usb 5-1: config 0 has no interfaces? [ 255.633776][ T5735] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 255.795296][ T5735] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 255.980195][ T5735] usb 5-1: Product: syz [ 256.113855][ T5735] usb 5-1: Manufacturer: syz [ 256.262677][ T5735] usb 5-1: SerialNumber: syz [ 256.959252][ T5735] usb 5-1: config 0 descriptor?? [ 258.098642][ T7103] loop1: detected capacity change from 0 to 131072 [ 258.124826][ T7103] F2FS-fs (loop1): invalid crc value [ 258.275502][ T5283] 8021q: adding VLAN 0 to HW filter on device eth6 [ 258.442174][ T7108] loop3: detected capacity change from 0 to 256 [ 258.521019][ T5624] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 258.534920][ T7103] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 258.566689][ T5624] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 258.574235][ T7103] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e4 [ 258.592941][ T5624] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 258.607047][ T5624] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 258.617364][ T5624] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 258.656929][ T7108] xt_hashlimit: size too large, truncated to 1048576 [ 259.223441][ T24] usb 5-1: USB disconnect, device number 5 [ 259.946711][ T7145] F2FS-fs (loop1): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 65535, max: 36 [ 260.584545][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 260.594672][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 260.614416][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 260.633293][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 260.657310][ T50] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 260.701801][ T5624] Bluetooth: hci6: command tx timeout [ 260.819154][ T7157] ieee802154 phy0 wpan0: encryption failed: -22 [ 260.897728][ T7158] dummy0: entered allmulticast mode [ 260.904795][ T7158] dummy0: left allmulticast mode [ 262.900445][ T50] Bluetooth: hci6: command tx timeout [ 262.908716][ T5624] Bluetooth: hci7: command tx timeout [ 264.244776][ T7187] loop3: detected capacity change from 0 to 1024 [ 264.601303][ T7192] netlink: 100 bytes leftover after parsing attributes in process `syz.4.210'. [ 265.031847][ T5624] Bluetooth: hci7: command tx timeout [ 265.037422][ T50] Bluetooth: hci6: command tx timeout [ 265.055474][ T7196] hfsplus: xattr search failed [ 265.060363][ T7197] hfsplus: xattr search failed [ 265.208762][ T6133] bridge_slave_1: left allmulticast mode [ 265.267767][ T5735] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 265.366466][ T6133] bridge_slave_1: left promiscuous mode [ 265.386915][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.480954][ T6133] bridge_slave_0: left allmulticast mode [ 265.509719][ T6133] bridge_slave_0: left promiscuous mode [ 265.540732][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.722466][ T5735] usb 1-1: Using ep0 maxpacket: 32 [ 265.798090][ T5735] usb 1-1: config 0 has no interfaces? [ 266.023327][ T7204] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 266.041408][ T5735] usb 1-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 266.080142][ T5735] usb 1-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 266.131652][ T5735] usb 1-1: Product: syz [ 266.151314][ T5735] usb 1-1: Manufacturer: syz [ 266.175325][ T5735] usb 1-1: SerialNumber: syz [ 266.363011][ T6133] bridge_slave_1: left allmulticast mode [ 266.367025][ T5735] usb 1-1: config 0 descriptor?? [ 266.413296][ T6133] bridge_slave_1: left promiscuous mode [ 266.441603][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.508582][ T6133] bridge_slave_0: left allmulticast mode [ 266.520443][ T6133] bridge_slave_0: left promiscuous mode [ 266.527683][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.825445][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.855067][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.873001][ T6133] bond0 (unregistering): Released all slaves [ 267.076702][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 267.098133][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 267.107587][ T50] Bluetooth: hci6: command tx timeout [ 267.113228][ T5624] Bluetooth: hci7: command tx timeout [ 267.131490][ T6133] bond0 (unregistering): Released all slaves [ 267.351465][ T5283] 8021q: adding VLAN 0 to HW filter on device eth5 [ 267.367264][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.449494][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 267.580598][ T6133] hsr_slave_0: left promiscuous mode [ 267.629585][ T6133] hsr_slave_1: left promiscuous mode [ 267.671752][ T5735] usb 1-1: USB disconnect, device number 2 [ 267.684523][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 267.805658][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.076362][ T7252] netlink: 36 bytes leftover after parsing attributes in process `syz.0.212'. [ 269.838282][ T50] Bluetooth: hci7: command tx timeout [ 269.969807][ T7262] netlink: 104 bytes leftover after parsing attributes in process `syz.1.205'. [ 270.318344][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 270.687727][ T9] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 271.026720][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 271.118940][ T9] usb 5-1: config 0 has no interfaces? [ 271.307882][ T9] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 271.395554][ T9] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 271.443222][ T9] usb 5-1: Product: syz [ 271.492098][ T9] usb 5-1: Manufacturer: syz [ 271.545711][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 271.571072][ T9] usb 5-1: SerialNumber: syz [ 271.950605][ T9] usb 5-1: config 0 descriptor?? [ 273.944581][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 273.990510][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 274.883008][ T5750] usb 5-1: USB disconnect, device number 6 [ 275.232088][ T7311] ieee802154 phy0 wpan0: encryption failed: -22 [ 275.637854][ T7316] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 275.965263][ T7313] loop4: detected capacity change from 0 to 32768 [ 276.043909][ T7313] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 276.280016][ T7313] XFS (loop4): Ending clean mount [ 276.288589][ T7313] XFS (loop4): Quotacheck needed: Please wait. [ 276.606236][ T7313] XFS (loop4): Quotacheck: Done. [ 276.840302][ T7333] netlink: 76 bytes leftover after parsing attributes in process `syz.4.219'. [ 278.549579][ T7349] loop1: detected capacity change from 0 to 4096 [ 278.581231][ T6133] bridge_slave_1: left allmulticast mode [ 278.593181][ T7349] EXT4-fs: Ignoring removed orlov option [ 278.621603][ T6133] bridge_slave_1: left promiscuous mode [ 278.632204][ T5644] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 278.660119][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 278.708868][ T7349] EXT4-fs (loop1): Test dummy encryption mode enabled [ 278.750557][ T6133] bridge_slave_0: left allmulticast mode [ 278.810314][ T6133] bridge_slave_0: left promiscuous mode [ 278.818777][ T7349] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 278.843595][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.042431][ T6133] bridge_slave_1: left allmulticast mode [ 279.080387][ T6133] bridge_slave_1: left promiscuous mode [ 279.119843][ T6133] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.168852][ T6133] bridge_slave_0: left allmulticast mode [ 279.215034][ T6133] bridge_slave_0: left promiscuous mode [ 279.245997][ T6133] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.254846][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.295933][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.379010][ T6133] bond0 (unregistering): Released all slaves [ 281.600239][ T7367] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 281.917857][ T7380] netlink: 104 bytes leftover after parsing attributes in process `syz.4.225'. [ 281.976123][ T6133] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.009448][ T6133] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.029908][ T6133] bond0 (unregistering): Released all slaves [ 282.107491][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 282.197771][ T7376] dummy0: entered allmulticast mode [ 282.239120][ T5283] 8021q: adding VLAN 0 to HW filter on device eth7 [ 284.804232][ T7395] netlink: 20 bytes leftover after parsing attributes in process `syz.1.226'. [ 285.140950][ T7376] dummy0: left allmulticast mode [ 285.171959][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.227200][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.281383][ T6133] hsr_slave_0: left promiscuous mode [ 285.317863][ T6133] hsr_slave_1: left promiscuous mode [ 285.338951][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.361519][ T6133] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.203764][ T5766] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 286.522169][ T5766] usb 5-1: Using ep0 maxpacket: 32 [ 286.660022][ T5766] usb 5-1: config 0 has no interfaces? [ 286.741333][ T5766] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 286.809581][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 286.915442][ T5766] usb 5-1: Product: syz [ 286.986851][ T5766] usb 5-1: Manufacturer: syz [ 287.067938][ T5766] usb 5-1: SerialNumber: syz [ 287.341969][ T5766] usb 5-1: config 0 descriptor?? [ 287.734773][ T7410] ieee802154 phy0 wpan0: encryption failed: -22 [ 288.291294][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 289.022390][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 289.410665][ T5766] usb 5-1: USB disconnect, device number 7 [ 291.463418][ T7458] IPVS: set_ctl: invalid protocol: 92 172.20.20.39:20002 [ 291.973856][ T185] IPVS: starting estimator thread 0... [ 292.096260][ T7461] IPVS: using max 25 ests per chain, 60000 per kthread [ 292.104529][ T6133] team0 (unregistering): Port device team_slave_1 removed [ 292.130514][ T6133] team0 (unregistering): Port device team_slave_0 removed [ 292.459876][ T7466] netlink: 'syz.3.234': attribute type 1 has an invalid length. [ 293.084955][ T30] audit: type=1326 audit(1785798595.264:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7459 comm="syz.3.234" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f036f19e019 code=0x0 [ 294.323909][ T7475] capability: warning: `syz.3.237' uses deprecated v2 capabilities in a way that may be insecure [ 295.758060][ T7395] vlan2: entered promiscuous mode [ 295.763249][ T7395] ip6gretap0: entered promiscuous mode [ 296.917074][ T7489] trusted_key: syz.3.241 sent an empty control message without MSG_MORE. [ 297.542581][ T7490] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 299.686439][ T7150] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.701862][ T7150] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.735870][ T7150] bridge_slave_0: entered allmulticast mode [ 299.790116][ T7150] bridge_slave_0: entered promiscuous mode [ 299.834603][ T7497] loop3: detected capacity change from 0 to 128 [ 299.865760][ T7497] EXT4-fs: Ignoring removed orlov option [ 299.955597][ T7497] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 300.001825][ T7150] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.177764][ T7150] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.185600][ T7150] bridge_slave_1: entered allmulticast mode [ 300.193557][ T7150] bridge_slave_1: entered promiscuous mode [ 300.251780][ T7497] ext4 filesystem being mounted at /68/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 301.313138][ T7113] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.386906][ T7113] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.197936][ T7113] bridge_slave_0: entered allmulticast mode [ 302.379406][ T7113] bridge_slave_0: entered promiscuous mode [ 302.405438][ T7113] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.425547][ T5645] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 302.438317][ T7113] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.459532][ T7113] bridge_slave_1: entered allmulticast mode [ 302.511628][ T7113] bridge_slave_1: entered promiscuous mode [ 302.521569][ T7516] Bluetooth: MGMT ver 1.23 [ 302.573019][ T7150] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.637145][ T7150] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 304.917674][ T7113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.208713][ T7113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.231465][ T7543] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 307.306414][ T7150] team0: Port device team_slave_0 added [ 307.328181][ T7150] team0: Port device team_slave_1 added [ 307.367747][ T7548] dummy0: entered allmulticast mode [ 307.387605][ T7548] dummy0: left allmulticast mode [ 307.574548][ T7113] team0: Port device team_slave_0 added [ 307.705763][ T7113] team0: Port device team_slave_1 added [ 308.351034][ T7562] netlink: 44 bytes leftover after parsing attributes in process `syz.4.251'. [ 309.377286][ T7569] netlink: 20 bytes leftover after parsing attributes in process `syz.3.252'. [ 309.816937][ T7557] dummy0: entered allmulticast mode [ 309.859744][ T7557] dummy0: left allmulticast mode [ 309.920671][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.928706][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 309.958940][ T7150] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.975153][ T5283] 8021q: adding VLAN 0 to HW filter on device eth8 [ 310.232874][ T7569] vlan2: entered promiscuous mode [ 310.237965][ T7569] ip6gretap0: entered promiscuous mode [ 310.402545][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.503233][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 310.948144][ T7113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.110233][ T7113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.118760][ T7580] netlink: 'syz.4.253': attribute type 11 has an invalid length. [ 311.181266][ T7113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.364960][ T7113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.437703][ T7150] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.496390][ T7150] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 311.771728][ T5750] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 311.823924][ T7150] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 312.221007][ T5750] usb 2-1: Using ep0 maxpacket: 32 [ 312.566533][ T5750] usb 2-1: config 0 has no interfaces? [ 312.607502][ T5750] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 312.655498][ T5750] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 312.695764][ T5750] usb 2-1: Product: syz [ 312.729099][ T5750] usb 2-1: Manufacturer: syz [ 312.757508][ T5750] usb 2-1: SerialNumber: syz [ 312.804707][ T5750] usb 2-1: config 0 descriptor?? [ 314.649556][ T7630] comedi comedi2: adq12b: I/O base address or length out of range [ 314.665764][ T30] audit: type=1326 audit(1785798617.584:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7604 comm="syz.4.258" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f0185f9e019 code=0x0 [ 315.123395][ T7150] hsr_slave_0: entered promiscuous mode [ 315.230108][ T5865] usb 2-1: USB disconnect, device number 5 [ 315.269952][ T7150] hsr_slave_1: entered promiscuous mode [ 315.850106][ T7638] overlay: ./file0 is not a directory [ 316.464840][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.471209][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.162988][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 317.190674][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.206354][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.234296][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.250942][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.402458][ T7647] loop1: detected capacity change from 0 to 512 [ 317.418449][ T7647] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 317.475207][ T7647] EXT4-fs error (device loop1): ext4_orphan_get:1425: comm syz.1.263: bad orphan inode 131083 [ 317.485607][ T7647] loop1: lost filesystem error report for type 5 error -117 [ 317.491713][ C1] EXT4-fs (loop1): error count since last fsck: 1 [ 317.506500][ C1] EXT4-fs (loop1): initial error at time 1785798620: ext4_orphan_get:1425 [ 317.515052][ C1] EXT4-fs (loop1): last error at time 1785798620: ext4_orphan_get:1425 [ 317.548111][ T7653] netlink: 4 bytes leftover after parsing attributes in process `syz.3.265'. [ 317.596484][ T7647] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 318.261908][ T7653] bridge_slave_1: left allmulticast mode [ 318.279579][ T7653] bridge_slave_1: left promiscuous mode [ 318.318062][ T7653] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.462030][ T5776] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 318.594138][ T7653] bridge_slave_0: left allmulticast mode [ 318.599935][ T7653] bridge_slave_0: left promiscuous mode [ 318.607453][ T7653] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.342641][ T5624] Bluetooth: hci1: command tx timeout [ 319.637693][ T7669] loop4: detected capacity change from 0 to 32768 [ 319.721324][ T7669] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 319.731099][ T5776] usb 2-1: Using ep0 maxpacket: 8 [ 320.794324][ T30] audit: type=1800 audit(1785798623.294:11): pid=7675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.267" name="file1" dev="loop4" ino=17059 res=0 errno=0 [ 321.309164][ T5776] usb 2-1: device descriptor read/all, error -71 [ 321.402675][ T5644] ocfs2: Unmounting device (7,4) on (node local) [ 321.422146][ T5624] Bluetooth: hci1: command tx timeout [ 321.480914][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 321.599364][ T7682] loop3: detected capacity change from 0 to 1024 [ 321.619789][ T6131] bridge_slave_1: left allmulticast mode [ 321.634068][ T6131] bridge_slave_1: left promiscuous mode [ 321.926032][ T6131] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.897395][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 322.928143][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 323.355401][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 323.591991][ T4937] Bluetooth: hci1: command tx timeout [ 323.673806][ T7699] mmap: syz.1.270 (7699) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 323.710986][ T7699] comedi comedi0: comedi_bond: 4:2 attached, 32 channels from 1 devices [ 323.927398][ T6131] bridge_slave_0: left allmulticast mode [ 323.956782][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 323.974280][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 323.978224][ T6131] bridge_slave_0: left promiscuous mode [ 324.100350][ T7701] hfsplus: xattr search failed [ 324.105275][ T7702] hfsplus: xattr search failed [ 324.798408][ T6131] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.389168][ T7708] Need at least one configuration in g1. [ 325.496452][ T7719] 9pnet_fd: Insufficient options for proto=fd [ 325.505067][ T7719] IPVS: set_ctl: invalid protocol: 115 172.20.20.39:20002 [ 326.060547][ T50] Bluetooth: hci1: command tx timeout [ 326.090967][ T7708] udc usbip-vudc.0: failed to start g1: -22 [ 326.186490][ T7708] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 326.205012][ T7717] loop1: detected capacity change from 0 to 1024 [ 326.401206][ T7717] EXT4-fs: Ignoring removed nomblk_io_submit option [ 326.447693][ T7708] UDC core: g1: couldn't find an available UDC or it's busy [ 326.461937][ T5766] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 326.715461][ T50] Bluetooth: hci2: command tx timeout [ 326.780140][ T7730] netlink: 44 bytes leftover after parsing attributes in process `syz.3.277'. [ 327.382980][ T7717] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.465362][ T5766] usb 5-1: Using ep0 maxpacket: 32 [ 327.507704][ T5766] usb 5-1: config 0 has no interfaces? [ 327.539994][ T5766] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 327.572926][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 327.624872][ T5766] usb 5-1: Product: syz [ 327.647275][ T5766] usb 5-1: Manufacturer: syz [ 327.688760][ T5766] usb 5-1: SerialNumber: syz [ 327.728748][ T5766] usb 5-1: config 0 descriptor?? [ 327.766859][ T6131] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 327.994849][ T7745] netlink: 'syz.3.278': attribute type 2 has an invalid length. [ 328.261824][ T7745] netlink: 'syz.3.278': attribute type 8 has an invalid length. [ 328.269574][ T7745] netlink: 132 bytes leftover after parsing attributes in process `syz.3.278'. [ 328.962214][ T50] Bluetooth: hci2: command tx timeout [ 329.163531][ T7768] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 329.377567][ T6131] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.406507][ T5766] usb 5-1: can't set config #0, error -71 [ 329.473447][ T5766] usb 5-1: USB disconnect, device number 8 [ 329.898742][ T6131] bond0 (unregistering): Released all slaves [ 331.332198][ T50] Bluetooth: hci2: command tx timeout [ 332.391326][ T5639] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 332.436948][ T7781] loop4: detected capacity change from 0 to 131072 [ 332.445300][ T7781] xfs: Deprecated parameter 'ikeep' [ 332.450520][ T7781] XFS: ikeep mount option is deprecated. [ 332.737417][ T7781] XFS (loop4): Mounting V5 Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 332.925282][ T7781] XFS (loop4): Starting recovery (logdev: internal) [ 333.019381][ T7781] XFS (loop4): Ending recovery (logdev: internal) [ 333.456563][ T5624] Bluetooth: hci2: command tx timeout [ 333.916105][ T5644] XFS (loop4): Unmounting Filesystem b93a8937-ccd4-41a2-86c7-66a1570a2846 [ 333.928278][ T7741] bond0: (slave bond_slave_0): Releasing backup interface [ 334.060055][ T7741] bond0: (slave bond_slave_1): Releasing backup interface [ 336.951322][ T7741] team0: Port device team_slave_0 removed [ 337.030511][ T7741] team0: Port device team_slave_1 removed [ 337.057804][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.070326][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.099947][ T7799] xt_CT: No such helper "pptp" [ 337.108880][ T7741] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 337.130726][ T7741] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.170277][ T7741] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 337.293153][ T5283] 8021q: adding VLAN 0 to HW filter on device eth9 [ 337.318472][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 337.349818][ T6131] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 337.464894][ T7811] loop1: detected capacity change from 0 to 128 [ 337.472969][ T7811] EXT4-fs: Ignoring removed orlov option [ 337.736605][ T6131] team0 (unregistering): Port device team_slave_1 removed [ 337.820605][ T7820] netlink: 44 bytes leftover after parsing attributes in process `syz.4.288'. [ 338.720670][ T7811] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 338.745815][ T6131] team0 (unregistering): Port device team_slave_0 removed [ 339.416378][ T7811] ext4 filesystem being mounted at /60/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 339.656986][ T7829] loop4: detected capacity change from 0 to 1024 [ 341.677150][ T5639] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 342.882894][ T7854] xt_hashlimit: max too large, truncated to 1048576 [ 343.842719][ T5776] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 344.001796][ T5776] usb 5-1: Using ep0 maxpacket: 32 [ 344.065878][ T5776] usb 5-1: config 0 has no interfaces? [ 345.232620][ T5776] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 345.399963][ T5776] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 345.589439][ T5776] usb 5-1: Product: syz [ 345.647247][ T5776] usb 5-1: Manufacturer: syz [ 345.691435][ T5776] usb 5-1: SerialNumber: syz [ 345.807778][ T5776] usb 5-1: config 0 descriptor?? [ 345.839646][ T5776] usb 5-1: can't set config #0, error -71 [ 346.670033][ T7877] loop3: detected capacity change from 0 to 131072 [ 346.707350][ T7877] F2FS-fs (loop3): Segment count (31) mismatch with total segments from devices (0) [ 346.716860][ T7877] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 346.734829][ T7877] F2FS-fs (loop3): invalid crc value [ 346.767007][ T5776] usb 5-1: USB disconnect, device number 9 [ 346.848189][ T7877] F2FS-fs (loop3): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 346.888112][ T7877] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 346.896130][ T7877] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e4 [ 347.458534][ T7884] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 347.530083][ T7885] F2FS-fs (loop3): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 348.384599][ T7889] loop4: detected capacity change from 0 to 131072 [ 348.407701][ T7889] F2FS-fs (loop4): invalid crc value [ 348.492172][ T7889] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 348.562106][ T7889] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 351.919459][ T6138] bridge_slave_1: left allmulticast mode [ 351.948774][ T6138] bridge_slave_1: left promiscuous mode [ 352.008048][ T6138] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.065717][ T6138] bridge_slave_0: left allmulticast mode [ 352.079745][ T6138] bridge_slave_0: left promiscuous mode [ 352.090027][ T6138] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.357929][ T6138] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.495538][ T6138] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.547920][ T6138] bond0 (unregistering): Released all slaves [ 355.677028][ T7923] bond1: entered promiscuous mode [ 355.779693][ T6138] hsr_slave_0: left promiscuous mode [ 355.811541][ T6138] hsr_slave_1: left promiscuous mode [ 355.833886][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.893727][ T6138] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.303415][ T185] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 357.514313][ T185] usb 2-1: Using ep0 maxpacket: 32 [ 357.538346][ T185] usb 2-1: config 0 has no interfaces? [ 357.595090][ T185] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 357.610204][ T185] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 357.636308][ T6138] team0 (unregistering): Port device team_slave_1 removed [ 357.644548][ T185] usb 2-1: Product: syz [ 357.657890][ T185] usb 2-1: Manufacturer: syz [ 357.673854][ T185] usb 2-1: SerialNumber: syz [ 357.731269][ T185] usb 2-1: config 0 descriptor?? [ 357.746458][ T6138] team0 (unregistering): Port device team_slave_0 removed [ 359.191685][ T7979] overlayfs: workdir and upperdir must be separate subtrees [ 359.540618][ T185] usb 2-1: USB disconnect, device number 8 [ 360.196310][ T8002] netlink: 24 bytes leftover after parsing attributes in process `syz.0.313'. [ 360.920924][ T8009] dummy0: entered allmulticast mode [ 360.926582][ T8009] dummy0: left allmulticast mode [ 360.971172][ T8010] overlayfs: failed to resolve '/32': -2 [ 361.231764][ T8013] loop4: detected capacity change from 0 to 32768 [ 361.310411][ T8013] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 361.474675][ T8018] netlink: 100 bytes leftover after parsing attributes in process `syz.3.318'. [ 362.914508][ T8024] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 363.421238][ T5644] ocfs2: Unmounting device (7,4) on (node local) [ 364.068544][ T8044] loop3: detected capacity change from 0 to 4096 [ 364.094042][ T8044] ntfs3(loop3): ino=0, mi_enum_attr [ 364.263864][ T8044] ntfs3(loop3): ino=0, mi_enum_attr [ 364.984646][ T7640] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.032125][ T8044] ntfs3(loop3): ino=0, mi_enum_attr [ 365.047201][ T7640] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.109963][ T7640] bridge_slave_0: entered allmulticast mode [ 365.156538][ T7640] bridge_slave_0: entered promiscuous mode [ 366.398166][ T7640] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.505444][ T7640] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.614445][ T7640] bridge_slave_1: entered allmulticast mode [ 366.768658][ T7640] bridge_slave_1: entered promiscuous mode [ 366.801844][ T8063] xt_CT: No such helper "pptp" [ 366.833340][ T8062] bridge0: port 3(erspan0) entered blocking state [ 366.840797][ T8062] bridge0: port 3(erspan0) entered disabled state [ 366.847673][ T8062] erspan0: entered allmulticast mode [ 366.856169][ T8062] erspan0: entered promiscuous mode [ 366.863166][ T8062] bridge0: port 3(erspan0) entered blocking state [ 366.869793][ T8062] bridge0: port 3(erspan0) entered forwarding state [ 367.171612][ T8074] fuse: Unknown parameter '0xffffffffffffffff' [ 367.306680][ T7640] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.323451][ T8079] loop4: detected capacity change from 0 to 128 [ 367.344462][ T7640] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 368.138926][ T7688] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.148540][ T7688] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.194496][ T7688] bridge_slave_0: entered allmulticast mode [ 368.243156][ T7688] bridge_slave_0: entered promiscuous mode [ 368.333126][ T8084] overlayfs: failed to clone upperpath [ 368.388404][ T7688] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.420988][ T7688] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.449017][ T7688] bridge_slave_1: entered allmulticast mode [ 368.520807][ T7688] bridge_slave_1: entered promiscuous mode [ 369.568143][ T7640] team0: Port device team_slave_0 added [ 369.576025][ T5283] 8021q: adding VLAN 0 to HW filter on device eth10 [ 369.640375][ T7640] team0: Port device team_slave_1 added [ 370.258929][ T7688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.835323][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 370.850984][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 370.895333][ T7640] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 370.909088][ T8100] dummy0: entered allmulticast mode [ 370.914483][ T8100] dummy0: left allmulticast mode [ 370.924417][ T7688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.581320][ T8117] loop3: detected capacity change from 0 to 1764 [ 373.067933][ T7640] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.109852][ T7640] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 373.227682][ T7640] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.295025][ T7688] team0: Port device team_slave_0 added [ 373.313410][ T7688] team0: Port device team_slave_1 added [ 373.457575][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.490894][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 374.756237][ T7688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.781201][ T7688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.801695][ T7688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 375.712615][ T8130] overlayfs: failed to clone lowerpath [ 375.957366][ T7688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 376.554301][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 376.567681][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 376.579015][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 376.587148][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 376.594861][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 376.723521][ T8144] serio: Serial port ptm0 [ 376.921941][ T8154] overlayfs: workdir and upperdir must be separate subtrees [ 377.585240][ T7688] hsr_slave_0: entered promiscuous mode [ 377.596570][ T7688] hsr_slave_1: entered promiscuous mode [ 377.901710][ T8162] faux_driver vgem: [drm] Unknown color mode 9; guessing buffer size. [ 377.942913][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.949705][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.636832][ T50] Bluetooth: hci6: command tx timeout [ 379.114916][ T8167] loop4: detected capacity change from 0 to 1024 [ 379.435508][ T8170] dummy0: entered allmulticast mode [ 379.440844][ T8170] dummy0: left allmulticast mode [ 379.912561][ T8177] hfsplus: xattr search failed [ 379.919143][ T8178] hfsplus: xattr search failed [ 380.275078][ T13] bridge_slave_1: left allmulticast mode [ 380.280914][ T13] bridge_slave_1: left promiscuous mode [ 380.287326][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 380.313638][ T13] bridge_slave_0: left allmulticast mode [ 380.328661][ T13] bridge_slave_0: left promiscuous mode [ 380.346098][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.519178][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 380.543995][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 380.555271][ T13] bond0 (unregistering): Released all slaves [ 380.694275][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.715687][ T50] Bluetooth: hci6: command tx timeout [ 380.744499][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 381.549872][ T13] team0 (unregistering): Port device team_slave_1 removed [ 381.619254][ T13] team0 (unregistering): Port device team_slave_0 removed [ 381.806990][ T8192] loop4: detected capacity change from 0 to 64 [ 382.052142][ T5624] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 382.064175][ T5624] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 382.074683][ T5624] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 382.084856][ T5624] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 382.093047][ T5624] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 382.792435][ T5624] Bluetooth: hci6: command tx timeout [ 384.141910][ T5624] Bluetooth: hci1: command tx timeout [ 384.211833][ T30] audit: type=1800 audit(1785798687.124:12): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="idProduct" dev="configfs" ino=15237 res=0 errno=0 [ 384.433540][ T30] audit: type=1800 audit(1785798687.174:13): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="idVendor" dev="configfs" ino=15236 res=0 errno=0 [ 384.495609][ T8187] dummy0: entered allmulticast mode [ 384.500982][ T8187] dummy0: left allmulticast mode [ 384.547001][ T8197] erspan0: left allmulticast mode [ 384.554393][ T8197] erspan0: left promiscuous mode [ 384.571419][ T8197] bridge0: port 3(erspan0) entered disabled state [ 384.579351][ T30] audit: type=1800 audit(1785798687.394:14): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="manufacturer" dev="configfs" ino=15239 res=0 errno=0 [ 384.630399][ T8231] Config c/1 of g1 needs at least one function. [ 384.638531][ T30] audit: type=1800 audit(1785798687.404:15): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="configuration" dev="configfs" ino=15244 res=0 errno=0 [ 384.664609][ T30] audit: type=1800 audit(1785798687.464:16): pid=8230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="configuration" dev="configfs" ino=15252 res=0 errno=0 [ 384.665527][ T8197] bridge_slave_1: left allmulticast mode [ 384.693361][ T8231] udc dummy_udc.0: failed to start g1: -22 [ 384.711744][ T8231] configfs-gadget.g1 gadget.0: probe with driver configfs-gadget.g1 failed with error -22 [ 384.727120][ T8197] bridge_slave_1: left promiscuous mode [ 384.738784][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.758463][ T8231] UDC core: g1: couldn't find an available UDC or it's busy [ 384.774633][ T8197] bridge_slave_0: left allmulticast mode [ 384.780906][ T8197] bridge_slave_0: left promiscuous mode [ 384.790477][ T30] audit: type=1800 audit(1785798687.544:17): pid=8231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.349" name="UDC" dev="configfs" ino=15747 res=0 errno=0 [ 384.790751][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 384.873964][ T5624] Bluetooth: hci6: command tx timeout [ 385.041937][ T8202] netlink: 8 bytes leftover after parsing attributes in process `syz.0.340'. [ 385.326185][ T8238] loop3: detected capacity change from 0 to 32768 [ 385.345044][ T8238] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 385.353318][ T8238] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 385.380642][ T8238] gfs2: fsid=syz:syz.0: journal 0 mapped with 7 extents in 0ms [ 385.389983][ T8238] gfs2: fsid=syz:syz.0: fatal: filesystem consistency error - inode = 4 2076, function = gfs2_dinode_in, file = fs/gfs2/glops.c, line = 466 [ 385.404361][ T8238] gfs2: fsid=syz:syz.0: G: s:SH n:2/81c f:aqonN t:SH d:EX/0 a:0 v:0 r:2 m:20 p:1 [ 385.413899][ T8238] gfs2: fsid=syz:syz.0: H: s:SH f:H e:0 p:8238 [syz.3.352] gfs2_lookup_meta+0xaf/0x180 [ 385.425901][ T8238] gfs2: fsid=syz:syz.0: I: n:4/2076 t:4 f:0x00 d:0x00000201 s:7696581398296 p:0 [ 385.438057][ T8238] CPU: 1 UID: 0 PID: 8238 Comm: syz.3.352 Tainted: G L syzkaller #0 PREEMPT(full) [ 385.438104][ T8238] Tainted: [L]=SOFTLOCKUP [ 385.438114][ T8238] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 385.438133][ T8238] Call Trace: [ 385.438144][ T8238] [ 385.438155][ T8238] dump_stack_lvl+0xe8/0x150 [ 385.438214][ T8238] gfs2_withdraw+0xc3/0x1b0 [ 385.438254][ T8238] inode_go_instantiate+0xbc7/0x12c0 [ 385.438297][ T8238] ? __pfx_inode_go_instantiate+0x10/0x10 [ 385.438323][ T8238] ? do_raw_spin_unlock+0xf5/0x210 [ 385.438363][ T8238] ? __pfx_wake_bit_function+0x10/0x10 [ 385.438407][ T8238] gfs2_instantiate+0x168/0x220 [ 385.438444][ T8238] gfs2_glock_wait+0x1d4/0x2a0 [ 385.438506][ T8238] gfs2_lookupi+0x3dd/0x640 [ 385.438552][ T8238] ? __pfx_gfs2_lookupi+0x10/0x10 [ 385.438593][ T8238] ? gfs2_lookup_meta+0xaf/0x180 [ 385.438628][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.438665][ T8238] ? sprintf+0xe7/0x140 [ 385.438694][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.438724][ T8238] ? crc32_le+0x250/0x2c0 [ 385.438770][ T8238] gfs2_lookup_meta+0xaf/0x180 [ 385.438803][ T8238] ? __pfx_gfs2_lookup_meta+0x10/0x10 [ 385.438836][ T8238] ? init_journal+0x127b/0x2330 [ 385.438865][ T8238] ? init_journal+0x127b/0x2330 [ 385.438904][ T8238] init_journal+0x12d4/0x2330 [ 385.438949][ T8238] ? init_inodes+0xdb/0x320 [ 385.438985][ T8238] ? __pfx_init_journal+0x10/0x10 [ 385.439012][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439059][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439089][ T8238] ? snprintf+0xe8/0x140 [ 385.439121][ T8238] ? init_inodes+0xdb/0x320 [ 385.439151][ T8238] ? __pfx_snprintf+0x10/0x10 [ 385.439181][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439212][ T8238] ? gfs2_glock_nq_num+0x13d/0x170 [ 385.439251][ T8238] init_inodes+0xdb/0x320 [ 385.439285][ T8238] gfs2_fill_super+0x1942/0x20b0 [ 385.439333][ T8238] ? __pfx_gfs2_fill_super+0x10/0x10 [ 385.439360][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439397][ T8238] ? init_locking+0xb8/0x210 [ 385.439424][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439455][ T8238] ? sb_set_blocksize+0x155/0x240 [ 385.439499][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439531][ T8238] ? setup_bdev_super+0x4c1/0x5b0 [ 385.439564][ T8238] get_tree_bdev_flags+0x430/0x4f0 [ 385.439595][ T8238] ? __pfx_gfs2_fill_super+0x10/0x10 [ 385.439626][ T8238] ? __pfx_get_tree_bdev_flags+0x10/0x10 [ 385.439664][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439706][ T8238] gfs2_get_tree+0x51/0x1e0 [ 385.439740][ T8238] vfs_get_tree+0x92/0x2a0 [ 385.439772][ T8238] do_new_mount+0x319/0xdc0 [ 385.439812][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439849][ T8238] ? __pfx_do_new_mount+0x10/0x10 [ 385.439890][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439922][ T8238] ? ns_capable+0x89/0xe0 [ 385.439957][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.439989][ T8238] ? path_mount+0x647/0x1040 [ 385.440031][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.440063][ T8238] ? user_path_at+0xd4/0x160 [ 385.440110][ T8238] __se_sys_mount+0x31d/0x420 [ 385.440158][ T8238] ? __pfx___se_sys_mount+0x10/0x10 [ 385.440195][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.440236][ T8238] ? srso_alias_return_thunk+0x5/0xfbef5 [ 385.440268][ T8238] ? __x64_sys_mount+0x20/0xc0 [ 385.440306][ T8238] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.440337][ T8238] do_syscall_64+0x174/0x580 [ 385.440374][ T8238] ? trace_irq_disable+0x3b/0x140 [ 385.440418][ T8238] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 385.440447][ T8238] RIP: 0033:0x7f036f19f28a [ 385.440472][ T8238] Code: 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 ff ff ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 49 89 ca b8 a5 00 00 00 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 385.440494][ T8238] RSP: 002b:00007f03700f6e58 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 385.440523][ T8238] RAX: ffffffffffffffda RBX: 00007f03700f6ee0 RCX: 00007f036f19f28a [ 385.440543][ T8238] RDX: 00002000000124c0 RSI: 0000200000012500 RDI: 00007f03700f6ea0 [ 385.440562][ T8238] RBP: 00002000000124c0 R08: 00007f03700f6ee0 R09: 0000000000000000 [ 385.440580][ T8238] R10: 0000000000000000 R11: 0000000000000246 R12: 0000200000012500 [ 385.440598][ T8238] R13: 00007f03700f6ea0 R14: 000000000001265b R15: 0000200000000180 [ 385.440640][ T8238] [ 385.440666][ T8238] gfs2: fsid=syz:syz.0: can't find local "sc" file#0: -5 [ 385.911164][ T5283] 8021q: adding VLAN 0 to HW filter on device eth12 [ 386.199278][ T8238] loop3: detected capacity change from 0 to 512 [ 386.235729][ T5624] Bluetooth: hci1: command tx timeout [ 386.257016][ T30] audit: type=1800 audit(1785798689.174:18): pid=8238 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.352" name="file1" dev="loop3" ino=1048622 res=0 errno=0 [ 387.778406][ T8260] overlayfs: failed to clone upperpath [ 387.981822][ T5766] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 388.118483][ T8267] loop3: detected capacity change from 0 to 1024 [ 388.387819][ T5624] Bluetooth: hci1: command tx timeout [ 388.412835][ T5766] usb 5-1: Using ep0 maxpacket: 32 [ 388.920486][ T8270] hfsplus: xattr search failed [ 388.925465][ T8271] hfsplus: xattr search failed [ 389.156878][ T5766] usb 5-1: config 0 has no interfaces? [ 389.186568][ T5766] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 389.205773][ T13] bridge_slave_1: left allmulticast mode [ 389.211564][ T5766] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 389.237280][ T13] bridge_slave_1: left promiscuous mode [ 389.286903][ T5766] usb 5-1: Product: syz [ 389.307885][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.349620][ T5766] usb 5-1: Manufacturer: syz [ 389.419374][ T5766] usb 5-1: SerialNumber: syz [ 389.485745][ T13] bridge_slave_0: left allmulticast mode [ 389.562438][ T13] bridge_slave_0: left promiscuous mode [ 389.629094][ T5766] usb 5-1: config 0 descriptor?? [ 389.656821][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.717659][ T5766] usb 5-1: can't set config #0, error -71 [ 389.811799][ T5766] usb 5-1: USB disconnect, device number 10 [ 389.823708][ T8298] loop3: detected capacity change from 0 to 512 [ 389.845110][ T8298] ext2: Unknown parameter 'obj_type' [ 390.162077][ T8308] netlink: 8 bytes leftover after parsing attributes in process `syz.4.359'. [ 390.776883][ T5624] Bluetooth: hci1: command tx timeout [ 390.926925][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.953800][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.985603][ T13] bond0 (unregistering): Released all slaves [ 391.106629][ T8307] bridge0: port 3(erspan0) entered blocking state [ 391.114120][ T8307] bridge0: port 3(erspan0) entered disabled state [ 391.120762][ T8307] erspan0: entered allmulticast mode [ 391.128134][ T8307] erspan0: entered promiscuous mode [ 391.133970][ T8307] bridge0: port 3(erspan0) entered blocking state [ 391.140476][ T8307] bridge0: port 3(erspan0) entered forwarding state [ 391.230617][ T13] hsr_slave_0: left promiscuous mode [ 391.285275][ T13] hsr_slave_1: left promiscuous mode [ 391.325997][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 391.400420][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 392.784970][ T8328] loop4: detected capacity change from 0 to 131072 [ 392.801605][ T8328] F2FS-fs (loop4): Segment count (31) mismatch with total segments from devices (0) [ 392.811097][ T8328] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 393.180277][ T8328] F2FS-fs (loop4): invalid crc value [ 393.266271][ T8328] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 393.443775][ T8328] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 393.450901][ T8328] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 394.106383][ T8342] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 394.191305][ T13] team0 (unregistering): Port device team_slave_1 removed [ 394.277233][ T8346] F2FS-fs (loop4): sanity_check_inode: inode (ino=4) has corrupted i_extra_isize: 0, max: 36 [ 394.294152][ T13] team0 (unregistering): Port device team_slave_0 removed [ 394.339376][ T8347] IPVS: dh: FWM 3 0x00000003 - no destination available [ 395.906827][ T8325] dummy0: entered allmulticast mode [ 395.912349][ T8325] dummy0: left allmulticast mode [ 395.928355][ T8338] smbdirect: ib_dev[syz0]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 395.942928][ T8338] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 395.959958][ T8338] smbdirect: ib_dev[syz0]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 395.976228][ T8338] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 395.992206][ T8338] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 396.046641][ T5283] 8021q: adding VLAN 0 to HW filter on device eth11 [ 396.553697][ T5750] usb 4-1: new full-speed USB device number 3 using dummy_hcd [ 396.714540][ T5750] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid maxpacket 351, setting to 64 [ 396.738759][ T5750] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 396.758287][ T5750] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 396.777501][ T5750] usb 4-1: config 0 descriptor?? [ 396.791242][ T8352] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 397.163157][ T8352] trusted_key: encrypted_key: key user:syz not found [ 397.215724][ T5750] ath6kl: Failed to submit usb control message: -71 [ 397.928916][ T5750] ath6kl: unable to send the bmi data to the device: -71 [ 397.944245][ T5750] ath6kl: Unable to send get target info: -71 [ 397.956418][ T5750] ath6kl: Failed to init ath6kl core: -71 [ 397.970158][ T5750] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 398.009039][ T8369] 9p: Bad value for 'rfdno' [ 398.098859][ T5750] usb 4-1: USB disconnect, device number 3 [ 398.174524][ T8145] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.193522][ T8145] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.217161][ T8145] bridge_slave_0: entered allmulticast mode [ 398.238033][ T8145] bridge_slave_0: entered promiscuous mode [ 398.296625][ T8145] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.317880][ T8145] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.373409][ T8145] bridge_slave_1: entered allmulticast mode [ 398.391314][ T8145] bridge_slave_1: entered promiscuous mode [ 398.507268][ T8378] overlayfs: failed to clone upperpath [ 399.581826][ T990] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 399.652378][ T8145] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 400.560629][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 400.616416][ T5750] Process accounting resumed [ 400.769057][ T990] usb 2-1: config 0 has no interfaces? [ 400.823886][ T990] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 400.919939][ T8145] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 400.935923][ T990] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 401.064205][ T990] usb 2-1: Product: syz [ 401.145836][ T990] usb 2-1: Manufacturer: syz [ 401.291895][ T990] usb 2-1: SerialNumber: syz [ 401.459817][ T990] usb 2-1: config 0 descriptor?? [ 401.561087][ C1] raw-gadget.0 gadget.1: ignoring, device is not running [ 401.595649][ T990] usb 2-1: can't set config #0, error -32 [ 401.718252][ T990] usb 2-1: USB disconnect, device number 9 [ 402.053187][ T8145] team0: Port device team_slave_0 added [ 402.066246][ T8420] dummy0: entered allmulticast mode [ 402.071891][ T8420] dummy0: left allmulticast mode [ 402.101238][ T8423] syzkaller0: entered promiscuous mode [ 402.108618][ T8423] syzkaller0: entered allmulticast mode [ 402.216825][ T8145] team0: Port device team_slave_1 added [ 402.258070][ T8431] binfmt_misc: register: failed to install interpreter file ./file0 [ 402.319723][ T8433] configfs-gadget.g1 gadget.0: afunc_bind:1251 Error! [ 402.327027][ T8433] udc dummy_udc.0: failed to start g1: -19 [ 402.335783][ T8433] UDC core: g1: couldn't find an available UDC or it's busy [ 402.461120][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 402.469719][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 402.496785][ T8145] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 402.522096][ T10] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 402.565949][ T8439] erspan0: left allmulticast mode [ 402.568416][ T8441] netlink: 'syz.4.367': attribute type 2 has an invalid length. [ 402.576580][ T8439] erspan0: left promiscuous mode [ 402.585584][ T8439] bridge0: port 3(erspan0) entered disabled state [ 402.603220][ T8441] netlink: 'syz.4.367': attribute type 8 has an invalid length. [ 402.617016][ T8439] bond0: (slave team0): Releasing backup interface [ 402.634446][ T8441] netlink: 132 bytes leftover after parsing attributes in process `syz.4.367'. [ 402.666973][ T8439] bridge_slave_0: left allmulticast mode [ 402.675988][ T8439] bridge_slave_0: left promiscuous mode [ 402.682228][ T8439] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.696208][ T10] usb 4-1: config 0 has no interfaces? [ 402.709022][ T10] usb 4-1: New USB device found, idVendor=2a39, idProduct=3fd4, bcdDevice= 0.40 [ 402.720869][ T8439] bridge_slave_1: left allmulticast mode [ 402.727222][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.739881][ T8439] bridge_slave_1: left promiscuous mode [ 402.747146][ T8439] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.756358][ T10] usb 4-1: Product: syz [ 402.761378][ T10] usb 4-1: Manufacturer: syz [ 402.767409][ T10] usb 4-1: SerialNumber: syz [ 402.783901][ T10] usb 4-1: config 0 descriptor?? [ 402.789663][ T8439] bond0: (slave bond_slave_0): Releasing backup interface [ 402.842479][ T8439] bond0: (slave bond_slave_1): Releasing backup interface [ 402.890729][ T8439] team0: Port device team_slave_0 removed [ 402.927718][ T8439] team0: Port device team_slave_1 removed [ 402.945498][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 402.966395][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 402.993856][ T8439] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.001596][ T8439] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.024442][ T8439] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 403.045265][ T8431] loop3: detected capacity change from 0 to 256 [ 403.082800][ T8145] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.104332][ T8145] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.156328][ T8431] netlink: 16 bytes leftover after parsing attributes in process `syz.3.379'. [ 403.165871][ T8145] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.217882][ T8206] bridge0: port 1(bridge_slave_0) entered blocking state [ 403.235555][ T8206] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.249123][ T8446] PKCS7: Unknown OID: [4] (bad) [ 403.249198][ T8206] bridge_slave_0: entered allmulticast mode [ 403.260332][ T8446] PKCS7: Only support pkcs7_signedData type [ 403.270106][ T8206] bridge_slave_0: entered promiscuous mode [ 403.342094][ T8206] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.349498][ T8206] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.358634][ T8206] bridge_slave_1: entered allmulticast mode [ 403.369552][ T8206] bridge_slave_1: entered promiscuous mode [ 403.444037][ T8206] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 403.460933][ T8145] hsr_slave_0: entered promiscuous mode [ 403.484432][ T8145] hsr_slave_1: entered promiscuous mode [ 403.507271][ T8206] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 403.680114][ T8206] team0: Port device team_slave_0 added [ 403.705162][ T8206] team0: Port device team_slave_1 added [ 403.810467][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.831021][ T5776] usb 4-1: USB disconnect, device number 4 [ 403.838515][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 403.906274][ T8206] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 404.071259][ T8462] loop4: detected capacity change from 0 to 1024 [ 405.434674][ T8206] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 405.459860][ T8206] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 405.498196][ T8206] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 406.458322][ T8480] loop3: detected capacity change from 0 to 2048 [ 406.798414][ T8480] EXT4-fs: Ignoring removed i_version option [ 406.901270][ T8480] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 407.090380][ T8480] ext4 filesystem being mounted at /101/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 407.244657][ T8206] hsr_slave_0: entered promiscuous mode [ 407.253163][ T8206] hsr_slave_1: entered promiscuous mode [ 407.261331][ T8206] debugfs: 'hsr0' already exists in 'hsr' [ 407.267839][ T8206] Cannot create hsr debugfs directory [ 407.650495][ T8496] xt_TPROXY: Can be used only with -p tcp or -p udp [ 407.801885][ T990] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 408.221722][ T990] usb 2-1: Using ep0 maxpacket: 32 [ 408.305641][ T990] usb 2-1: config 0 has no interfaces? [ 408.328586][ T8503] dummy0: entered allmulticast mode [ 408.371302][ T8503] dummy0: left allmulticast mode [ 408.391953][ T990] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 408.511233][ T990] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 408.520473][ T990] usb 2-1: Product: syz [ 408.527275][ T990] usb 2-1: Manufacturer: syz [ 408.540542][ T990] usb 2-1: SerialNumber: syz [ 408.551414][ T990] usb 2-1: config 0 descriptor?? [ 408.609832][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 408.711324][ T8516] overlayfs: failed to clone upperpath [ 409.452631][ T8528] loop3: detected capacity change from 0 to 1024 [ 409.842405][ T8528] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 410.338695][ T8519] @0Ùÿÿ: renamed from bond_slave_1 [ 410.400568][ T9] usb 2-1: USB disconnect, device number 10 [ 410.455913][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 410.999379][ T8562] overlayfs: failed to clone upperpath [ 415.421312][ T8581] loop3: detected capacity change from 0 to 2048 [ 415.663326][ T8587] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 416.639034][ T8596] xt_TPROXY: Can be used only with -p tcp or -p udp [ 417.728365][ T10] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 418.058648][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 418.221138][ T10] usb 5-1: config 0 has no interfaces? [ 418.350639][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 418.522240][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 418.705880][ T10] usb 5-1: Product: syz [ 418.790279][ T10] usb 5-1: Manufacturer: syz [ 418.892753][ T10] usb 5-1: SerialNumber: syz [ 419.397064][ T10] usb 5-1: config 0 descriptor?? [ 419.962974][ T8589] dummy0: entered allmulticast mode [ 420.048335][ T8609] netlink: 16 bytes leftover after parsing attributes in process `syz.1.404'. [ 420.097779][ T8589] dummy0: left allmulticast mode [ 420.123099][ T990] usb 5-1: USB disconnect, device number 11 [ 420.328854][ T8587] NILFS (loop3): vblocknr = 23 has abnormal lifetime: start cno (= 4294967298) > current cno (= 3) [ 420.422735][ T8587] NILFS error (device loop3): nilfs_bmap_propagate: broken bmap (inode number=4) [ 420.513461][ T8587] Remounting filesystem read-only [ 421.253960][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a64b800: rx timeout, send abort [ 421.752456][ T8649] xt_TPROXY: Can be used only with -p tcp or -p udp [ 421.792848][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a64ac00: rx timeout, send abort [ 421.803969][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a64b800: abort rx timeout. Force session deactivation [ 422.340053][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807a64ac00: abort rx timeout. Force session deactivation [ 422.738278][ T10] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 423.065064][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 423.200285][ T8659] overlayfs: failed to clone upperpath [ 424.804251][ T10] usb 5-1: device descriptor read/all, error -71 [ 426.314687][ T8689] dummy0: entered allmulticast mode [ 426.414283][ T8689] dummy0: left allmulticast mode [ 426.710421][ T8696] loop4: detected capacity change from 0 to 32768 [ 426.729778][ T8696] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.413 (8696) [ 426.786794][ T8696] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 426.799450][ T8696] BTRFS info (device loop4): using sha256 checksum algorithm [ 426.859297][ T8145] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 426.909608][ T8696] BTRFS info (device loop4): enabling ssd optimizations [ 426.916642][ T8696] BTRFS info (device loop4): turning on sync discard [ 426.923406][ T8696] BTRFS info (device loop4): enabling free space tree [ 426.930210][ T8696] BTRFS info (device loop4): use zlib compression, level 3 [ 427.928070][ T30] audit: type=1800 audit(1785798729.715:19): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.413" name="file1" dev="loop4" ino=260 res=0 errno=0 [ 428.177677][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 428.393923][ T8145] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 428.498982][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 428.698992][ T8145] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 428.799975][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 428.835633][ T8145] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 428.892145][ T8145] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 429.043744][ T5644] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 429.603839][ T8206] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 429.790206][ T8206] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 429.813121][ T8755] dummy0: entered allmulticast mode [ 429.841382][ T8206] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 429.905888][ T8206] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 429.942947][ T8206] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 429.979833][ T8206] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 430.013488][ T8755] dummy0: left allmulticast mode [ 430.039290][ T8206] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 430.111682][ T8206] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 431.991105][ T8145] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.345956][ T8145] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.392515][ T6128] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.399762][ T6128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 433.413985][ T8808] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 434.431074][ T6128] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.438411][ T6128] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.776783][ T8822] rt1719 0-0049: probe with driver rt1719 failed with error -5 [ 434.807529][ T8822] i2c i2c-0: new_device: Instantiated device rt1719 at 0x49 [ 434.894015][ T8824] wusb3801 0-004a: supply vbus not found, using dummy regulator [ 435.119512][ T10] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 435.268560][ T8808] bridge0: port 3(erspan0) entered blocking state [ 435.276293][ T8808] bridge0: port 3(erspan0) entered disabled state [ 435.283514][ T8808] erspan0: entered allmulticast mode [ 435.402115][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 435.421519][ T8808] erspan0: entered promiscuous mode [ 435.428630][ T8808] bridge0: port 3(erspan0) entered blocking state [ 435.435215][ T8808] bridge0: port 3(erspan0) entered forwarding state [ 435.448127][ T8822] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 435.464638][ T10] usb 5-1: config 0 has no interfaces? [ 435.530588][ T8826] dummy0: entered allmulticast mode [ 435.537174][ T8826] dummy0: left allmulticast mode [ 435.562299][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 435.643820][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 435.696908][ T10] usb 5-1: Product: syz [ 435.712233][ T10] usb 5-1: Manufacturer: syz [ 435.735128][ T10] usb 5-1: SerialNumber: syz [ 435.770481][ T8206] 8021q: adding VLAN 0 to HW filter on device bond0 [ 435.783453][ T10] usb 5-1: config 0 descriptor?? [ 435.826763][ T8824] i2c i2c-0: new_device: Instantiated device wusb3801 at 0x4a [ 435.906316][ T8206] 8021q: adding VLAN 0 to HW filter on device team0 [ 436.038253][ T5924] bridge0: port 1(bridge_slave_0) entered blocking state [ 436.045535][ T5924] bridge0: port 1(bridge_slave_0) entered forwarding state [ 436.163194][ T5924] bridge0: port 2(bridge_slave_1) entered blocking state [ 436.170492][ T5924] bridge0: port 2(bridge_slave_1) entered forwarding state [ 436.656582][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 436.678135][ T50] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 436.689472][ T50] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 436.702331][ T50] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 436.712519][ T50] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 437.164526][ T8859] dummy0: entered allmulticast mode [ 437.192993][ T8859] dummy0: left allmulticast mode [ 437.669687][ T5941] usb 5-1: USB disconnect, device number 14 [ 438.310592][ T8898] overlayfs: failed to clone upperpath [ 438.977070][ T50] Bluetooth: hci2: command tx timeout [ 439.628569][ T9] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 439.906108][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 441.512987][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.520062][ T5624] Bluetooth: hci2: command tx timeout [ 441.522476][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.311375][ T9] usb 4-1: device descriptor read/all, error -71 [ 442.664317][ T8949] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 442.964420][ T8950] dummy0: entered allmulticast mode [ 442.970190][ T8950] dummy0: left allmulticast mode [ 443.001583][ T8949] loop3: detected capacity change from 0 to 4096 [ 443.745792][ T5624] Bluetooth: hci2: command tx timeout [ 444.093228][ T8949] ntfs3(loop3): mft corrupted [ 444.551501][ T8953] input: syz1 as /devices/virtual/input/input6 [ 446.000141][ T5624] Bluetooth: hci2: command tx timeout [ 446.617629][ T5750] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 446.840314][ T8981] dummy0: entered allmulticast mode [ 446.849352][ T5750] usb 4-1: Using ep0 maxpacket: 32 [ 446.868408][ T8981] dummy0: left allmulticast mode [ 446.887139][ T50] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 446.898719][ T5750] usb 4-1: config 0 has no interfaces? [ 446.900636][ T50] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 446.913925][ T50] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 446.930769][ T50] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 446.950200][ T50] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 446.950485][ T5750] usb 4-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 447.041467][ T5750] usb 4-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 447.103041][ T5750] usb 4-1: Product: syz [ 447.107555][ T5750] usb 4-1: Manufacturer: syz [ 447.113537][ T5750] usb 4-1: SerialNumber: syz [ 447.123468][ T5750] usb 4-1: config 0 descriptor?? [ 447.646321][ T9002] overlayfs: failed to clone upperpath [ 448.550317][ T9008] i2c i2c-0: Failed to register i2c client rt1719 at 0x49 (-16) [ 448.570101][ T9008] i2c i2c-0: Failed to register i2c client wusb3801 at 0x4a (-16) [ 449.318348][ T5624] Bluetooth: hci6: command tx timeout [ 449.580337][ T5750] usb 4-1: USB disconnect, device number 7 [ 450.059221][ T9032] overlayfs: failed to clone upperpath [ 450.919348][ T9041] netlink: 44 bytes leftover after parsing attributes in process `syz.3.447'. [ 451.559491][ T5624] Bluetooth: hci6: command tx timeout [ 451.830451][ T10] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 452.231124][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 452.332881][ T10] usb 5-1: config 0 has no interfaces? [ 452.439963][ T10] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 452.576847][ T10] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 452.718860][ T10] usb 5-1: Product: syz [ 452.787073][ T10] usb 5-1: Manufacturer: syz [ 452.866340][ T10] usb 5-1: SerialNumber: syz [ 453.400671][ T10] usb 5-1: config 0 descriptor?? [ 453.519006][ T9066] overlayfs: failed to clone upperpath [ 453.813833][ T5624] Bluetooth: hci6: command tx timeout [ 454.532397][ T10] usb 5-1: can't set config #0, error -71 [ 454.661308][ T10] usb 5-1: USB disconnect, device number 15 [ 454.905715][ T9008] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 454.954816][ T9075] dummy0: entered allmulticast mode [ 454.968507][ T9075] dummy0: left allmulticast mode [ 455.005500][ T9080] serio: Serial port ptm0 [ 456.067969][ T5624] Bluetooth: hci6: command tx timeout [ 456.117403][ T9088] overlayfs: workdir and upperdir must be separate subtrees [ 456.638596][ T78] bridge_slave_1: left allmulticast mode [ 456.652592][ T78] bridge_slave_1: left promiscuous mode [ 456.660287][ T78] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.673416][ T78] bridge_slave_0: left allmulticast mode [ 456.695597][ T78] bridge_slave_0: left promiscuous mode [ 456.730447][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 457.447429][ T9106] loop4: detected capacity change from 0 to 1764 [ 458.116598][ T9100] overlayfs: failed to clone upperpath [ 458.461920][ T9115] loop3: detected capacity change from 0 to 512 [ 458.484279][ T9115] ext2: Unknown parameter 'obj_type' [ 459.610621][ T78] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 459.653928][ T78] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 459.687425][ T78] bond0 (unregistering): Released all slaves [ 459.801087][ T9105] dummy0: entered allmulticast mode [ 459.819082][ T9105] dummy0: left allmulticast mode [ 461.663345][ T78] hsr_slave_0: left promiscuous mode [ 461.708859][ T78] hsr_slave_1: left promiscuous mode [ 461.728113][ T78] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 461.775394][ T78] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 463.987452][ T5776] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 464.202551][ T5776] usb 2-1: Using ep0 maxpacket: 32 [ 464.227722][ T5776] usb 2-1: config 0 has no interfaces? [ 464.315422][ T5776] usb 2-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 464.407823][ T5776] usb 2-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 464.512602][ T5776] usb 2-1: Product: syz [ 464.572495][ T5776] usb 2-1: Manufacturer: syz [ 464.617275][ T5776] usb 2-1: SerialNumber: syz [ 464.661349][ T5776] usb 2-1: config 0 descriptor?? [ 465.078674][ T9193] loop3: detected capacity change from 0 to 1024 [ 465.088868][ T9193] EXT4-fs: Ignoring removed orlov option [ 465.155888][ T9193] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 465.367399][ T9147] configfs-gadget.g1 gadget.32: uvc: uvc_function_bind() [ 465.382017][ T9147] Oops: general protection fault, probably for non-canonical address 0xdffffc00000000f2: 0000 [#1] SMP KASAN NOPTI [ 465.394110][ T9147] KASAN: null-ptr-deref in range [0x0000000000000790-0x0000000000000797] [ 465.402535][ T9147] CPU: 0 UID: 0 PID: 9147 Comm: syz.4.461 Tainted: G L syzkaller #0 PREEMPT(full) [ 465.413309][ T9147] Tainted: [L]=SOFTLOCKUP [ 465.417626][ T9147] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 465.427683][ T9147] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 465.433256][ T9147] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fa e3 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 da e3 67 fa 4d 8b 3f 49 83 c7 30 [ 465.452870][ T9147] RSP: 0018:ffffc900032ef710 EFLAGS: 00010212 [ 465.458950][ T9147] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 465.466909][ T9147] RDX: ffffc90006bc2000 RSI: 0000000000019e27 RDI: 0000000000019e28 [ 465.474878][ T9147] RBP: 1ffff1100efed114 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 465.482862][ T9147] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: fffffffffffffffc [ 465.490829][ T9147] R13: dffffc0000000000 R14: ffff888077f688a0 R15: 0000000000000790 [ 465.498798][ T9147] FS: 00007f0186f036c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 465.507716][ T9147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 465.514280][ T9147] CR2: 00007f14e3df91d4 CR3: 000000007b9b1000 CR4: 0000000000350ef0 [ 465.522259][ T9147] Call Trace: [ 465.525521][ T9147] [ 465.528454][ T9147] uvc_function_bind+0x1076/0x15a0 [ 465.533584][ T9147] usb_add_function+0x2e1/0x9f0 [ 465.538432][ T9147] configfs_composite_bind+0xde0/0x1410 [ 465.543979][ T9147] ? __pfx_configfs_composite_bind+0x10/0x10 [ 465.549951][ T9147] gadget_bind_driver+0x2ca/0x9e0 [ 465.554997][ T9147] ? __pfx_gadget_bind_driver+0x10/0x10 [ 465.560580][ T9147] really_probe+0x254/0xae0 [ 465.565085][ T9147] __driver_probe_device+0x1e8/0x360 [ 465.570366][ T9147] driver_probe_device+0x4f/0x240 [ 465.575387][ T9147] __driver_attach+0x339/0x600 [ 465.580144][ T9147] bus_for_each_dev+0x23b/0x2c0 [ 465.584985][ T9147] ? __pfx___driver_attach+0x10/0x10 [ 465.590269][ T9147] ? __pfx_bus_for_each_dev+0x10/0x10 [ 465.595627][ T9147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.601245][ T9147] ? do_raw_spin_unlock+0xf5/0x210 [ 465.606350][ T9147] bus_add_driver+0x345/0x670 [ 465.611017][ T9147] driver_register+0x23a/0x320 [ 465.615784][ T9147] usb_gadget_register_driver_owner+0xf9/0x270 [ 465.621948][ T9147] gadget_dev_desc_UDC_store+0x1c9/0x2f0 [ 465.627582][ T9147] ? __pfx_gadget_dev_desc_UDC_store+0x10/0x10 [ 465.633727][ T9147] configfs_write_iter+0x337/0x430 [ 465.638842][ T9147] vfs_write+0x612/0xba0 [ 465.643070][ T9147] ? __pfx_vfs_write+0x10/0x10 [ 465.647820][ T9147] ? __fget_files+0x2a/0x420 [ 465.652400][ T9147] ? srso_alias_return_thunk+0x5/0xfbef5 [ 465.658021][ T9147] ksys_write+0x150/0x270 [ 465.662338][ T9147] ? __pfx_ksys_write+0x10/0x10 [ 465.667177][ T9147] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.673234][ T9147] do_syscall_64+0x174/0x580 [ 465.677812][ T9147] ? trace_irq_disable+0x3b/0x140 [ 465.682827][ T9147] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 465.688699][ T9147] RIP: 0033:0x7f0185f9e019 [ 465.693091][ T9147] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 465.712684][ T9147] RSP: 002b:00007f0186f03028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 465.721141][ T9147] RAX: ffffffffffffffda RBX: 00007f0186225fa0 RCX: 00007f0185f9e019 [ 465.729100][ T9147] RDX: 000000000000000c RSI: 0000200000000640 RDI: 0000000000000006 [ 465.737056][ T9147] RBP: 00007f018603500c R08: 0000000000000000 R09: 0000000000000000 [ 465.745010][ T9147] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 465.752973][ T9147] R13: 00007f0186226038 R14: 00007f0186225fa0 R15: 00007ffd69c63548 [ 465.760952][ T9147] [ 465.763950][ T9147] Modules linked in: [ 465.770271][ T9147] ---[ end trace 0000000000000000 ]--- [ 465.817047][ T9147] RIP: 0010:uvcg_video_init+0x4e7/0x630 [ 465.826264][ T9147] Code: 89 63 60 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 fa e3 67 fa 48 8b 1b 4c 8d bb 90 07 00 00 4c 89 f8 48 c1 e8 03 <42> 80 3c 28 00 74 08 4c 89 ff e8 da e3 67 fa 4d 8b 3f 49 83 c7 30 [ 465.953691][ T9206] ICMPv6: NA: fd:f9:a6:84:a5:1b advertised our address fe80::aa on syz_tun! [ 466.328882][ T5776] usb 2-1: USB disconnect, device number 11 [ 466.409112][ T9147] RSP: 0018:ffffc900032ef710 EFLAGS: 00010212 [ 466.415585][ T9147] RAX: 00000000000000f2 RBX: 0000000000000000 RCX: 0000000000080000 [ 466.427870][ T9147] RDX: ffffc90006bc2000 RSI: 0000000000019e27 RDI: 0000000000019e28 [ 466.459507][ T5645] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 466.493189][ T9147] RBP: 1ffff1100efed114 R08: ffffffff90579d37 R09: 1ffffffff20af3a6 [ 466.579246][ T9147] R10: dffffc0000000000 R11: fffffbfff20af3a7 R12: fffffffffffffffc [ 466.635572][ T9147] R13: dffffc0000000000 R14: ffff888077f688a0 R15: 0000000000000790 [ 466.712743][ T9147] FS: 00007f0186f036c0(0000) GS:ffff888124f4b000(0000) knlGS:0000000000000000 [ 466.730525][ T78] team0 (unregistering): Port device team_slave_1 removed [ 466.742554][ T9147] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 466.769027][ T9147] CR2: 00007f036f3ef2f8 CR3: 000000007b9b1000 CR4: 0000000000350ef0 [ 466.777798][ T78] team0 (unregistering): Port device team_slave_0 removed [ 466.786394][ T9147] Kernel panic - not syncing: Fatal exception [ 466.792708][ T9147] Kernel Offset: disabled [ 466.797020][ T9147] Rebooting in 86400 seconds..