last executing test programs: 3m31.238104714s ago: executing program 2 (id=92): r0 = socket$kcm(0x15, 0x5, 0x0) write$cgroup_pressure(r0, 0x0, 0x0) 3m27.445571025s ago: executing program 2 (id=102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c2508000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) 3m26.276751223s ago: executing program 2 (id=103): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x10, 0x101000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000008, r5, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x34f000, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, &(0x7f0000000240)={0x18, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x800000000, 0x8000000000000}, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0x46a, &(0x7f0000000980)="$eJzs289vFFUcAPDvzLZFQWhFFEFUFI2NP1paUDl40WjiQRMTPeCxtoUACzW0JkKIVmPwaEi8G48m/gWe9GLUk4lXvBsSolxAT2tmd6Zsl93tLpRd6H4+yTbv7bzpe9+deTNv5s0EMLD2Zn+SiPsi4mJEjNayKyp5oazctSvnZv+9cm42iUrl3b+TarmrV87NFmWL9bbkmfE0Iv0iyStZbfHM2RMz5fL86Tw/uXTyw8nFM2dfOHZy5uj80flT04cOHTww9fJL0y+uS5xZfFd3f7KwZ9eb7194e/bwhQ9+/T7Jv4+GODox3EGZvVng/1SqGpc93U1ld4GtdelkqI8NoSuliBjK9+eLMRqluL7xRuONz/vaOOC2ys5Nm1ovXq4AG1gS/W4B0B/FiT67/i0+PRp63BEuv1q7AMrivpZ/akuGIs3LDDdc366nvRFxePm/b7JP3MR9CACAbv2YjX+ebzb+S6N+jLgtnxsai4j7I2J7RDwQETsi4sGIeCgidkbEw51Ve7xINE4N3Tj+SS/daoztZOO/V/K5rdXjv2L0F2OlPLe1Gv9wcuRYeX5//puMx/CmLD/Vpo6fXv/jq1bL6sd/2Ser//CqyaX00lDDDbq5maWZjiagOnD5s4jdQ83iT1ZmApKI2BURu7v719uKxLFnv9vTqlDT+POx8JrWYZ6p8m3EM7XtvxwN8ReS9vOTk/dEeX7/ZLFX3Oi338+/06r+W4p/HWTbf/Pq/b+xyFhSP1+72H0d5//8suU1zdrxN9//R5L3qsejkfy7j2eWlk5PRYwkb9XWqv9++vq6Rb4on8U/vq95/9+er5PF/0hEZDvxoxHxWEQ8nrf9iYh4MiL2tYn/l9eeOt5l/Embf7eusvjnmh7/VprQsP27T5RO/PxDq/o72/4Hq6nx/Jvq8W8NnTbwVn47AAAAuFuk1Wfgk3RiJZ2mExO1Z/h3xOa0vLC49NyRhY9OzdWelR+L4bS40zVadz90KlnOnyaO6tX3dH6vuFh+IL9v/HXp3mp+YnahPNfn2GHQbanr/9t3Xu//mb9Kq8uuzIh4vwM2Dv0ZBldj/0/71A6g95z/YXDp/zC49H8YXM36/6cN+VKP2gL0lvM/DK61+n/P3kYCes75HwaX/g8Dqd278cnNv/Iv0d9ELN/+KtI7ItLblRjpoINs6MSNx4oh4wQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOAu9H8AAAD//xjg70M=") 3m21.18965121s ago: executing program 2 (id=111): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="3801000010000100feffffff00010000fe880000000000000000000000000001fc010000000000000000000000000001000107144e230005000000003a000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000004d46c0000007f000001000000000000000000000000000000000000000092010000000000000600000000000000ffff0000000000001c2508000000000002"], 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000580)={@fallback=r0, r1, 0x2f}, 0x20) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000002c0)=ANY=[@ANYRES32=r1, @ANYRES32=r1, @ANYBLOB='/\x00'], 0x20) 3m17.981457347s ago: executing program 2 (id=115): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f0000000400)={0x0, &(0x7f0000000200)}) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat$cachefiles(0xffffffffffffff9c, 0x0, 0x101001, 0x0) write$binfmt_script(r4, &(0x7f0000000040)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) close(0xffffffffffffffff) ustat(0x4, &(0x7f00000001c0)) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x800448d3, 0x0) syz_mount_image$vfat(&(0x7f0000000080), &(0x7f00000000c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x90c07d, 0x0, 0x1, 0x0, &(0x7f0000000000)) r6 = openat(0xffffffffffffff9c, 0x0, 0x8042, 0x0) bind$alg(r6, &(0x7f00000001c0)={0x26, 'aead\x00', 0x0, 0x0, 'rfc7539(ecb-cast6-avx,blake2s-256)\x00'}, 0x58) syz_open_dev$sndmidi(0x0, 0xc666, 0x301002) syz_open_dev$sndmidi(0x0, 0x7f, 0x400002) link(&(0x7f0000000940)='./file1\x00', &(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') syz_open_dev$tty1(0xc, 0x4, 0x2) 3m15.946388386s ago: executing program 2 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 3m0.549741644s ago: executing program 32 (id=116): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0xa0b41, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd6372ce22fdb911"], 0xfdef) 14.541108142s ago: executing program 3 (id=669): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f00000005c0)={0x2c, &(0x7f0000000380)=ANY=[], 0x0, 0x0, 0x0, 0x0}) 10.878890445s ago: executing program 3 (id=672): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xcc}}, 0x0) 10.607250452s ago: executing program 3 (id=674): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, &(0x7f0000000040)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = fanotify_init(0x10, 0x101000) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_mark(r4, 0x455, 0x8000008, r5, 0x0) fanotify_mark(r4, 0x7e, 0x800003a, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x20008840, &(0x7f0000000040)={0xa, 0x2, 0x80398, @loopback, 0xfffffffe}, 0x1c) openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x34f000, 0x0) unshare(0x400) pselect6(0x40, &(0x7f0000000300)={0x0, 0x4000000000000000, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, 0x0, 0x0, 0x0, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r0, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000140)='./file0\x00', 0x0, &(0x7f0000000000)={[{@bsdgroups}, {@grpquota}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x5c}}, {@noauto_da_alloc}, {@nolazytime}, {@discard}, {@grpjquota}, {@errors_remount}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x8}}]}, 0x1, 0x46a, &(0x7f0000000980)="$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") 8.811526346s ago: executing program 4 (id=676): socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES16=r0], 0xc4}}, 0x0) 8.632278777s ago: executing program 4 (id=677): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') personality(0x87bf5ac905ea0f7f) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000000)=""/216, 0xd8}], 0x1, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 8.492044595s ago: executing program 4 (id=678): r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r1 = dup(r0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x12, r1, 0x37cb2000) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x16) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x17) 8.491521275s ago: executing program 3 (id=679): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getpeername$packet(0xffffffffffffffff, 0x0, &(0x7f0000000040)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x2}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0xfffffffc}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x14}]}, @NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xb}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x50) r1 = syz_open_dev$mouse(0x0, 0x0, 0x2) write$tun(r1, 0x0, 0x96) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)={0x2c, 0xd, 0xa, 0x301, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x24000801}, 0x8000) 8.220094991s ago: executing program 3 (id=680): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000700)=[{&(0x7f0000000080)="89e7ee2c21fe50a3b47380c988ca4b5e002882fef7efb627af71b51ad251f9", 0x1f}, {&(0x7f00000006c0)="fbffffffffffffff3885bce4a812109765ebcf54a44104", 0x17}], 0x2) 6.748232106s ago: executing program 4 (id=686): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x109a42, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000040)=r0) close(r1) 6.00556907s ago: executing program 1 (id=690): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) 5.635568272s ago: executing program 1 (id=693): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='net/vlan/vlan0\x00') preadv(r0, &(0x7f00000004c0), 0x0, 0xa3, 0xd) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000002c0)='blkio.throttle.write_iops_device\x00', 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f00000000c0)=ANY=[], 0x6a) 5.31971226s ago: executing program 1 (id=694): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x24, &(0x7f0000000680)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000440)={0x44, &(0x7f0000000080)={0x60, 0x5, 0x1, '#'}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 2.518148213s ago: executing program 0 (id=698): r0 = syz_pidfd_open(0x0, 0x0) setns(r0, 0x24020000) syz_clone(0x102c8000, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0) 2.359791292s ago: executing program 0 (id=699): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="880000000001010400000000141a00000200ffff0800074000000001240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e02010c000280050001000000000024000e800c00028005ee0100930000001400018008000100ac1414bb08"], 0x88}}, 0x0) 2.21835125s ago: executing program 0 (id=700): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r1) close(0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d103000014000000110001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWSETELEM={0x48, 0xc, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1c, 0x3, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xc, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x6, 0x1, "9362"}]}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x3}}}, 0x70}, 0x1, 0x0, 0x0, 0x4000811}, 0x4040) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a480000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a31000000001c000380180000800c00018006000100bd"], 0x70}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 2.082065929s ago: executing program 1 (id=701): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000100900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x54}}, 0x0) 2.079746819s ago: executing program 0 (id=702): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="b702000014000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d640500000000006504040001001f000404000001007d60b7030000000000006a0a00fe00000100850000000d000000b7000000000000009500000000000000c74396c8e3ebbadc20e5a7ef8c9ac1465cbf188ef10871b81ac7553358380b3a1f59916ffc9bf0bdf81524f07fb2819bf5774fedda52e39c90af27db5b56024df96b4673b4e8d5467e114604ea09b290a248a120c9c6cd87cef9000000a39c15a7ef365cc27dfeac7b9b0e9048517354b0ca4f9cf8b59ee6fa003fe1f2c4c15f20a07db4583a462d8be6602186fd68ee14a19ea2eb42122b8635a66ce6b5b92356081bc0f18a0ca83dbc089a9813c1efa26001b3f486ebfaae85c4d0b96778478ae5355e6f923b11056969f486f80a35f7f2339704fa93fa915ab8e1e0d7f31ebd19455e6827cd493907bf9d0000000000000000000000004e1fa60acabcf0553910ca2e5ea499fd5889dde9261f0848a5b8af657bfc96049308e8953431b269053627a1523551c160c813969925a892d266792352ec0204596a37ce8d6d260b32239bddbce2e79f93cb5a0ad897adb53b397d07c50f84b74f2605a565ee149016aa75ea31c0087dcd821b47c8b36efc6da4fb2ea7f1f36c85856b73ac9872babc62149699b6b8c796a79d833eb4b5ca668d430db5653a2b3c5b87e17ca1"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x20, 0x0, &(0x7f00000002c0)="b90103616908068c3c270040e700009e0dc5cf1d66fff2fcffff8100632f0806", 0x0, 0x8104, 0x6000000000000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.937462207s ago: executing program 0 (id=703): socket(0x2, 0x80805, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x48, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB="280000000306010100000000000000000a0000030900020073797a320000000005000100070000"], 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x800) 1.647849174s ago: executing program 1 (id=704): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, 0x0, 0x78) 463.156763ms ago: executing program 0 (id=705): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x11, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@dev={0xac, 0x14, 0x14, 0x15}, 0x0, 0x5, 0x0, 0x0, 0xa, 0x20, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xac, 0xfff, 0x0, 0x0, 0xffffffffffffffff, 0x7fffffff}, {0x2, 0xa00, 0x40800000000000, 0x800000000000000}, 0x0, 0x0, 0x1}, [@tmpl={0x44, 0x5, [{{@in=@empty, 0x4d2, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x49}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000064010100000000000000000000000000fc01000000000000000000000000000000000000000000000a0000"], 0xfc}}, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000001340)=@hci={0x1f, 0xdd86, 0x2c}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000080)='b', 0x28}], 0x1}, 0x0) 287.196293ms ago: executing program 3 (id=706): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x44, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x8, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x4}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xd0}}, 0x0) 165.3125ms ago: executing program 4 (id=707): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/16], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000840)=@newqdisc={0x38, 0x24, 0xf0b, 0x70bd2e, 0x25dfdbfc, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0xfffd, 0x1}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0xc, 0x2, [@TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x80000d5}, 0x0) 164.81951ms ago: executing program 1 (id=708): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x693d3506}, [@jmp={0x5, 0x1, 0x8, 0x3, 0x8, 0x1, 0xfffffffffffffff0}]}, 0x0, 0x9d, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x6, 0x2}, 0x8, 0x10, 0x0, 0x0, 0xada1, 0xffffffffffffffff, 0x0, &(0x7f0000000540)=[0xffffffffffffffff], 0x0, 0x10, 0xff}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) dup(r0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x200, 0x3, 0xb, 0x1}]}) recvmsg(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) listen(r2, 0x90004) syz_emit_vhci(&(0x7f0000000140)=ANY=[@ANYBLOB="043e130100c90001"], 0x16) sync() close_range(r1, 0xffffffffffffffff, 0x0) 0s ago: executing program 4 (id=709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x20, 0x1, 0x0, 0x1, @nat={{0x8}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_NAT_TYPE={0x8}, @NFTA_NAT_FAMILY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x81d14072b68eef33}, 0x4040080) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.216' (ED25519) to the list of known hosts. [ 81.219698][ T5757] cgroup: Unknown subsys name 'net' [ 81.383751][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.065074][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.783787][ T5784] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.792272][ T5784] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.801692][ T5784] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.809919][ T5784] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.813958][ T5781] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 84.831597][ T5783] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.840981][ T5781] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 84.846985][ T5784] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.855564][ T5784] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.864460][ T5784] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.875109][ T5784] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 84.883332][ T5784] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 84.891620][ T5784] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.899116][ T5784] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.906799][ T5783] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.907857][ T5784] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.923485][ T5785] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.929743][ T5085] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.938949][ T5785] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.941223][ T5085] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.954485][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.962720][ T5085] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.973189][ T5085] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.981950][ T5085] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.475993][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 85.521387][ T5771] chnl_net:caif_netlink_parms(): no params data found [ 85.637139][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 85.674468][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.682481][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.690589][ T5769] bridge_slave_0: entered allmulticast mode [ 85.698227][ T5769] bridge_slave_0: entered promiscuous mode [ 85.715750][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.722910][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.730240][ T5769] bridge_slave_1: entered allmulticast mode [ 85.737759][ T5769] bridge_slave_1: entered promiscuous mode [ 85.775122][ T5770] chnl_net:caif_netlink_parms(): no params data found [ 85.831931][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.850049][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.913764][ T5771] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.921948][ T5771] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.929604][ T5771] bridge_slave_0: entered allmulticast mode [ 85.937797][ T5771] bridge_slave_0: entered promiscuous mode [ 85.973507][ T5771] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.983652][ T5771] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.991631][ T5771] bridge_slave_1: entered allmulticast mode [ 85.998887][ T5771] bridge_slave_1: entered promiscuous mode [ 86.037947][ T5769] team0: Port device team_slave_0 added [ 86.055613][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.062800][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.070516][ T5772] bridge_slave_0: entered allmulticast mode [ 86.077729][ T5772] bridge_slave_0: entered promiscuous mode [ 86.106262][ T5771] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.117738][ T5769] team0: Port device team_slave_1 added [ 86.123865][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.131206][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.140424][ T5772] bridge_slave_1: entered allmulticast mode [ 86.147969][ T5772] bridge_slave_1: entered promiscuous mode [ 86.164100][ T5771] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.208630][ T5771] team0: Port device team_slave_0 added [ 86.236243][ T5771] team0: Port device team_slave_1 added [ 86.263268][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.270497][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.297035][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.331265][ T5770] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.338624][ T5770] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.346054][ T5770] bridge_slave_0: entered allmulticast mode [ 86.353101][ T5770] bridge_slave_0: entered promiscuous mode [ 86.363073][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.376493][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.388869][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.396005][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.422198][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.443961][ T5770] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.451327][ T5770] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.458797][ T5770] bridge_slave_1: entered allmulticast mode [ 86.466310][ T5770] bridge_slave_1: entered promiscuous mode [ 86.510289][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.517371][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.544214][ T5771] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.557318][ T5771] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.564310][ T5771] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.590577][ T5771] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.643411][ T5769] hsr_slave_0: entered promiscuous mode [ 86.651850][ T5769] hsr_slave_1: entered promiscuous mode [ 86.694225][ T5772] team0: Port device team_slave_0 added [ 86.703240][ T5772] team0: Port device team_slave_1 added [ 86.722680][ T5770] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.738437][ T5770] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.765400][ T5771] hsr_slave_0: entered promiscuous mode [ 86.771863][ T5771] hsr_slave_1: entered promiscuous mode [ 86.778750][ T5771] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.786745][ T5771] Cannot create hsr debugfs directory [ 86.876115][ T5770] team0: Port device team_slave_0 added [ 86.882807][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.890085][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.916297][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.929972][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.937073][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.963235][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.001619][ T5770] team0: Port device team_slave_1 added [ 87.015917][ T5085] Bluetooth: hci0: command tx timeout [ 87.021641][ T5085] Bluetooth: hci2: command tx timeout [ 87.027807][ T5780] Bluetooth: hci1: command tx timeout [ 87.093239][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.100490][ T5085] Bluetooth: hci3: command tx timeout [ 87.114799][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.155640][ T5770] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.221839][ T5772] hsr_slave_0: entered promiscuous mode [ 87.233585][ T5772] hsr_slave_1: entered promiscuous mode [ 87.241002][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.254174][ T5772] Cannot create hsr debugfs directory [ 87.261668][ T5770] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.273710][ T5770] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.305155][ T5770] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.569163][ T5770] hsr_slave_0: entered promiscuous mode [ 87.581788][ T5770] hsr_slave_1: entered promiscuous mode [ 87.588470][ T5770] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.600593][ T5770] Cannot create hsr debugfs directory [ 87.890179][ T5771] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.920210][ T5771] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.930327][ T5771] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.941858][ T5771] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.026678][ T5769] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 88.038560][ T5769] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 88.059308][ T5769] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 88.069446][ T5769] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 88.144761][ T5772] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 88.179416][ T5772] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 88.189681][ T5772] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 88.202170][ T5772] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 88.307680][ T5770] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.324529][ T5770] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.335921][ T5770] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.365466][ T5770] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 88.493152][ T5771] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.558491][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.587987][ T5771] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.604344][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.647727][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.655200][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.669607][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.676861][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.690401][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.697619][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.737075][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.753681][ T1117] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.760868][ T1117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.787455][ T5770] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.851521][ T5770] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.876751][ T2956] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.883885][ T2956] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.896516][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.964256][ T989] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.971547][ T989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.984391][ T989] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.991643][ T989] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.030540][ T2956] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.037771][ T2956] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.062206][ T5770] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 89.096114][ T5085] Bluetooth: hci2: command tx timeout [ 89.101595][ T5085] Bluetooth: hci1: command tx timeout [ 89.109227][ T5780] Bluetooth: hci0: command tx timeout [ 89.176994][ T5775] Bluetooth: hci3: command tx timeout [ 89.503886][ T5771] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.612480][ T5770] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.663731][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.694467][ T5771] veth0_vlan: entered promiscuous mode [ 89.716860][ T5771] veth1_vlan: entered promiscuous mode [ 89.783675][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.834435][ T5772] veth0_vlan: entered promiscuous mode [ 89.867646][ T5772] veth1_vlan: entered promiscuous mode [ 89.889531][ T5770] veth0_vlan: entered promiscuous mode [ 89.908594][ T5771] veth0_macvtap: entered promiscuous mode [ 89.929933][ T5770] veth1_vlan: entered promiscuous mode [ 89.949898][ T5771] veth1_macvtap: entered promiscuous mode [ 89.986696][ T5769] veth0_vlan: entered promiscuous mode [ 90.012546][ T5769] veth1_vlan: entered promiscuous mode [ 90.038563][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.057351][ T5771] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.090384][ T5771] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.099952][ T5771] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.108775][ T5771] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.118784][ T5771] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.138930][ T5772] veth0_macvtap: entered promiscuous mode [ 90.154154][ T5769] veth0_macvtap: entered promiscuous mode [ 90.187980][ T5772] veth1_macvtap: entered promiscuous mode [ 90.202257][ T5769] veth1_macvtap: entered promiscuous mode [ 90.222197][ T5770] veth0_macvtap: entered promiscuous mode [ 90.262038][ T5770] veth1_macvtap: entered promiscuous mode [ 90.283911][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.297745][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.310664][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.365575][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.380389][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.390884][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.401830][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.413387][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.423183][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.434200][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.446652][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.466169][ T5769] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.475604][ T5769] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.484334][ T5769] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.499816][ T5769] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.511659][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.523457][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.533470][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.544238][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.554759][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.565502][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.577585][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.595385][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.606906][ T1117] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.623754][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.624763][ T1117] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.644812][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.655675][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.668062][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.681300][ T5772] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.690341][ T5772] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.700196][ T5772] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.709914][ T5772] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.730356][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.741016][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.751739][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.762535][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.773068][ T5770] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.792031][ T5770] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.803755][ T5770] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.832825][ T5770] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.842690][ T5770] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.852677][ T5770] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.863757][ T5770] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.938739][ T989] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.961212][ T989] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.093356][ T1090] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.115123][ T1090] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.175241][ T5775] Bluetooth: hci1: command tx timeout [ 91.176402][ T5780] Bluetooth: hci2: command tx timeout [ 91.187121][ T5085] Bluetooth: hci0: command tx timeout [ 91.200515][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.226807][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.256389][ T5085] Bluetooth: hci3: command tx timeout [ 91.263527][ T1090] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.283506][ T5866] Zero length message leads to an empty skb [ 91.286515][ T1090] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.412652][ T74] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.439627][ T74] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.539209][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.571376][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.694830][ T1117] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.702739][ T1117] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.222765][ T5888] netlink: 32 bytes leftover after parsing attributes in process `syz.1.11'. [ 92.246325][ T9] cfg80211: failed to load regulatory.db [ 92.458530][ T5896] ======================================================= [ 92.458530][ T5896] WARNING: The mand mount option has been deprecated and [ 92.458530][ T5896] and is ignored by this kernel. Remove the mand [ 92.458530][ T5896] option from the mount to silence this warning. [ 92.458530][ T5896] ======================================================= [ 93.067180][ T5910] netlink: 164 bytes leftover after parsing attributes in process `syz.1.21'. [ 93.255698][ T5780] Bluetooth: hci1: command tx timeout [ 93.256964][ T5775] Bluetooth: hci2: command tx timeout [ 93.261295][ T5085] Bluetooth: hci0: command tx timeout [ 93.336844][ T5085] Bluetooth: hci3: command tx timeout [ 93.477206][ T5909] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 93.626725][ T5920] random: crng reseeded on system resumption [ 94.427644][ T5941] syz.1.33[5941]: memfd_create() called without MFD_EXEC or MFD_NOEXEC_SEAL set [ 94.485668][ T5941] loop1: detected capacity change from 0 to 512 [ 95.153120][ T5941] EXT4-fs (loop1): 1 truncate cleaned up [ 95.160276][ T5941] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 95.437864][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.496236][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 96.569365][ T5969] loop0: detected capacity change from 0 to 512 [ 97.304188][ T5969] EXT4-fs (loop0): 1 truncate cleaned up [ 97.311563][ T5969] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 97.343014][ T5968] netlink: 'syz.2.44': attribute type 10 has an invalid length. [ 97.416709][ T5968] macvlan1: entered promiscuous mode [ 97.465667][ T5968] macvlan1: entered allmulticast mode [ 97.474864][ T5968] veth1_vlan: entered allmulticast mode [ 97.485510][ T5968] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 98.251972][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 98.264954][ T0] NOHZ tick-stop error: local softirq work is pending, handler #10!!! [ 98.414710][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 98.775085][ T6043] netlink: 40 bytes leftover after parsing attributes in process `syz.2.49'. [ 98.812434][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 98.915546][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 98.925267][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 99.248645][ T6045] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 99.665121][ T6060] loop3: detected capacity change from 0 to 512 [ 100.434211][ T6016] random: crng reseeded on system resumption [ 100.453788][ T6060] EXT4-fs (loop3): 1 truncate cleaned up [ 100.461755][ T6060] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 100.705078][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 100.864945][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 102.006430][ T6086] loop0: detected capacity change from 0 to 512 [ 102.268636][ T6086] EXT4-fs (loop0): 1 truncate cleaned up [ 102.282319][ T6086] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.670491][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 103.010830][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.217839][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 103.229881][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 103.819600][ T6113] netlink: 8 bytes leftover after parsing attributes in process `syz.1.77'. [ 105.236406][ T6127] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.82'. [ 105.518692][ T6130] loop0: detected capacity change from 0 to 512 [ 105.722858][ T6130] EXT4-fs (loop0): 1 truncate cleaned up [ 105.766600][ T6130] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 107.550696][ T6150] netlink: get zone limit has 8 unknown bytes [ 108.694175][ T6138] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 108.695930][ T6153] random: crng reseeded on system resumption [ 109.790032][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 113.885172][ T6190] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 113.952807][ T6190] random: crng reseeded on system resumption [ 116.423108][ T6207] loop2: detected capacity change from 0 to 512 [ 116.604964][ T6207] EXT4-fs (loop2): 1 truncate cleaned up [ 116.745248][ T6207] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 119.265954][ T5771] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 120.513313][ T6230] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 120.553238][ T6230] random: crng reseeded on system resumption [ 126.947451][ T6264] loop1: detected capacity change from 0 to 512 [ 127.007102][ T6264] EXT4-fs (loop1): 1 truncate cleaned up [ 127.014435][ T6264] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 127.891039][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 133.166651][ T6303] loop3: detected capacity change from 0 to 512 [ 133.191277][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198861][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.229290][ T6303] EXT4-fs (loop3): 1 truncate cleaned up [ 133.236984][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 135.208062][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 140.582911][ T5775] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 140.596331][ T5775] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 140.605053][ T5775] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 140.616876][ T5775] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 140.634284][ T5775] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 140.642589][ T5775] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 142.725076][ T5085] Bluetooth: hci4: command tx timeout [ 144.774746][ T5085] Bluetooth: hci4: command tx timeout [ 145.709321][ T6341] chnl_net:caif_netlink_parms(): no params data found [ 146.038285][ T6006] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.327527][ T6006] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.071356][ T6006] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.353799][ T6006] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.423588][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.595871][ T5085] Bluetooth: hci4: command tx timeout [ 147.601810][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.612120][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.622257][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.632597][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 147.642832][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 148.404121][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 148.424690][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 148.438057][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 148.462124][ T6402] batman_adv: batadv0: adding TT local entry 66:ff:f2:fc:ff:ff to non-existent VLAN 815 [ 148.595153][ T6341] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.602411][ T6341] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.634947][ T6341] bridge_slave_0: entered allmulticast mode [ 148.642660][ T6341] bridge_slave_0: entered promiscuous mode [ 148.703681][ T6341] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.735148][ T6341] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.757014][ T6341] bridge_slave_1: entered allmulticast mode [ 148.818003][ T6341] bridge_slave_1: entered promiscuous mode [ 148.989710][ T6341] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.023301][ T6341] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.948913][ T5085] Bluetooth: hci4: command tx timeout [ 150.026583][ T6341] team0: Port device team_slave_0 added [ 150.082479][ T6341] team0: Port device team_slave_1 added [ 150.083448][ T6423] netlink: 4595 bytes leftover after parsing attributes in process `syz.3.173'. [ 151.223988][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.486750][ T6431] loop0: detected capacity change from 0 to 40427 [ 151.525468][ T6431] F2FS-fs (loop0): invalid crc value [ 151.532752][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.624840][ T6431] F2FS-fs (loop0): Found nat_bits in checkpoint [ 151.701887][ T6431] F2FS-fs (loop0): Start checkpoint disabled! [ 151.715766][ T6431] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 151.769997][ T6341] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.792149][ T6341] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.802272][ T6341] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.837279][ T6431] syz.0.174: attempt to access beyond end of device [ 151.837279][ T6431] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 151.852869][ T6431] syz.0.174: attempt to access beyond end of device [ 151.852869][ T6431] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.867799][ T6431] syz.0.174: attempt to access beyond end of device [ 151.867799][ T6431] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.881962][ T6431] syz.0.174: attempt to access beyond end of device [ 151.881962][ T6431] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.896434][ T6431] syz.0.174: attempt to access beyond end of device [ 151.896434][ T6431] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.911828][ T6431] syz.0.174: attempt to access beyond end of device [ 151.911828][ T6431] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 151.926115][ T6431] syz.0.174: attempt to access beyond end of device [ 151.926115][ T6431] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 151.940236][ T6431] syz.0.174: attempt to access beyond end of device [ 151.940236][ T6431] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 151.954317][ T6431] syz.0.174: attempt to access beyond end of device [ 151.954317][ T6431] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 151.969271][ T6431] syz.0.174: attempt to access beyond end of device [ 151.969271][ T6431] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 152.034792][ T28] audit: type=1800 audit(1769898060.622:2): pid=6431 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.174" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 152.070608][ T6341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.646310][ T1090] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.656802][ T1090] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 152.870711][ T6341] hsr_slave_0: entered promiscuous mode [ 152.946880][ T6341] hsr_slave_1: entered promiscuous mode [ 152.991942][ T6341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.060380][ T6341] Cannot create hsr debugfs directory [ 155.052423][ T6466] loop1: detected capacity change from 0 to 40427 [ 156.370383][ T6466] F2FS-fs (loop1): invalid crc value [ 156.395416][ T6466] F2FS-fs (loop1): Found nat_bits in checkpoint [ 156.456708][ T6466] F2FS-fs (loop1): Start checkpoint disabled! [ 156.470484][ T6466] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 156.612346][ T28] audit: type=1800 audit(1769898065.442:3): pid=6484 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.183" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 156.864908][ T6484] bio_check_eod: 244 callbacks suppressed [ 156.864928][ T6484] syz.1.183: attempt to access beyond end of device [ 156.864928][ T6484] loop1: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 157.261380][ T1090] kworker/u4:6: attempt to access beyond end of device [ 157.261380][ T1090] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 157.328332][ T1090] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 157.348684][ T1090] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 158.694860][ T6341] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.745612][ T6500] netlink: 272 bytes leftover after parsing attributes in process `syz.0.191'. [ 158.758123][ T6501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.188'. [ 158.769565][ T6341] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.777734][ T6500] netlink: 76 bytes leftover after parsing attributes in process `syz.0.191'. [ 159.070113][ T6341] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 159.120632][ T6341] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 161.143046][ T6006] hsr_slave_0: left promiscuous mode [ 161.228986][ T6006] hsr_slave_1: left promiscuous mode [ 161.292498][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.316981][ T6522] loop0: detected capacity change from 0 to 40427 [ 161.333263][ T6522] F2FS-fs (loop0): invalid crc value [ 161.340277][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.356751][ T6522] F2FS-fs (loop0): Found nat_bits in checkpoint [ 161.407643][ T6522] F2FS-fs (loop0): Start checkpoint disabled! [ 161.435204][ T6522] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 161.546309][ T6006] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.594387][ T28] audit: type=1800 audit(1769898070.422:4): pid=6537 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.195" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 161.634500][ T6006] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.668056][ T6537] syz.0.195: attempt to access beyond end of device [ 161.668056][ T6537] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 161.691794][ T6537] syz.0.195: attempt to access beyond end of device [ 161.691794][ T6537] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.707770][ T6537] syz.0.195: attempt to access beyond end of device [ 161.707770][ T6537] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.723736][ T6537] syz.0.195: attempt to access beyond end of device [ 161.723736][ T6537] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.740989][ T6537] syz.0.195: attempt to access beyond end of device [ 161.740989][ T6537] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.765103][ T6537] syz.0.195: attempt to access beyond end of device [ 161.765103][ T6537] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 161.780876][ T6537] syz.0.195: attempt to access beyond end of device [ 161.780876][ T6537] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 161.905793][ T6006] bridge_slave_1: left allmulticast mode [ 161.911544][ T6006] bridge_slave_1: left promiscuous mode [ 161.935701][ T6006] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.991638][ T6006] bridge_slave_0: left allmulticast mode [ 162.038491][ T6006] bridge_slave_0: left promiscuous mode [ 162.045381][ T6006] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.201337][ T6006] veth1_macvtap: left promiscuous mode [ 162.209048][ T6006] veth0_macvtap: left promiscuous mode [ 162.225001][ T6006] veth1_vlan: left allmulticast mode [ 162.228161][ T1141] kworker/u4:9: attempt to access beyond end of device [ 162.228161][ T1141] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 162.231159][ T6006] veth1_vlan: left promiscuous mode [ 162.281144][ T1141] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 162.301396][ T1141] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 162.311182][ T6006] veth0_vlan: left promiscuous mode [ 164.916325][ T6567] loop3: detected capacity change from 0 to 40427 [ 164.984724][ T6567] F2FS-fs (loop3): invalid crc value [ 165.034783][ T6567] F2FS-fs (loop3): Found nat_bits in checkpoint [ 165.074145][ T6567] F2FS-fs (loop3): Start checkpoint disabled! [ 165.091728][ T6567] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 165.191954][ T28] audit: type=1800 audit(1769898074.022:5): pid=6571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.205" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 165.247789][ T6571] syz.3.205: attempt to access beyond end of device [ 165.247789][ T6571] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 165.263700][ T6571] syz.3.205: attempt to access beyond end of device [ 165.263700][ T6571] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.294296][ T6571] syz.3.205: attempt to access beyond end of device [ 165.294296][ T6571] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.310053][ T6571] syz.3.205: attempt to access beyond end of device [ 165.310053][ T6571] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.325991][ T6571] syz.3.205: attempt to access beyond end of device [ 165.325991][ T6571] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.343986][ T6571] syz.3.205: attempt to access beyond end of device [ 165.343986][ T6571] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 165.358345][ T6571] syz.3.205: attempt to access beyond end of device [ 165.358345][ T6571] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 165.375124][ T6571] syz.3.205: attempt to access beyond end of device [ 165.375124][ T6571] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 165.391048][ T6571] syz.3.205: attempt to access beyond end of device [ 165.391048][ T6571] loop3: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 165.671929][ T6006] team0 (unregistering): Port device team_slave_1 removed [ 165.901942][ T6006] team0 (unregistering): Port device team_slave_0 removed [ 166.009049][ T6006] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.101411][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 166.137896][ T1141] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 166.138238][ T6006] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.302447][ T6006] bond0 (unregistering): Released all slaves [ 168.777129][ T6341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.844328][ T6341] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.947860][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.955221][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.051391][ T2933] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.058662][ T2933] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.409768][ T6341] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 169.448179][ T6605] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 170.359451][ T6341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.742437][ T6341] veth0_vlan: entered promiscuous mode [ 171.818134][ T6341] veth1_vlan: entered promiscuous mode [ 172.039931][ T6341] veth0_macvtap: entered promiscuous mode [ 172.083791][ T6341] veth1_macvtap: entered promiscuous mode [ 172.205640][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.234296][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.270143][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.377030][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.387918][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.398926][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.413064][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.440929][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.505441][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.556120][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.567315][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.578131][ T6341] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.589393][ T6341] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.601869][ T6341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.650424][ T6341] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.750498][ T6341] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.812614][ T6341] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.873546][ T6341] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.126016][ T6689] netlink: 164 bytes leftover after parsing attributes in process `syz.0.235'. [ 173.344981][ T2933] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.360174][ T2933] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.565654][ T2933] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.600546][ T2933] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.884372][ T6734] loop4: detected capacity change from 0 to 512 [ 176.138107][ T6734] EXT4-fs (loop4): 1 truncate cleaned up [ 176.145110][ T6734] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 176.696766][ T6341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 179.165651][ T6777] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.452686][ T6864] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 185.495170][ T6864] random: crng reseeded on system resumption [ 187.639636][ T6889] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 189.758347][ T6910] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 189.807951][ T6910] random: crng reseeded on system resumption [ 191.946282][ T6925] loop0: detected capacity change from 0 to 40427 [ 192.228142][ T6928] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 192.242954][ T6928] random: crng reseeded on system resumption [ 193.215032][ T6925] F2FS-fs (loop0): invalid crc value [ 193.241185][ T6925] F2FS-fs (loop0): Found nat_bits in checkpoint [ 193.312103][ T6925] F2FS-fs (loop0): Start checkpoint disabled! [ 193.368322][ T6925] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 194.336693][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.301'. [ 194.366350][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.301'. [ 194.398132][ T6947] netlink: 60 bytes leftover after parsing attributes in process `syz.4.301'. [ 194.620650][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.628052][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 196.715733][ T6974] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 196.732515][ T6974] random: crng reseeded on system resumption [ 197.591707][ T6977] loop1: detected capacity change from 0 to 40427 [ 197.652302][ T6977] F2FS-fs (loop1): invalid crc value [ 197.662735][ T6977] F2FS-fs (loop1): Found nat_bits in checkpoint [ 197.727330][ T6977] F2FS-fs (loop1): Start checkpoint disabled! [ 197.745301][ T6977] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 199.058143][ T7001] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 199.076781][ T7001] random: crng reseeded on system resumption [ 200.445440][ T7020] loop0: detected capacity change from 0 to 40427 [ 200.483091][ T7020] F2FS-fs (loop0): invalid crc value [ 200.499185][ T7020] F2FS-fs (loop0): Found nat_bits in checkpoint [ 200.538690][ T7020] F2FS-fs (loop0): Start checkpoint disabled! [ 200.562464][ T7020] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 202.084340][ T7045] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 202.101621][ T7045] random: crng reseeded on system resumption [ 202.854343][ T7046] loop0: detected capacity change from 0 to 40427 [ 202.944917][ T7046] F2FS-fs (loop0): invalid crc value [ 202.979753][ T7046] F2FS-fs (loop0): Found nat_bits in checkpoint [ 203.057719][ T7046] F2FS-fs (loop0): Start checkpoint disabled! [ 203.084258][ T7046] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 203.172145][ T28] audit: type=1800 audit(1769898112.002:6): pid=7046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.327" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 203.199939][ T7046] bio_check_eod: 34 callbacks suppressed [ 203.199954][ T7046] syz.0.327: attempt to access beyond end of device [ 203.199954][ T7046] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 203.219847][ T7046] syz.0.327: attempt to access beyond end of device [ 203.219847][ T7046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.234008][ T7046] syz.0.327: attempt to access beyond end of device [ 203.234008][ T7046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.248203][ T7046] syz.0.327: attempt to access beyond end of device [ 203.248203][ T7046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.263951][ T7046] syz.0.327: attempt to access beyond end of device [ 203.263951][ T7046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.278263][ T7046] syz.0.327: attempt to access beyond end of device [ 203.278263][ T7046] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.292261][ T7046] syz.0.327: attempt to access beyond end of device [ 203.292261][ T7046] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 203.306453][ T7046] syz.0.327: attempt to access beyond end of device [ 203.306453][ T7046] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.320686][ T7046] syz.0.327: attempt to access beyond end of device [ 203.320686][ T7046] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.334904][ T7046] syz.0.327: attempt to access beyond end of device [ 203.334904][ T7046] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 203.517586][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.3.331'. [ 203.527959][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.3.331'. [ 203.539187][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.3.331'. [ 203.559325][ T7059] netlink: 60 bytes leftover after parsing attributes in process `syz.3.331'. [ 203.796493][ T2933] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 203.824144][ T2933] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 206.914252][ T7083] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 206.930692][ T7083] random: crng reseeded on system resumption [ 207.674242][ T7081] loop4: detected capacity change from 0 to 40427 [ 207.758690][ T7081] F2FS-fs (loop4): invalid crc value [ 207.788091][ T7081] F2FS-fs (loop4): Found nat_bits in checkpoint [ 207.837203][ T7081] F2FS-fs (loop4): Start checkpoint disabled! [ 207.890004][ T7081] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 208.082199][ T28] audit: type=1800 audit(1769898116.892:7): pid=7087 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.338" name="bus" dev="loop4" ino=10 res=0 errno=0 [ 208.205238][ T7087] bio_check_eod: 63 callbacks suppressed [ 208.205296][ T7087] syz.4.338: attempt to access beyond end of device [ 208.205296][ T7087] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 208.330614][ T7087] syz.4.338: attempt to access beyond end of device [ 208.330614][ T7087] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 209.060731][ T1141] kworker/u4:9: attempt to access beyond end of device [ 209.060731][ T1141] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 209.105796][ T1141] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 209.112871][ T1141] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 212.087810][ T51] Bluetooth: hci1: command 0x0406 tx timeout [ 212.094228][ T5783] Bluetooth: hci3: command 0x0406 tx timeout [ 212.100592][ T51] Bluetooth: hci0: command 0x0406 tx timeout [ 213.659180][ T7169] ksmbd: Daemon and kernel module version mismatch. ksmbd: 0, kernel module: 1. User-space ksmbd should terminate. [ 213.676283][ T7169] random: crng reseeded on system resumption [ 215.516993][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 216.036785][ T7192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.353'. [ 220.172053][ T7230] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 221.494008][ T7234] random: crng reseeded on system resumption [ 226.202380][ T7258] netlink: 12 bytes leftover after parsing attributes in process `syz.0.371'. [ 226.691653][ T7182] netlink: 60 bytes leftover after parsing attributes in process `syz.1.352'. [ 227.581947][ T7268] random: crng reseeded on system resumption [ 228.817492][ T7267] netlink: 8 bytes leftover after parsing attributes in process `syz.0.374'. [ 230.209679][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 230.234661][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 230.276517][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 230.296165][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 230.364833][ T7291] netlink: 60 bytes leftover after parsing attributes in process `syz.3.381'. [ 231.816126][ T7305] random: crng reseeded on system resumption [ 234.582979][ T7324] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 235.011681][ T7326] loop1: detected capacity change from 0 to 40427 [ 235.027293][ T7326] F2FS-fs (loop1): invalid crc value [ 235.049392][ T7326] F2FS-fs (loop1): Found nat_bits in checkpoint [ 235.097780][ T27] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 235.126540][ T7326] F2FS-fs (loop1): Start checkpoint disabled! [ 235.170415][ T7326] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 235.347071][ T28] audit: type=1800 audit(1769898144.152:8): pid=7338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.376" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 235.408881][ T7338] syz.1.376: attempt to access beyond end of device [ 235.408881][ T7338] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 235.427133][ T7338] syz.1.376: attempt to access beyond end of device [ 235.427133][ T7338] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.443198][ T7338] syz.1.376: attempt to access beyond end of device [ 235.443198][ T7338] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.459187][ T7338] syz.1.376: attempt to access beyond end of device [ 235.459187][ T7338] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.477044][ T7338] syz.1.376: attempt to access beyond end of device [ 235.477044][ T7338] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 235.559780][ T27] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 235.621489][ T27] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 235.689144][ T27] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 235.780138][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 236.066032][ T27] usb 1-1: usb_control_msg returned -32 [ 236.089419][ T27] usbtmc 1-1:16.0: can't read capabilities [ 236.133365][ T6001] kworker/u4:13: attempt to access beyond end of device [ 236.133365][ T6001] loop1: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 236.163927][ T27] usb 1-1: USB disconnect, device number 2 [ 236.175422][ T6001] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 236.182416][ T6001] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 239.630984][ T7398] netlink: 20 bytes leftover after parsing attributes in process `syz.0.406'. [ 239.784766][ T8] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 239.825518][ T7392] loop3: detected capacity change from 0 to 40427 [ 239.839033][ T7392] F2FS-fs (loop3): invalid crc value [ 239.877178][ T7392] F2FS-fs (loop3): Found nat_bits in checkpoint [ 239.933639][ T7392] F2FS-fs (loop3): Start checkpoint disabled! [ 239.952660][ T7392] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 240.374550][ T7409] syz.3.403: attempt to access beyond end of device [ 240.374550][ T7409] loop3: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 240.389997][ T7409] syz.3.403: attempt to access beyond end of device [ 240.389997][ T7409] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.406569][ T7409] syz.3.403: attempt to access beyond end of device [ 240.406569][ T7409] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.423333][ T7409] syz.3.403: attempt to access beyond end of device [ 240.423333][ T7409] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.440727][ T7409] syz.3.403: attempt to access beyond end of device [ 240.440727][ T7409] loop3: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 240.774644][ T28] audit: type=1800 audit(1769898149.102:9): pid=7409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.403" name="bus" dev="loop3" ino=10 res=0 errno=0 [ 240.982912][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 240.993417][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 241.002590][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 241.047252][ T8] usb 5-1: config 0 descriptor?? [ 241.099003][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 241.525398][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 242.271407][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 242.331964][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 242.353561][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 242.361886][ T6012] kworker/u4:17: attempt to access beyond end of device [ 242.361886][ T6012] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 242.388231][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 242.406225][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 242.414126][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 242.420914][ T6012] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 242.429677][ T6012] F2FS-fs (loop3): Stopped filesystem due to reason: 3 [ 242.445137][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 242.474398][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 242.495722][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 242.505351][ T8] pwc: recv_control_msg error -32 req 02 val 2400 [ 242.737364][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 242.790136][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 242.842687][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 242.876016][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 243.795602][ T8] pwc: Registered as video103. [ 243.803651][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input5 [ 243.931935][ T8] usb 5-1: USB disconnect, device number 2 [ 244.006496][ T7443] netlink: 12 bytes leftover after parsing attributes in process `syz.4.415'. [ 244.371120][ T7458] netlink: 8 bytes leftover after parsing attributes in process `syz.0.421'. [ 244.594824][ T7454] loop1: detected capacity change from 0 to 40427 [ 244.621381][ T7454] F2FS-fs (loop1): invalid crc value [ 245.417190][ T7454] F2FS-fs (loop1): Found nat_bits in checkpoint [ 245.548988][ T7454] F2FS-fs (loop1): Start checkpoint disabled! [ 245.586439][ T7454] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e6 [ 245.718038][ T28] audit: type=1800 audit(1769898154.552:10): pid=7471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.419" name="bus" dev="loop1" ino=10 res=0 errno=0 [ 245.786270][ T7471] syz.1.419: attempt to access beyond end of device [ 245.786270][ T7471] loop1: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 245.809307][ T7471] syz.1.419: attempt to access beyond end of device [ 245.809307][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.826017][ T7471] syz.1.419: attempt to access beyond end of device [ 245.826017][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.841849][ T7471] syz.1.419: attempt to access beyond end of device [ 245.841849][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.857438][ T7471] syz.1.419: attempt to access beyond end of device [ 245.857438][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.875004][ T7471] syz.1.419: attempt to access beyond end of device [ 245.875004][ T7471] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 245.889125][ T7471] syz.1.419: attempt to access beyond end of device [ 245.889125][ T7471] loop1: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 245.904480][ T7471] syz.1.419: attempt to access beyond end of device [ 245.904480][ T7471] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 245.920004][ T7471] syz.1.419: attempt to access beyond end of device [ 245.920004][ T7471] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 245.939104][ T7471] syz.1.419: attempt to access beyond end of device [ 245.939104][ T7471] loop1: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 246.565790][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.0.428'. [ 246.624807][ T6012] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 246.632077][ T6012] F2FS-fs (loop1): Stopped filesystem due to reason: 3 [ 246.809220][ T7488] netlink: 12 bytes leftover after parsing attributes in process `syz.3.429'. [ 246.986162][ T5780] block nbd0: Receive control failed (result -107) [ 249.000427][ T7518] loop0: detected capacity change from 0 to 40427 [ 249.243207][ T7518] F2FS-fs (loop0): invalid crc value [ 249.279526][ T7518] F2FS-fs (loop0): Found nat_bits in checkpoint [ 249.357752][ T7518] F2FS-fs (loop0): Start checkpoint disabled! [ 249.884624][ T7518] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 250.049836][ T28] audit: type=1800 audit(1769898158.882:11): pid=7527 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.434" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 250.854388][ T6032] bio_check_eod: 373 callbacks suppressed [ 250.854407][ T6032] kworker/u4:23: attempt to access beyond end of device [ 250.854407][ T6032] loop0: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 250.934404][ T6032] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 250.977625][ T6032] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 254.521246][ T7572] binder: 7571:7572 unknown command 1074553619 [ 254.557036][ T7572] binder: 7571:7572 ioctl c0306201 200000000640 returned -22 [ 256.272757][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.354675][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.698301][ T7593] syz.1.442 uses obsolete (PF_INET,SOCK_PACKET) [ 257.179004][ T7603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.458'. [ 260.704674][ T27] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 260.915354][ T27] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.028671][ T7663] loop4: detected capacity change from 0 to 512 [ 261.133738][ T27] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 261.331354][ T7663] EXT4-fs (loop4): 1 truncate cleaned up [ 261.343875][ T7663] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 261.512979][ T27] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 261.803843][ T27] usb 4-1: config 0 descriptor?? [ 261.824331][ T6341] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 261.831285][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 262.615979][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 262.628305][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 262.640225][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 262.655737][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 262.663011][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 262.671158][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 262.678904][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 262.689281][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 262.696960][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 262.704344][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 262.727205][ T27] pwc: recv_control_msg error -32 req 02 val 2400 [ 262.737196][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 262.755193][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 262.800434][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 262.815390][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 262.836044][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 262.884902][ T27] pwc: Registered as video103. [ 262.906489][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input6 [ 263.175291][ T27] usb 4-1: USB disconnect, device number 2 [ 263.335240][ T5775] Bluetooth: hci4: command 0x0406 tx timeout [ 264.154806][ T5759] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 264.404630][ T5759] usb 5-1: Using ep0 maxpacket: 8 [ 264.433188][ T5759] usb 5-1: New USB device found, idVendor=2770, idProduct=9120, bcdDevice=6c.77 [ 264.464606][ T5759] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=239 [ 264.472956][ T5759] usb 5-1: Product: syz [ 264.505298][ T5759] usb 5-1: Manufacturer: syz [ 264.509993][ T5759] usb 5-1: SerialNumber: syz [ 264.536385][ T5759] usb 5-1: config 0 descriptor?? [ 264.642928][ T5759] gspca_main: sq905-2.14.0 probing 2770:9120 [ 264.949230][ T5759] gspca_sq905: sq905_command: usb_control_msg failed (-71) [ 265.090683][ T5759] sq905: probe of 5-1:0.0 failed with error -71 [ 265.377606][ T5759] usb 5-1: USB disconnect, device number 3 [ 265.933309][ T5759] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 266.894649][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 266.944370][ T5759] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 266.974752][ T5759] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 266.983971][ T5759] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.005734][ T5759] usb 4-1: config 0 descriptor?? [ 267.018448][ T5759] pwc: Askey VC010 type 2 USB webcam detected. [ 267.284632][ T8] usb 5-1: Using ep0 maxpacket: 32 [ 267.292132][ T8] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 268.077545][ T5759] pwc: recv_control_msg error -32 req 02 val 2b00 [ 268.084953][ T8] usb 5-1: config 0 has no interface number 0 [ 268.093283][ T5759] pwc: recv_control_msg error -32 req 02 val 2700 [ 268.102814][ T8] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 268.113041][ T5759] pwc: recv_control_msg error -32 req 02 val 2c00 [ 268.123929][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.132477][ T8] usb 5-1: Product: syz [ 268.141328][ T5759] pwc: recv_control_msg error -32 req 04 val 1000 [ 268.147946][ T8] usb 5-1: Manufacturer: syz [ 268.152623][ T8] usb 5-1: SerialNumber: syz [ 268.159879][ T5759] pwc: recv_control_msg error -32 req 04 val 1300 [ 268.169031][ T8] usb 5-1: config 0 descriptor?? [ 268.175100][ T5759] pwc: recv_control_msg error -32 req 04 val 1400 [ 268.186513][ T8] smsc95xx v2.0.0 [ 268.204257][ T5759] pwc: recv_control_msg error -32 req 02 val 2000 [ 268.225801][ T5759] pwc: recv_control_msg error -32 req 02 val 2100 [ 268.245949][ T5759] pwc: recv_control_msg error -32 req 04 val 1500 [ 268.265970][ T5759] pwc: recv_control_msg error -32 req 02 val 2500 [ 268.282526][ T5759] pwc: recv_control_msg error -32 req 02 val 2400 [ 268.307112][ T5759] pwc: recv_control_msg error -71 req 02 val 2600 [ 268.322844][ T5759] pwc: recv_control_msg error -71 req 02 val 2900 [ 268.338230][ T5759] pwc: recv_control_msg error -71 req 02 val 2800 [ 268.355381][ T5759] pwc: recv_control_msg error -71 req 04 val 1100 [ 268.375706][ T5759] pwc: recv_control_msg error -71 req 04 val 1200 [ 268.399711][ T5759] pwc: Registered as video103. [ 268.417560][ T5759] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input7 [ 268.482896][ T5759] usb 4-1: USB disconnect, device number 3 [ 268.610841][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 268.648067][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 270.986087][ T8] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000038: -71 [ 271.015620][ T8] smsc95xx: probe of 5-1:0.67 failed with error -71 [ 271.061007][ T8] usb 5-1: USB disconnect, device number 4 [ 271.205008][ T5822] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 271.394817][ T9] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 271.414699][ T5822] usb 1-1: Using ep0 maxpacket: 32 [ 271.422776][ T5822] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 271.444559][ T5822] usb 1-1: config 0 has no interface number 0 [ 271.457043][ T5822] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 271.469055][ T5822] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.485683][ T5822] usb 1-1: Product: syz [ 271.489934][ T5822] usb 1-1: Manufacturer: syz [ 271.505335][ T5822] usb 1-1: SerialNumber: syz [ 271.521387][ T5822] usb 1-1: config 0 descriptor?? [ 271.545904][ T5822] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 271.608182][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.653897][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 271.694715][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.727512][ T9] usb 4-1: config 0 descriptor?? [ 271.748850][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 271.783795][ T5822] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 271.849433][ T5822] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 272.190871][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 272.342547][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 272.408246][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 272.418371][ T5822] usb 1-1: USB disconnect, device number 3 [ 272.523177][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 272.722026][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 272.737922][ T5822] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 272.785431][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 272.817026][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 272.824597][ T5822] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 272.856905][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 272.877727][ T5822] quatech2 1-1:0.51: device disconnected [ 272.885642][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 272.935685][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 272.987764][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 273.005594][ T9] pwc: recv_control_msg error -32 req 02 val 2400 [ 273.024158][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 273.068636][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 273.096021][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 273.114306][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 273.150082][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 273.183495][ T9] pwc: Registered as video103. [ 273.210092][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input8 [ 273.286031][ T9] usb 4-1: USB disconnect, device number 4 [ 275.624693][ T8] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 275.997498][ T8] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 276.010801][ T8] usb 2-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 276.766834][ T8] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 276.776083][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 276.787920][ T8] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 276.802008][ T8] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 276.811467][ T8] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 276.834667][ T8] usb 2-1: Product: syz [ 276.838922][ T8] usb 2-1: Manufacturer: syz [ 276.858615][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 276.863997][ T8] cdc_wdm 2-1:1.0: skipping garbage [ 276.894887][ T8] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 276.915876][ T8] cdc_wdm 2-1:1.0: Unknown control protocol [ 277.106893][ C0] cdc_wdm 2-1:1.0: unknown notification 208 received: index 8192 len 0 [ 277.322933][ T9] usb 2-1: USB disconnect, device number 2 [ 278.947014][ T8] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 279.172335][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 279.204588][ T8] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 279.235875][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 279.267449][ T8] usb 1-1: config 0 descriptor?? [ 279.295435][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 279.668099][ T5822] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 279.703078][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 279.737851][ T8] pwc: recv_control_msg error -32 req 02 val 2700 [ 279.771364][ T8] pwc: recv_control_msg error -32 req 02 val 2c00 [ 279.784342][ T8] pwc: recv_control_msg error -32 req 04 val 1000 [ 279.792384][ T8] pwc: recv_control_msg error -32 req 04 val 1300 [ 279.805727][ T8] pwc: recv_control_msg error -32 req 04 val 1400 [ 279.818820][ T8] pwc: recv_control_msg error -32 req 02 val 2000 [ 279.851392][ T8] pwc: recv_control_msg error -32 req 02 val 2100 [ 279.908704][ T5822] usb 4-1: Using ep0 maxpacket: 8 [ 279.992437][ T5822] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 280.005839][ T8] pwc: recv_control_msg error -32 req 04 val 1500 [ 280.081871][ T8] pwc: recv_control_msg error -32 req 02 val 2500 [ 280.119252][ T5822] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.213682][ T5822] usb 4-1: Product: syz [ 280.282153][ T5822] usb 4-1: Manufacturer: syz [ 280.340128][ T5822] usb 4-1: SerialNumber: syz [ 280.376391][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 280.416297][ T5822] usb 4-1: config 0 descriptor?? [ 280.424404][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 280.452041][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 280.481440][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 280.511778][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 280.550831][ T8] pwc: Registered as video103. [ 280.597751][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input9 [ 280.685415][ T5822] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 280.734770][ T8] usb 1-1: USB disconnect, device number 4 [ 282.441465][ T5822] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 282.489850][ T5822] usb 4-1: USB disconnect, device number 5 [ 282.805993][ T27] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 283.017647][ T27] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 283.041258][ T27] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 283.072963][ T27] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 283.105009][ T27] usb 1-1: config 0 descriptor?? [ 283.126400][ T27] pwc: Askey VC010 type 2 USB webcam detected. [ 283.607561][ T27] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.622974][ T27] pwc: recv_control_msg error -32 req 02 val 2700 [ 283.633661][ T27] pwc: recv_control_msg error -32 req 02 val 2c00 [ 283.643017][ T27] pwc: recv_control_msg error -32 req 04 val 1000 [ 283.654101][ T27] pwc: recv_control_msg error -32 req 04 val 1300 [ 283.666873][ T27] pwc: recv_control_msg error -32 req 04 val 1400 [ 284.425172][ T27] pwc: recv_control_msg error -32 req 02 val 2000 [ 284.445056][ T27] pwc: recv_control_msg error -32 req 02 val 2100 [ 284.452861][ T27] pwc: recv_control_msg error -32 req 04 val 1500 [ 284.463695][ T27] pwc: recv_control_msg error -32 req 02 val 2500 [ 284.518108][ T8028] netlink: 12 bytes leftover after parsing attributes in process `syz.3.606'. [ 284.681265][ T27] pwc: recv_control_msg error -71 req 02 val 2600 [ 284.703246][ T27] pwc: recv_control_msg error -71 req 02 val 2900 [ 284.739280][ T27] pwc: recv_control_msg error -71 req 02 val 2800 [ 284.756951][ T27] pwc: recv_control_msg error -71 req 04 val 1100 [ 284.773389][ T27] pwc: recv_control_msg error -71 req 04 val 1200 [ 284.796728][ T27] pwc: Registered as video103. [ 284.825573][ T27] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input10 [ 284.893373][ T27] usb 1-1: USB disconnect, device number 5 [ 285.507107][ T5815] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 287.358734][ T8042] warning: `syz.4.613' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 287.471810][ T5815] usb 5-1: unable to get BOS descriptor or descriptor too short [ 287.486013][ T5815] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 287.501875][ T5815] usb 5-1: can't read configurations, error -71 [ 287.524955][ T8069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.623'. [ 288.763880][ T8083] loop1: detected capacity change from 0 to 512 [ 288.779705][ T8083] EXT4-fs (loop1): 1 truncate cleaned up [ 288.791838][ T8083] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 288.822873][ T8092] netlink: 8 bytes leftover after parsing attributes in process `syz.3.626'. [ 289.786158][ T5769] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 297.763266][ T8159] loop0: detected capacity change from 0 to 512 [ 298.233261][ T8159] EXT4-fs (loop0): 1 truncate cleaned up [ 298.243804][ T8159] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 298.454788][ T5862] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 298.503856][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 298.685895][ T5862] usb 2-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.32 [ 298.704735][ T5862] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 298.728231][ T5862] usb 2-1: config 0 descriptor?? [ 298.758136][ T5862] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 298.884887][ T9] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 299.068843][ T8173] netlink: 8 bytes leftover after parsing attributes in process `syz.4.655'. [ 299.108562][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 299.127881][ T9] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 299.150471][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.171990][ T5862] gp8psk: usb out operation failed. [ 299.186542][ T5862] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 299.199175][ T9] usb 1-1: config 0 descriptor?? [ 299.219544][ T5862] dvbdev: DVB: registering new adapter (Genpix SkyWalker-1 DVB-S receiver) [ 299.234935][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 299.243277][ T5862] usb 2-1: media controller created [ 299.332782][ T5862] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 299.402972][ T5862] gp8psk_fe: Frontend attached [ 299.425194][ T5862] usb 2-1: DVB: registering adapter 1 frontend 0 (Genpix DVB-S)... [ 299.442472][ T5862] dvbdev: dvb_create_media_entity: media entity 'Genpix DVB-S' registered. [ 299.641938][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 299.681886][ T9] pwc: recv_control_msg error -32 req 02 val 2700 [ 299.701357][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 300.512247][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 300.519428][ T5862] gp8psk: usb in 138 operation failed. [ 300.534640][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully initialized and connected. [ 300.554904][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 300.563957][ T5862] gp8psk: found Genpix USB device pID = 203 (hex) [ 300.582772][ T9] pwc: recv_control_msg error -32 req 04 val 1400 [ 300.604998][ T5862] usb 2-1: USB disconnect, device number 3 [ 300.618167][ T9] pwc: recv_control_msg error -32 req 02 val 2000 [ 300.639680][ T9] pwc: recv_control_msg error -32 req 02 val 2100 [ 300.675478][ T9] pwc: recv_control_msg error -32 req 04 val 1500 [ 300.695435][ T9] pwc: recv_control_msg error -32 req 02 val 2500 [ 302.740230][ T5862] dvb-usb: Genpix SkyWalker-1 DVB-S receiver successfully deinitialized and disconnected. [ 302.822193][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 302.865834][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 302.891279][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 302.941630][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 302.974903][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 302.991379][ T9] pwc: Registered as video103. [ 303.018406][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input11 [ 303.075079][ T9] usb 1-1: USB disconnect, device number 6 [ 304.722944][ T8205] loop0: detected capacity change from 0 to 512 [ 305.113710][ T8205] EXT4-fs (loop0): 1 truncate cleaned up [ 305.121501][ T8205] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 305.459810][ T5772] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 310.375884][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.0.673'. [ 310.744816][ T8251] loop3: detected capacity change from 0 to 512 [ 311.447656][ T8251] EXT4-fs (loop3): 1 truncate cleaned up [ 311.455406][ T8251] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 311.737200][ T5770] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 312.112340][ T8264] tipc: Started in network mode [ 312.134778][ T8264] tipc: Node identity 6a772d0b793, cluster identity 4711 [ 312.159133][ T8264] tipc: Enabled bearer , priority 0 [ 312.302011][ T8264] syzkaller0: entered promiscuous mode [ 312.314084][ T8264] syzkaller0: entered allmulticast mode [ 312.329899][ T8264] tipc: Resetting bearer [ 312.444831][ T8263] tipc: Resetting bearer [ 315.354694][ T9] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 315.559225][ T9] usb 2-1: Using ep0 maxpacket: 8 [ 315.591879][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 315.612307][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.642205][ T9] usb 2-1: Product: syz [ 315.654735][ T9] usb 2-1: Manufacturer: syz [ 315.664636][ T9] usb 2-1: SerialNumber: syz [ 315.683009][ T9] usb 2-1: config 0 descriptor?? [ 315.956434][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.409559][ T9] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 317.436975][ T9] usb 2-1: USB disconnect, device number 4 [ 317.525026][ T1283] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.531614][ T1283] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.812751][ T8263] tipc: Disabling bearer [ 319.823774][ T27] tipc: Node number set to 323431691 [ 320.137473][ T5780] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci0/hci0:201' [ 320.148046][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 320.155670][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.165799][ T5780] Workqueue: hci0 hci_rx_work [ 320.170587][ T5780] Call Trace: [ 320.173919][ T5780] [ 320.176904][ T5780] dump_stack_lvl+0x18c/0x250 [ 320.181661][ T5780] ? show_regs_print_info+0x20/0x20 [ 320.186931][ T5780] ? load_image+0x400/0x400 [ 320.191534][ T5780] sysfs_create_dir_ns+0x26e/0x2a0 [ 320.196729][ T5780] ? sysfs_warn_dup+0xa0/0xa0 [ 320.201643][ T5780] ? do_raw_spin_unlock+0x121/0x230 [ 320.206921][ T5780] kobject_add_internal+0x61c/0xcc0 [ 320.212215][ T5780] kobject_add+0x164/0x240 [ 320.216704][ T5780] ? __rwlock_init+0x150/0x150 [ 320.221547][ T5780] ? kobject_init+0x1e0/0x1e0 [ 320.226315][ T5780] ? _raw_spin_unlock+0x28/0x40 [ 320.231208][ T5780] ? get_device_parent+0x366/0x390 [ 320.236360][ T5780] device_add+0x408/0xc20 [ 320.240733][ T5780] hci_conn_add_sysfs+0xd5/0x1e0 [ 320.245709][ T5780] le_conn_complete_evt+0xf5d/0x1540 [ 320.251041][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 320.256202][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 320.262506][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 320.268194][ T5780] ? skb_pull_data+0xfb/0x200 [ 320.272915][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 320.278511][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 320.284619][ T5780] hci_event_packet+0x7ba/0x1270 [ 320.289602][ T5780] ? bis_list+0x290/0x290 [ 320.293970][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 320.299202][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 320.304443][ T5780] hci_rx_work+0x43a/0xd60 [ 320.308919][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 320.314678][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 320.320283][ T5780] ? assign_work+0x430/0x430 [ 320.324912][ T5780] ? assign_work+0x3d0/0x430 [ 320.329546][ T5780] worker_thread+0xa55/0xfc0 [ 320.334198][ T5780] kthread+0x2fa/0x390 [ 320.338293][ T5780] ? pr_cont_work+0x560/0x560 [ 320.343006][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 320.347631][ T5780] ret_from_fork+0x48/0x80 [ 320.352083][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 320.356719][ T5780] ret_from_fork_asm+0x11/0x20 [ 320.361541][ T5780] [ 320.377946][ T5780] kobject: kobject_add_internal failed for hci0:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 320.392310][ T5780] Bluetooth: hci0: failed to register connection device [ 320.401840][ T5780] general protection fault, probably for non-canonical address 0xdffffc0000000026: 0000 [#1] PREEMPT SMP KASAN [ 320.413634][ T5780] KASAN: null-ptr-deref in range [0x0000000000000130-0x0000000000000137] [ 320.422104][ T5780] CPU: 1 PID: 5780 Comm: kworker/u5:3 Not tainted syzkaller #0 [ 320.429962][ T5780] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 320.440070][ T5780] Workqueue: hci0 hci_rx_work [ 320.444813][ T5780] RIP: 0010:__lock_acquire+0xf9/0x7d40 [ 320.450334][ T5780] Code: 89 bc 24 88 00 00 00 0f 85 88 67 00 00 83 3d b9 ec 22 0d 00 0f 84 16 10 00 00 83 3d 00 c9 97 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 23 14 77 00 48 8b [ 320.470158][ T5780] RSP: 0018:ffffc9000473f2a0 EFLAGS: 00010002 [ 320.476273][ T5780] RAX: 0000000000000026 RBX: ffff8880270dbc00 RCX: 1ffff920008e7e78 [ 320.484293][ T5780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 320.492319][ T5780] RBP: ffffc9000473f4e8 R08: dffffc0000000000 R09: 0000000000000000 [ 320.500437][ T5780] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 0000000000000000 [ 320.508467][ T5780] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 320.516486][ T5780] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 320.525482][ T5780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.532118][ T5780] CR2: 00007ffd35861f7c CR3: 000000005ec4f000 CR4: 00000000003506e0 [ 320.540148][ T5780] Call Trace: [ 320.543474][ T5780] [ 320.546447][ T5780] ? finish_task_switch+0x265/0x8f0 [ 320.551702][ T5780] ? verify_lock_unused+0x140/0x140 [ 320.556965][ T5780] ? __schedule+0x155b/0x45a0 [ 320.561707][ T5780] ? verify_lock_unused+0x140/0x140 [ 320.566959][ T5780] ? __mutex_lock+0x94c/0xcc0 [ 320.571704][ T5780] ? __lock_acquire+0x7d40/0x7d40 [ 320.576786][ T5780] ? do_raw_spin_lock+0x11f/0x2c0 [ 320.581874][ T5780] lock_acquire+0x19e/0x420 [ 320.586423][ T5780] ? l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 320.592460][ T5780] ? __mutex_lock+0x956/0xcc0 [ 320.597211][ T5780] ? read_lock_is_recursive+0x20/0x20 [ 320.602632][ T5780] ? mutex_lock_nested+0x20/0x20 [ 320.607633][ T5780] ? l2cap_global_fixed_chan+0x2ef/0x380 [ 320.613324][ T5780] lock_sock_nested+0x48/0x100 [ 320.618147][ T5780] ? l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 320.624178][ T5780] l2cap_sock_new_connection_cb+0x4a/0x2a0 [ 320.630086][ T5780] l2cap_connect_cfm+0x375/0x1070 [ 320.635174][ T5780] ? l2cap_ertm_resend+0x1040/0x1040 [ 320.640527][ T5780] ? l2cap_ertm_resend+0x1040/0x1040 [ 320.645872][ T5780] hci_connect_cfm+0x8f/0x130 [ 320.650601][ T5780] le_conn_complete_evt+0xfdc/0x1540 [ 320.655945][ T5780] ? hci_event_packet+0x4cb/0x1270 [ 320.661116][ T5780] ? hci_le_big_info_adv_report_evt+0x910/0x910 [ 320.667430][ T5780] ? __mutex_unlock_slowpath+0x1b4/0x6c0 [ 320.673129][ T5780] ? skb_pull_data+0xfb/0x200 [ 320.677972][ T5780] hci_le_conn_complete_evt+0x187/0x440 [ 320.683586][ T5780] ? hci_remote_host_features_evt+0x150/0x150 [ 320.689710][ T5780] hci_event_packet+0x7ba/0x1270 [ 320.694715][ T5780] ? bis_list+0x290/0x290 [ 320.699100][ T5780] ? lockdep_hardirqs_on+0x98/0x150 [ 320.704440][ T5780] ? hci_send_to_monitor+0xd7/0x4f0 [ 320.709706][ T5780] hci_rx_work+0x43a/0xd60 [ 320.714300][ T5780] ? process_scheduled_works+0x96f/0x15d0 [ 320.720072][ T5780] process_scheduled_works+0xa5d/0x15d0 [ 320.725728][ T5780] ? assign_work+0x430/0x430 [ 320.730486][ T5780] ? assign_work+0x3d0/0x430 [ 320.735245][ T5780] worker_thread+0xa55/0xfc0 [ 320.739903][ T5780] kthread+0x2fa/0x390 [ 320.744026][ T5780] ? pr_cont_work+0x560/0x560 [ 320.748764][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 320.753410][ T5780] ret_from_fork+0x48/0x80 [ 320.757885][ T5780] ? kthread_blkcg+0xd0/0xd0 [ 320.762548][ T5780] ret_from_fork_asm+0x11/0x20 [ 320.767377][ T5780] [ 320.770451][ T5780] Modules linked in: [ 320.774445][ T5780] ---[ end trace 0000000000000000 ]--- [ 320.779952][ T5780] RIP: 0010:__lock_acquire+0xf9/0x7d40 [ 320.785483][ T5780] Code: 89 bc 24 88 00 00 00 0f 85 88 67 00 00 83 3d b9 ec 22 0d 00 0f 84 16 10 00 00 83 3d 00 c9 97 0b 00 74 36 48 89 f8 48 c1 e8 03 <42> 80 3c 00 00 74 1f 48 8b bc 24 88 00 00 00 e8 23 14 77 00 48 8b [ 320.805240][ T5780] RSP: 0018:ffffc9000473f2a0 EFLAGS: 00010002 [ 320.811356][ T5780] RAX: 0000000000000026 RBX: ffff8880270dbc00 RCX: 1ffff920008e7e78 [ 320.819382][ T5780] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000130 [ 320.827395][ T5780] RBP: ffffc9000473f4e8 R08: dffffc0000000000 R09: 0000000000000000 [ 320.835391][ T5780] R10: dffffc0000000000 R11: fffffbfff1d15bf6 R12: 0000000000000000 [ 320.843384][ T5780] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 320.851564][ T5780] FS: 0000000000000000(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 320.860528][ T5780] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 320.867175][ T5780] CR2: 00007ffd35861f7c CR3: 000000005ec4f000 CR4: 00000000003506e0 [ 320.875183][ T5780] Kernel panic - not syncing: Fatal exception [ 320.881831][ T5780] Kernel Offset: disabled [ 320.886165][ T5780] Rebooting in 86400 seconds..