last executing test programs: 17m5.998847092s ago: executing program 1 (id=582): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002c80)=@delchain={0x5f4, 0x65, 0x400, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0xfff2}, {0x0, 0x1}, {0xb, 0x10}}, [@filter_kind_options=@f_bpf={{0x8}, {0x5c8, 0x2, [@TCA_BPF_ACT={0x5c4, 0x1, [@m_xt={0xd8, 0x5, 0x0, 0x0, {{0x7}, {0x4}, {0xb0, 0x6, "a5fd64840366fd7ad44f3f053221ded9ced495590e2bc8690a2765e56ded8425cb3eb0e04bbcfec50e639bf373167e617b24eccd260f28bb850873b1e2154b158987d6e585e10ffeaba32641bae47de041e1169d8e4a65b8ce3633a4469c93c5228320c572237d92a9ae6bbcad2b22629cd3a2d1e27de283017ecf9fca6b2cd8a119dee59702830717b694625f60f5c81f688775c5e292f76a0ffa39e1d2cabd639d1c111c01e0d2f9faa220"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x0, 0x2}}}}, @m_skbmod={0x174, 0x12, 0x0, 0x0, {{0xb}, {0x90, 0x2, 0x0, 0x1, [@TCA_SKBMOD_DMAC={0xa, 0x3, @broadcast}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4004, 0xe27, 0x10000000, 0x4bc5, 0x1}, 0xf}}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x5, 0x2, 0x5, 0x5, 0x400}, 0xa}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @local}, @TCA_SKBMOD_DMAC={0xa, 0x3, @remote}, @TCA_SKBMOD_SMAC={0xa, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3a}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xf7e5}]}, {0xb9, 0x6, "a1b660f5208936232cda86dbc72ce07ea965ef6ba1d1d09844721c7c4a99215f65588f37144130a0cfe892f40c7bd1b1c60c0ae07d055bb7d54c8481900754b36455377c7ddafad62bd905b87e203cd85441766254f1fb76d106fc2ab3b535bd37b963914a3937078f08fe2b215c53ac1637586d19d3179be2480bd4560f5f3df8af92646dcc1fbd383420085b4c07db2f0413025ad48ce3b346d0decc2020a76819621adf129187c02cc25e2c07331a44b29b6bee"}, {0xc}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ife={0x108, 0xe, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x6, 0x8, 0x4, 0x9, 0x7}}}]}, {0xb5, 0x6, "5fb30546b7f724bbd0a03a2ce67cc3f75455f6dad8f7910df14f457f0b939aa1f7843f8d23ac707b39fbf4f38ff98effeff9b08050eb3e0e7e3e0b71672db4998037b547ee365f59092089a7e3e54e904ebe868f339d0f6a5ad79a6287cdbb16e3238dc8077ad21fd0fe097a227ba67efad74f0a441dfcd88e59a523aa041d602fab87928dc5ebc4c007fb8856019ad4252708b18bb036e4b855a38630c6aec103073dae680d15fbf65de3031bdd2ca073"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}, @m_nat={0x1c8, 0x4, 0x0, 0x0, {{0x8}, {0x194, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xaba, 0x4c1adacc, 0x5, 0x99, 0x6}, @empty, @local, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x401, 0x5, 0x6, 0x5}, @rand_addr=0x64010102, @rand_addr=0x64010102, 0xff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x5, 0x7, 0xd}, @loopback, @empty, 0xffffff00, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4ef0, 0x1, 0x2, 0x10001, 0xc0e}, @multicast1, @rand_addr=0x64010100, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x80000000, 0x1, 0x3, 0xfd30, 0x1}, @dev={0xac, 0x14, 0x14, 0xb}, @local, 0xff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0x11d, 0x5, 0x3, 0x1}, @multicast1, @empty, 0x1000000fe}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x5, 0xffffff7f, 0x5, 0x1007b, 0x74e69dde}, @local, @rand_addr=0x64010100, 0xffffffff, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0xffff000, 0x2cf, 0xffffffffffffffff, 0x1, 0x3be6f802}, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x10, 0x8, 0x10000000, 0x1ff, 0x2}, @private=0xa010102, @broadcast, 0xffffff00}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x1, 0xffffffffffffffff, 0x6, 0xd}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}]}, {0xd, 0x6, "72c2816ab98a21c440"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x9, 0x0, 0x0, {{0xd}, {0x74, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1df, 0x5, 0x7, 0x4000001, 0x1e1c}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd784, 0x468, 0x20000000, 0x9, 0x4}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x4, 0x5, 0x8, 0x4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x2, 0x3, 0x6, 0x6a}, 0x80}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}}]}, 0x5f4}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 17m5.726939078s ago: executing program 1 (id=585): r0 = fsopen(&(0x7f0000000100)='configfs\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='dev\x00', 0x1ff) mount(0x0, &(0x7f0000000500)='dev\x00', &(0x7f0000000600)='devtmpfs\x00', 0x0, 0x0) syz_usb_connect(0x3, 0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000200000040f905ffff0001010203010902200001010080fa0904000002ff00000007058102"], 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='dev/ttyUSB0\x00', 0x2, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 17m2.503346707s ago: executing program 1 (id=599): ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c09425, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000540)="05000000018000b362c7a4f513c2cbe2c2e58c236389b2ec27c2898c15cb0a013d71f8c760", 0x25) openat$vnet(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xffffffffffffff7c, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = openat$ttynull(0xffffff9c, &(0x7f0000000080), 0x1, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000380)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee7, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) 16m58.976527383s ago: executing program 1 (id=609): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1fd) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1/file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f0000000040), 0x10000, &(0x7f0000000080)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x8000}}) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000080)='./file1/file0\x00', 0x0, 0x1085408, 0x0) umount2(&(0x7f0000000380)='./file1/file0\x00', 0x0) 16m58.182129203s ago: executing program 1 (id=611): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0400000000000000000000000000000d03000000000000000000000400000000000000000000000b030000000000000063"], 0x0, 0x52}, 0x28) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) socket$igmp(0x2, 0x3, 0x2) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x3, &(0x7f0000000040)=@framed, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000500)={r2, 0x2000000, 0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000180)=@nat={'nat\x00', 0x670, 0x5, 0x460, 0x220, 0x2f0, 0xfeffffff, 0xf8, 0x2f0, 0x3c8, 0x3c8, 0xffffffff, 0x3c8, 0x3c8, 0x5, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'veth0_to_bond\x00', 'caif0\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0x6}}]}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xf0, 0x128, 0x0, {}, [@common=@set={{0x40}}, @common=@set={{0x40}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, @gre_key=0x6, @port=0x4e24}}}}, {{@ip={@loopback, @rand_addr, 0x0, 0x0, 'lo\x00', 'ip6tnl0\x00'}, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @gre_key=0x1, @port=0x4e24}}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x90, 0xd8, 0x0, {}, [@common=@socket0={{0x20}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@private2, @ipv4=@multicast1, @port, @gre_key}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4c0) r3 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x2000007, 0x204031, 0xffffffffffffffff, 0x94c1c000) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="03000000040000000400000009"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x18, 0x7, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000218100000", @ANYRES32=r4, @ANYBLOB="000000000000000018100000", @ANYRES32=r5, @ANYBLOB="000000000000000095"], &(0x7f0000000a00)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = socket$can_bcm(0x1d, 0x2, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) sendmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000000)=@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4008000}, 0x28008841) sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={0x0}, 0xee, 0x0, 0x0, 0x44041}, 0x84841) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r6, 0xe0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000000034d, &(0x7f0000001d00), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f00000000c0)) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={0x0, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0x8044) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCBRDELBR(r9, 0x89a2, &(0x7f0000000200)='bridge0\x00') sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x1}, 0x0) r10 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r10, 0x6, 0x23, &(0x7f0000000040), &(0x7f0000000200)=0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x5, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}, [@alu={0x7, 0x0, 0x9, 0x5, 0x1, 0xfffffffffffffff4, 0xfffffffffffffffc}, @func={0x85, 0x0, 0x1, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x74}, 0x94) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000500)=ANY=[@ANYBLOB="9feb0c00180000000000"], &(0x7f0000000000)=""/28, 0x56, 0x1c, 0x1}, 0x28) 16m57.235840506s ago: executing program 1 (id=614): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000000080004004400000008001b00000000006d103dc056dc240e3ca6fc404808c2968ce57b770ddf170000b509150922f9ef09cbb58ff01fe42049b9aeb942a253be9c0fbac27933898c8c5807b4e8fd179a5c7a2b6d082a21637ba7b3d44bd23ca0d04b446084cb1d5e5e5e1b9e620302ea66319215e481cc6f4d09ad5833d301458e4ab268ae9a4bd361538c373d239307000000a09325987f758e8c54"], 0x30}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) socket(0x840000000002, 0x3, 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x0, "96d3e9659db3f50cb3c4e683f4fae026a3b284dd56630882be4bc0f34042227a71f06b95d73e34c8ecf3325e43f75f16f13d8905d3bdce627dc6ae0b14840f4c8bebc40872293c61ddd293631a22c6d5c8c9b16b987f4326874ddc5e2610c5505cea115e51bf6feb3e93cf89b8f44394fa2ac7f6cf757a9416c7545c5e5caa34450f0397d179f2225b57f644ce8ad31b15547b9364daef8e784f2036a75c3c5cfd124cdd424a558ea90d054d36c0d1d0db92e5e7f668dadcbfaed92c7cf3204be0c4904d308feba3447d7f41a58bc2fd4682e306a592696e4de9427d87c008d3e172cf162cc35f00915fe9fc9ea84e28838940e4bb2fda4c55a34abdf6db63d547c91a17211a1ce43a2933f8227e8b6767ab70bc9223e62a2d3ad9b13f74e2000961e62eaea005088d6d74a19eb0c56ce314323143fcfe27e410e10bd21a2140783385bdb1a7d33038427e336829ccfb63c04e537ca51ddae5fdf29505fca04fc4b2a13d6dad7db2eace60e9589712719a49a2d2d44587465037851b1fe93a0ed46822294671098fd53e79fe428bf6ae3846299ab1d238ad07be6cc01b5fcaacfce829c209e67d5548a38b637f3b44905b8be24dfba30e1b6d074b43e53fcded14a4190a585949baa43fef6c70ce7b1612299d734c07feed23252886a1317358cf5ecaf0186d2dbdb3eab8a9c3c21d4828ef8a9dd89207f2884a57679fcd495a"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x11) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) 16m56.930713684s ago: executing program 32 (id=614): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001000010800"/20, @ANYBLOB="0000000000000000080004004400000008001b00000000006d103dc056dc240e3ca6fc404808c2968ce57b770ddf170000b509150922f9ef09cbb58ff01fe42049b9aeb942a253be9c0fbac27933898c8c5807b4e8fd179a5c7a2b6d082a21637ba7b3d44bd23ca0d04b446084cb1d5e5e5e1b9e620302ea66319215e481cc6f4d09ad5833d301458e4ab268ae9a4bd361538c373d239307000000a09325987f758e8c54"], 0x30}}, 0x0) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, 0x0) r3 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TIOCSTI(r3, 0x5412, 0x0) ioctl$UFFDIO_UNREGISTER(0xffffffffffffffff, 0x8010aa01, 0x0) socket(0x840000000002, 0x3, 0x9) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDGKBSENT(r5, 0x5602, &(0x7f0000000000)={0x0, "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"}) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000002c0)=0x11) r6 = socket$pppl2tp(0x18, 0x1, 0x1) r7 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r7, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x48, 0x0, 0x1, 0x270bd2c, 0x5, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'veth0_vlan\x00'}]}, 0x48}}, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000100)=0x2) 20.056012908s ago: executing program 0 (id=5187): r0 = syz_usb_connect(0x0, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000004c0)={0x1c, &(0x7f0000000540)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f0000000380)={0x44, &(0x7f0000000600)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000001080)={0x2c, &(0x7f0000000a40)={0x0, 0x14}, 0x0, 0x0, 0x0, 0x0}) 16.671416821s ago: executing program 0 (id=5194): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 12.253140869s ago: executing program 2 (id=5198): r0 = open(&(0x7f00000000c0)='./file0\x00', 0x108843, 0x98) fcntl$setlease(r0, 0x400, 0x0) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) r1 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000000c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000001c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33]}, &(0x7f0000000840)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x1b}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000240)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000380)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x63]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x39, 0x62, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3c}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000480)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x6e, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x65]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000004c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000500)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x64, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30]}, &(0x7f00000006c0)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000540)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x31]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aa00000000ff00112233445566778899aabbccddeeff", 0x40}, 0x48, r1) r2 = add_key$fscrypt_v1(&(0x7f0000000000), &(0x7f0000000140)={'fscrypt:', @desc3}, &(0x7f0000000080)={0x0, "5e44e4b3b5d2c132ce1595c85ab82fbe15703a2653b2b7d783bc965fac88b3a91f3f10317d1c67420063311f04765f02b4e1ccf07323402fc495c817dc2b8aca", 0x38}, 0x48, 0xfffffffffffffffb) keyctl$setperm(0x5, r2, 0x200a00) 12.165419922s ago: executing program 2 (id=5199): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) 12.083006404s ago: executing program 2 (id=5200): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f0000000380)='63', 0x2, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0x8, @loopback, 0xa8e}, 0x1c) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d01011000000009040000"], 0x0) shutdown(r0, 0x1) 11.649345214s ago: executing program 0 (id=5202): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x11}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) write$binfmt_aout(r0, &(0x7f00000003c0)=ANY=[], 0x20) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r1, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) recvmmsg(r1, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0xc, @mcast1}, 0x1c) 11.555041427s ago: executing program 3 (id=5203): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x800) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000140)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000000080)=""/102356, 0x18fd4, 0x200) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000480), 0xffffffffffffffff) write$nci(r3, &(0x7f00000004c0)=ANY=[], 0x102) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) mremap(&(0x7f000020e000/0x2000)=nil, 0x2000, 0x400000, 0x3, &(0x7f000082a000/0x400000)=nil) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast2, @in6=@mcast1, 0x4e20, 0x4, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x3, 0xfffffffffffffffe}, {0x0, 0x0, 0xfffffffffffffffc, 0xff}, 0x0, 0x0, 0x1}, {{@in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x2, 0x0, 0xb7, 0xfffffffe, 0xffffff7e}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) 9.812215839s ago: executing program 0 (id=5205): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) 9.810858129s ago: executing program 4 (id=5206): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x3a98}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 9.302427162s ago: executing program 3 (id=5207): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x82c03, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x40004}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=@newtfilter={0x88, 0x2c, 0xd3f, 0x10bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xc, 0xfff3}, {}, {0x8, 0x3}}, [@filter_kind_options=@f_basic={{0xa}, {0x58, 0x2, [@TCA_BASIC_ACT={0x54, 0x3, [@m_connmark={0x50, 0x1, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xffffc700, 0x3, 0x20000000, 0xf16, 0x3}, 0x3f82}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x88}, 0x1, 0x0, 0x0, 0x10}, 0x8080) setsockopt$sock_attach_bpf(r5, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000540)=@xdp={0x2c, 0x0, r4, 0x42}, 0x80, &(0x7f0000000440)=[{&(0x7f00000001c0)="27030200dc0f14000e0003000024c1020000ff1107c2fb7fe0400018534b4f6b3d327db412f40000000000000000", 0x2e}], 0x1}, 0x4005) 9.294955562s ago: executing program 4 (id=5208): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff020004") 8.681160447s ago: executing program 2 (id=5209): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0100000002000000a00300000500000000000000", @ANYRES32, @ANYBLOB="0000000000000000405d86327c0001"], 0x48) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002000), 0x2, 0x0) syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000002080)='./file0\x00', 0x0, &(0x7f0000004500)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0], 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006180)="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", 0x2000, &(0x7f0000001ec0)={&(0x7f00000021c0)={0x50, 0x0, 0x8, {0x7, 0x29, 0x9f50, 0x1, 0x1000, 0x48e, 0x1, 0x7ffb, 0x0, 0x0, 0x9f7b0001e068234a, 0xfffffffa}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000080)={0xc, 0x0, 0x0}) ioctl$IOMMU_VFIO_IOAS$SET(r1, 0x3b88, &(0x7f00000000c0)={0xc, r2}) ioctl$IOMMU_VFIO_IOAS$GET(r1, 0x3b88, &(0x7f0000000100)={0xc}) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000004b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r0, &(0x7f0000002300)="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", 0x2000, &(0x7f0000004440)={&(0x7f0000004300)={0x50, 0xffffffffffffffda, 0x8, {0x7, 0x29, 0x4, 0xb069a97334577756, 0x2, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x80, 0x7}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0}, 0xfc00) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB='V?\x00\x00-\x00'], 0xfe33) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000280)={{{@in=@local, @in=@rand_addr=0x64010101, 0xfffb, 0xfffe, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x2, 0xfffffffffffffffd, 0xffffffffffff235b, 0x0, 0x9, 0x1000000}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x4d5, 0x6c}, 0x2, @in=@loopback, 0x0, 0x2, 0x0, 0x0, 0xffdffffc, 0x1000000}}, 0xe8) unshare(0x20000600) r4 = syz_open_dev$I2C(&(0x7f0000000d80), 0x0, 0x0) ioctl$I2C_SMBUS(r4, 0x720, &(0x7f0000000000)={0x0, 0x4, 0x7, &(0x7f0000000700)={0x3b, "fd5a44512b7e1b0020ed2abb4301002700"}}) r5 = mq_open(&(0x7f00000019c0)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xd3\xa7\xd8J\xfd\x94#KT\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\x88N\xb8\xde\xeb)\xcd\xc56m\n\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88|0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc\x02\xea\x91\xe8\xd8\x01YZy\xe6!\x89\x9c\xd1\xa6\x167\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1[\x84\x10aF\x9b\xda\xeb\xc4*\x02q\xb2\x92\x00\x8cv\xac AN\xb9\xaa\xe0\x9d\x97Te\x81\x98L\xfe\x97+u\xd3^\xb1\xf0\xe0\x1f\xbd\a\xbb\xe5\x18\x9ds\x12ha\x00\xeb\x84\x99\xc6\x0f\xf1\xd5LD\xa87\xa0DQ\x8a2\x16!8,\xbc%$\xf1\xf2\xd6\x9cy\xecK\xda\xc5\xdc\xfa\xdd\xf6\b\xc6\xb4\x14\x16\x9c\x7f\x92\x85\xb0\xa2%:\xf0\xf4\x150\x0f\xb4\xa6d\xb4\xe4L\x19W\xd5\x90\xf7l\x1b\xfe\xde\vh\x97=m\x82.\xac\vh\xfe\x84Q}\x838/\x83\xebP\xbe\xd6+:\xceE\\\x95\xd4\xac\x92\x87\xd7\x98\x97\xe3\xec\xad\xd5\xac\x80C\x84R\x88r^g\xbaQ(\x9a>\xe2\xba\xa8=\x17\f04\x8f\x1f\xf2\x88*@v\xe7\xd1\xee\xb3\xc2\x8dT\xda\x81g\xd9\x1a:hzW6s)x\x06\xae\x11\xf2\x1e\xcd\v\xe5L\x19\x96s\xbc\x9e\xf4\x10$\r\xa4\xd8\xa2\xa2\xfcM\xc5R3~$\xc0\xa5n\x9a W\xb1e\xcc<$\xdf\x15\f]\x15\xf5#G\xce\xaf\x88U\xfa\x80\xf24\xf6\xb5\xef\xe2z\xcf\x9eN\x92\xac\x81{\xe6\xbd\xd7\x16\xe6F\xe2\x9e\x91%\x94\v\xb9\xdc\xd6\x87\x8f\xcd\xc1\xb05\x81\x81\xf8\xe9X\xe8Kt9@\xf4\xe1\xa6=\xc9\xe1:p4\nP[f\x1d\xfd\xfa\x839\x8d\x0e\xd1\xf9\xa0\xd2^E\xe5\xedo.\xaa\xf2\xb4\xcdn\x14\f\xcd\x83_yk\xda\xc5\x89\xf0Z\xea\x1d\xbd\xc00\v\xa3\xb3\xbe\xe6\x8b\x18/\xa8\xaaY\xf2\x89\x0f\x9enOOr\x00\xb2\x01\x1f:Z\xb8\xee;\xe3;\x8aPV\xce\xee\xf8[\x16\n\xe6:z\xb8\x1dvk\a{\xc1\x14\xd9+\xdb\t\x11\x90y\xe8\\\xe6\xfc\xca\xb4\xcbC\xd6\xd0\xbeC\xce\xc0L\xdb\xcd\xb3\x907c\xb4\xa6\xce\xdb[\xce\x122N\xa3\xc7Q<\x1a\xa5\xb3)\xc5\x98\x84\x8a\x82\x19\xb0\t\xac\x10\\\x8c\xbe\xcb\raIYe[\xa8\xc4\xac\x0e\xbb\x0f\b^\xdag\xe2\xa9\"\xf5h\'\xcf\xd9\x1b\xef\xe3\xe7y\x82\x1e\xca\x7f\x02 \xcf\x9e\xe0\xd9TM\xb9\n\xa9\xad3\x91\xa5\xe6!\xcd\xa2\xa4\x14\x12\xf9\xbf\xa8b\xcec:\xd7\'\f\f\x957\xc9}\r\xa6\xaa\x0f\xca\x96\xeb', 0x42, 0x0, 0x0) mq_getsetattr(r5, 0x0, &(0x7f0000000180)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="3000000010000108000000000000200000000000", @ANYRES32=0x0, @ANYBLOB="a4f506000000000008000000", @ANYRES32=0x0, @ANYBLOB="08001b0000000000"], 0x30}}, 0x4000880) r7 = syz_open_dev$vim2m(&(0x7f0000000100), 0xd3b, 0x2) ioctl$vim2m_VIDIOC_S_FMT(r7, 0xc0d05605, &(0x7f0000004b40)={0x4, @raw_data="01075aa03070fd691c9c153c72f9b9ff3a2c096afa998f1b17310db04015c7b055b84b75a0daccf2020ea84733cc4f8735edb89af18c29f3fee599df1ccd350289365a213020ed716455e4386f9542130bc82535df4e71cb941acca3ff25ccbd5a30ffc1c4747add16738afdafff7f65ebc708621a1bf1284cb36651a748a8a3416c15700800000058b0bc065264cbd10e346c406b6ad71f1054d49d452d54518a282c134c3f96579f020000008c3680516675b09907af7a37e93a86cdc0443ab700"}) r8 = openat$vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x458483, 0x0) r9 = openat$6lowpan_control(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) write$6lowpan_control(r9, &(0x7f0000000280)='disconnect aa:aa:aa:aa:aa:10 1', 0x1e) unshare(0x2a000000) unshare(0x20000600) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000100)={r3, r8}) syz_io_uring_setup(0x1723, &(0x7f00000002c0)={0x0, 0x6b5, 0x8000, 0x0, 0xba}, 0x0, 0x0, &(0x7f0000000000)) 8.355754965s ago: executing program 0 (id=5210): r0 = socket$packet(0x11, 0x3, 0x300) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x180, 0x0) close(r2) socket$inet_smc(0x2b, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x7ffff, {0x0, 0x0, 0x0, r4, {0x0, 0xffe0}, {0xb, 0xb}, {0x0, 0x1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8, 0x5, 0x2}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x404c800}, 0x400c000) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=@newqdisc={0xa0, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x70, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x1, [], 0x0, [0x1]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x8, 0x2, 0x0, 0x1, [{0x4}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc}]}}]}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031620d3fc140000004788031c", 0xe, 0x4, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @multicast}, 0x14) 8.15890462s ago: executing program 4 (id=5211): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYRES32=r3, @ANYBLOB="01000000200000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c0000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a4280400000000001400350076657468305f746f5f626f6e6400000008000a00", @ANYRES32=r3], 0x3c}, 0x1, 0x0, 0x0, 0x4008800}, 0x8000) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f00000000c0)=@setlink={0x2c, 0x13, 0x5, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r3, 0x312, 0x800}, [@IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x42) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00030000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6], 0x4c}}, 0x884) 4.334912403s ago: executing program 3 (id=5212): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) ftruncate(r1, 0x1000000) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") 4.197357977s ago: executing program 3 (id=5213): r0 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r0, r1, r2, r3, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = dup(r5) syz_ublk_setup_queues(r6, r4, &(0x7f0000000180)={0x0, 0x3e6, 0x1000, 0x1, 0x32c}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x7ffffe, 0x200, 0x6, 0x166, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffbfed7c, 0x800, 0x2, 0x146, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x8818, 0x0, 0xffffffff, 0x272, 0x0, r0}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x4000, 0xff, 0xbd}}], 0x1, &(0x7f0000000340)={0x2e, 0xb, 0x0, r6, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0xfff9, 0xfffc, 0x0, 0x0}}, 0x0) ioctl$UI_ABS_SETUP(0xffffffffffffffff, 0x401c5504, &(0x7f0000000340)={0x1033, {0x0, 0x0, 0x4, 0x0, 0x5}}) 3.938124504s ago: executing program 3 (id=5214): r0 = openat$panthor(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000940), 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r1, 0xc0145401, &(0x7f0000000980)={0x2, 0x0, 0x400, 0x2, 0x2}) ioctl$DRM_IOCTL_SYNCOBJ_DESTROY(r0, 0xc00864c0, &(0x7f0000000080)) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x40182) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000020c0)={0x44, r6, 0x1, 0x300, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8}]}]}, 0x44}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x10004) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xac5) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000180)={0x20, 0xff, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x93}, 0xe) sendto$inet6(r4, &(0x7f0000000300)="8b", 0x34000, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private1}, 0x1c) r8 = syz_open_dev$usbmon(0x0, 0x80000001, 0x82002) io_setup(0x8, &(0x7f0000004200)=0x0) io_submit(r9, 0x2000000000000108, &(0x7f0000004540)=[&(0x7f0000004280)={0x0, 0x0, 0x0, 0x5, 0xfffc, r8, 0x0}]) syz_open_dev$usbfs(&(0x7f0000000100), 0x77, 0x101301) fcntl$setstatus(r4, 0x4, 0x2000) shutdown(r4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000050000000000", @ANYRESDEC=r2, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a60000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x94) 1.531995403s ago: executing program 2 (id=5215): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) ptrace$peekuser(0x3, r0, 0x1) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r4, 0x0, 0x0) listen(r4, 0x9) r5 = socket$inet_sctp(0x2, 0x5, 0x84) sendto$inet(r5, &(0x7f00000000c0)="ab", 0xfffd, 0xc1, &(0x7f0000000280)={0x2, 0x4e22, @loopback}, 0x10) readv(r3, &(0x7f0000000b40)=[{&(0x7f0000000cc0)=""/154, 0xfdef}, {0x0}, {0x0}], 0x3) sendmsg$TCPDIAG_GETSOCK(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000080)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) 1.455009584s ago: executing program 4 (id=5216): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={0x64, 0x9, 0x6, 0x3, 0x0, 0x0, {0x2}, [@IPSET_ATTR_DATA={0x3c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x1388}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x3a98}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x6}, @IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x64}, 0x1, 0x0, 0x0, 0x810}, 0x20004000) 1.378567046s ago: executing program 3 (id=5217): syz_clone3(&(0x7f00000005c0)={0x3c947200, 0x0, 0x0, &(0x7f00000003c0), {}, 0x0, 0x0, 0x0, 0x0}, 0x58) r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{0xffffffffffffffff, 0xffffffffffffffff}, 0x0, &(0x7f0000000580)='%pB \x00'}, 0x1c) sendfile(r0, r1, &(0x7f0000000680), 0x5) userfaultfd(0x80801) r2 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_writev(r2, &(0x7f0000001c80)=[{0x0}], 0x1, &(0x7f0000001d80)=[{&(0x7f0000001cc0)=""/116, 0x74}], 0x1, 0x0) mkdir(&(0x7f0000000000)='./my_configfs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./my_configfs\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010002070000000000000900020073797a250000000008004100727865001400"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x0) mkdir(&(0x7f0000000700)='./my_configfs/target/core/rd_mcp_0\x00', 0x1ff) mkdir(&(0x7f0000000800)='./my_configfs/target/core/rd_mcp_0/dev0\x00', 0x1ff) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000300)=0x1f06) mount$overlay(0x0, &(0x7f0000000380)='./my_configfs/target/core/rd_mcp_0/dev0\x00', &(0x7f0000000400), 0x1c000, &(0x7f0000000440)={[{@verity_on}], [{@dont_measure}, {@dont_measure}, {@smackfsfloor={'smackfsfloor', 0x3d, 'configfs\x00'}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}, {@appraise}, {@obj_role={'obj_role', 0x3d, '^'}}]}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='./my_configfs/target/core/rd_mcp_0/dev0/enable\x00', 0x0, 0x10) rmdir(&(0x7f0000000280)='./my_configfs/target/core/rd_mcp_0/dev0\x00') getsockopt$MRT6(r4, 0x29, 0xcf, &(0x7f00000006c0), &(0x7f0000000740)=0x4) 1.191140601s ago: executing program 4 (id=5218): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r1, &(0x7f0000000200)=""/209, 0xd1) 1.145267302s ago: executing program 0 (id=5219): mkdir(&(0x7f0000000000)='./sys\x00', 0x1ff) mkdir(&(0x7f0000000100)='./dev\x00', 0x1ff) mount(&(0x7f0000000200)=@filename='none\x00', &(0x7f0000000300)='./sys\x00', &(0x7f0000000400)='sysfs\x00', 0x0, 0x0) mount(&(0x7f0000000500)=@filename='none\x00', &(0x7f0000000600)='./dev\x00', &(0x7f0000000700)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000800)='file0\x00', 0x42, 0x1ff) ftruncate(r0, 0x1000000) r1 = openat(0xffffffffffffff9c, &(0x7f0000000900)='file1\x00', 0x42, 0x1ff) r2 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='file2\x00', 0x42, 0x1ff) ftruncate(r2, 0x1000000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000b00)='file3\x00', 0x42, 0x1ff) ftruncate(r3, 0x1000000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000c00)='./dev/loop0\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r4, 0x4c00, r0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000d00)='./dev/loop1\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r5, 0x4c00, r1) r6 = openat(0xffffffffffffff9c, &(0x7f0000000e00)='./dev/loop2\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r6, 0x4c00, r2) r7 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/loop3\x00', 0x2, 0x0) ioctl$LOOP_SET_FD(r7, 0x4c00, r3) r8 = openat(0xffffffffffffff9c, &(0x7f0000001000)='./sys/module/md_mod/parameters/new_array\x00', 0x1, 0x0) write(r8, &(0x7f0000001100)='md0\x00', 0x4) r9 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./dev/md0\x00', 0x2, 0x0) ioctl(r9, 0x40480923, &(0x7f0000001300)="000000005a00000003000000000000000500000000040000040000000300000000000000") ioctl(r9, 0x40140921, &(0x7f0000001400)="0000000007000000000000000000000006000000") ioctl(r9, 0x40140921, &(0x7f0000001500)="0100000007000000010000000100000006000000") ioctl(r9, 0x40140921, &(0x7f0000001600)="0200000007000000020000000200000006000000") ioctl(r9, 0x400c0930, 0x0) ioctl(r9, 0x40140921, &(0x7f0000001700)="030000000700000003000000ffffffff020004") 87.732338ms ago: executing program 2 (id=5220): prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) r1 = userfaultfd(0x1) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x79}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) madvise(&(0x7f00000ee000/0x2000)=nil, 0x2000, 0x8) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x8031, 0xffffffffffffffff, 0xfffff000) read(r1, &(0x7f00000002c0)=""/153, 0x99) 0s ago: executing program 4 (id=5221): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') pread64(r0, &(0x7f0000000180)=""/43, 0xfd8a, 0x3c) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000002240)='./file0\x00', 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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", @ANYRES16], 0x1, 0x2cd, &(0x7f0000000ec0)="$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") mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e00)='./cgroup.cpu/syz0\x00', 0x1ff) kernel console output (not intermixed with test programs): e macvlan2 [ 1038.671677][T20293] bond2: left promiscuous mode [ 1038.982867][T20311] syzkaller0: entered promiscuous mode [ 1038.988439][T20311] syzkaller0: entered allmulticast mode [ 1039.212347][T20320] fuse: Unknown parameter 'user_i00000000000000000000' [ 1039.233108][T20320] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4298'. [ 1039.261045][T20320] i2c i2c-0: Invalid block write size 59 [ 1039.978374][T20346] fuse: Unknown parameter 'user_id00000000000000000000' [ 1040.035132][T20346] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4309'. [ 1040.057313][T20346] i2c i2c-0: Invalid block write size 59 [ 1040.083734][T20350] loop2: detected capacity change from 0 to 128 [ 1040.316688][T20356] can0: slcan on ttyS3. [ 1040.441846][T20356] can0 (unregistered): slcan off ttyS3. [ 1040.464027][T20356] Set syz1 is full, maxelem 65536 reached [ 1040.843588][T20379] fuse: Unknown parameter 'user_id00000000000000000000' [ 1040.854390][T20379] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4320'. [ 1040.866241][T20379] i2c i2c-0: Invalid block write size 59 [ 1040.873925][T20379] veth0_to_bond: entered promiscuous mode [ 1040.897932][T20379] bond1: entered promiscuous mode [ 1040.922103][T20379] veth2: entered promiscuous mode [ 1040.963841][T20379] veth3: entered promiscuous mode [ 1040.969093][T20379] veth3: left allmulticast mode [ 1040.991772][T20379] bond2: entered promiscuous mode [ 1041.292707][T20389] tipc: Enabled bearer , priority 0 [ 1041.311240][T20389] syzkaller0: entered promiscuous mode [ 1041.316805][T20389] syzkaller0: entered allmulticast mode [ 1041.650957][T16394] usb 3-1: new high-speed USB device number 101 using dummy_hcd [ 1041.760766][ T5788] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.785627][ T5788] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.800939][ T5788] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.811515][ T5788] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.831847][ T5788] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1041.841388][T16394] usb 3-1: Using ep0 maxpacket: 8 [ 1041.841420][ T5788] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1041.887161][T16394] usb 3-1: config 0 has no interfaces? [ 1041.932717][T16394] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1041.964119][T16394] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1041.990691][T16394] usb 3-1: Product: syz [ 1042.005763][T16394] usb 3-1: Manufacturer: syz [ 1042.020877][T16394] usb 3-1: SerialNumber: syz [ 1042.043098][T16394] usb 3-1: config 0 descriptor?? [ 1042.290725][T16395] usb 3-1: USB disconnect, device number 101 [ 1042.319155][T20408] fuse: Unknown parameter 'user_id00000000000000000000' [ 1042.334655][T20408] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4330'. [ 1042.344520][T20388] tipc: Resetting bearer [ 1042.346225][T20408] i2c i2c-0: Invalid block write size 59 [ 1042.440833][T20388] tipc: Disabling bearer [ 1042.553393][T20413] syzkaller0: entered promiscuous mode [ 1042.566888][T20413] syzkaller0: entered allmulticast mode [ 1042.606839][T20413] 0: reclassify loop, rule prio 0, protocol 800 [ 1042.706757][T20394] chnl_net:caif_netlink_parms(): no params data found [ 1043.000115][T20394] bridge0: port 1(bridge_slave_0) entered blocking state [ 1043.007748][T20394] bridge0: port 1(bridge_slave_0) entered disabled state [ 1043.015772][T20394] bridge_slave_0: entered allmulticast mode [ 1043.023890][T20394] bridge_slave_0: entered promiscuous mode [ 1043.033161][T20394] bridge0: port 2(bridge_slave_1) entered blocking state [ 1043.040683][T20394] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.048357][T20394] bridge_slave_1: entered allmulticast mode [ 1043.056868][T20394] bridge_slave_1: entered promiscuous mode [ 1043.093914][T20394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1043.124509][T20394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1043.182952][T20394] team0: Port device team_slave_0 added [ 1043.202169][T20394] team0: Port device team_slave_1 added [ 1043.311244][T20394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1043.329788][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.356367][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.399615][T20394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1043.433561][T20394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1043.480815][T20394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1043.507301][ C0] vkms_vblank_simulate: vblank timer overrun [ 1043.563884][T20394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1043.592044][T20434] fuse: Bad value for 'fd' [ 1043.617727][T20434] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4340'. [ 1043.643573][T20434] i2c i2c-0: Invalid block write size 59 [ 1043.826455][T20394] hsr_slave_0: entered promiscuous mode [ 1043.848411][T20394] hsr_slave_1: entered promiscuous mode [ 1043.948025][ T5085] Bluetooth: hci1: command tx timeout [ 1043.982490][T20440] tipc: Enabled bearer , priority 0 [ 1044.040542][T20440] syzkaller0: entered promiscuous mode [ 1044.066592][T20440] syzkaller0: entered allmulticast mode [ 1044.170150][T20449] loop0: detected capacity change from 0 to 32768 [ 1044.192419][T20449] loop1: detected capacity change from 0 to 32768 [ 1044.213171][T20449] loop2: detected capacity change from 0 to 32768 [ 1044.229484][T20449] loop3: detected capacity change from 0 to 32768 [ 1044.431588][T16393] usb 3-1: new high-speed USB device number 102 using dummy_hcd [ 1044.485706][T20453] block device autoloading is deprecated and will be removed. [ 1044.713746][T16393] usb 3-1: Using ep0 maxpacket: 8 [ 1044.727582][T16393] usb 3-1: config 0 has no interfaces? [ 1044.756749][T16393] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1044.809879][T16393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1044.822341][T16393] usb 3-1: Product: syz [ 1044.849988][T20460] fuse: Bad value for 'fd' [ 1044.854526][T16393] usb 3-1: Manufacturer: syz [ 1044.864695][T16393] usb 3-1: SerialNumber: syz [ 1044.874154][T20460] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4351'. [ 1044.918027][T16393] usb 3-1: config 0 descriptor?? [ 1044.945127][T20460] i2c i2c-0: Invalid block write size 59 [ 1045.189008][T12627] usb 3-1: USB disconnect, device number 102 [ 1045.207722][T20464] syzkaller0: entered promiscuous mode [ 1045.225844][T20464] syzkaller0: entered allmulticast mode [ 1045.244820][T20439] tipc: Resetting bearer [ 1045.306852][T20439] tipc: Disabling bearer [ 1045.509574][T20394] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1045.546072][T20394] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1045.570009][T20394] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1045.587014][T20394] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1045.855728][T20394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1045.899391][T20394] 8021q: adding VLAN 0 to HW filter on device team0 [ 1045.923495][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1045.930926][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1045.940711][T20480] fuse: Bad value for 'fd' [ 1045.973888][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1045.981340][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1046.012137][T20480] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4360'. [ 1046.020800][ T5085] Bluetooth: hci1: command tx timeout [ 1046.043544][T20480] i2c i2c-0: Invalid block write size 59 [ 1046.134776][T20484] syzkaller0: entered promiscuous mode [ 1046.140936][T20484] syzkaller0: entered allmulticast mode [ 1046.688905][T20503] syzkaller0: entered promiscuous mode [ 1046.703098][T20503] syzkaller0: entered allmulticast mode [ 1046.719901][T20394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1046.788350][T20505] tipc: Enabled bearer , priority 0 [ 1046.800128][T20505] syzkaller0: entered promiscuous mode [ 1046.807267][T20505] syzkaller0: entered allmulticast mode [ 1046.915051][T20394] veth0_vlan: entered promiscuous mode [ 1046.930147][T20394] veth1_vlan: entered promiscuous mode [ 1046.997461][T20394] veth0_macvtap: entered promiscuous mode [ 1047.017573][T20394] veth1_macvtap: entered promiscuous mode [ 1047.042247][T20394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1047.062226][T20394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1047.082882][T20394] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.091334][T20509] fuse: Unknown parameter '0x0000000000000004' [ 1047.102736][T20509] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4371'. [ 1047.115502][T20509] i2c i2c-0: Invalid block write size 59 [ 1047.117568][T20394] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.136719][T16393] usb 3-1: new high-speed USB device number 103 using dummy_hcd [ 1047.144764][T20394] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.154412][T20394] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1047.341631][T16393] usb 3-1: Using ep0 maxpacket: 8 [ 1047.370341][T16393] usb 3-1: config 0 has no interfaces? [ 1047.389103][T16393] usb 3-1: New USB device found, idVendor=110a, idProduct=1450, bcdDevice=62.cb [ 1047.404162][T16393] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1047.413241][T16393] usb 3-1: Product: syz [ 1047.417586][T16393] usb 3-1: Manufacturer: syz [ 1047.423346][T16393] usb 3-1: SerialNumber: syz [ 1047.431020][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.455195][T16393] usb 3-1: config 0 descriptor?? [ 1047.462204][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.558315][ T73] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1047.571793][ T73] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1047.705811][T16393] usb 3-1: USB disconnect, device number 103 [ 1047.732951][T20504] tipc: Resetting bearer [ 1047.875306][T20504] tipc: Disabling bearer [ 1047.918948][T20522] syzkaller0: entered promiscuous mode [ 1047.939275][T20522] syzkaller0: entered allmulticast mode [ 1048.101302][ T5085] Bluetooth: hci1: command tx timeout [ 1048.479509][T20532] fuse: Unknown parameter '0x0000000000000004' [ 1048.498269][T20532] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4380'. [ 1048.539236][T20532] i2c i2c-0: Invalid block write size 59 [ 1048.802667][T20535] syzkaller0: entered promiscuous mode [ 1048.818523][T20535] syzkaller0: entered allmulticast mode [ 1049.691261][T20557] fuse: Unknown parameter '0x0000000000000004' [ 1049.694885][T20558] netlink: 136 bytes leftover after parsing attributes in process `syz.3.4392'. [ 1049.732996][T20557] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4391'. [ 1049.772874][T20557] i2c i2c-0: Invalid block write size 59 [ 1050.053720][T20572] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4395'. [ 1050.180983][ T5085] Bluetooth: hci1: command tx timeout [ 1050.418336][T20586] netlink: 136 bytes leftover after parsing attributes in process `syz.2.4403'. [ 1050.444116][T20588] fuse: Unknown parameter '0x0000000000000004' [ 1050.455080][T20588] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4404'. [ 1050.481466][T20588] i2c i2c-0: Invalid block write size 59 [ 1050.914824][T20602] syzkaller0: entered promiscuous mode [ 1050.930945][T20602] syzkaller0: entered allmulticast mode [ 1051.114656][T20610] netlink: 136 bytes leftover after parsing attributes in process `syz.0.4414'. [ 1051.143630][T20604] syzkaller0: entered promiscuous mode [ 1051.168215][T20604] syzkaller0: entered allmulticast mode [ 1051.294418][T20614] fuse: Unknown parameter '0x0000000000000004' [ 1051.328572][T20614] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4416'. [ 1051.347993][T20614] i2c i2c-0: Invalid block write size 59 [ 1051.358346][T20614] lo: entered promiscuous mode [ 1051.475819][T20614] tunl0: entered promiscuous mode [ 1051.543281][T20614] gre0: entered promiscuous mode [ 1051.641486][T20614] gretap0: entered promiscuous mode [ 1051.655950][T20627] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4421'. [ 1051.700077][T20614] erspan0: entered promiscuous mode [ 1051.753170][T20614] ip_vti0: entered promiscuous mode [ 1051.790376][T20614] ip6_vti0: entered promiscuous mode [ 1051.830063][T20614] sit0: entered promiscuous mode [ 1051.910868][T20614] ip6tnl0: entered promiscuous mode [ 1051.942351][T20614] ip6gre0: entered promiscuous mode [ 1051.997289][T20614] syz_tun: entered promiscuous mode [ 1052.049193][T20614] ip6gretap0: entered promiscuous mode [ 1052.104707][T20614] bridge0: port 2(bridge_slave_1) entered disabled state [ 1052.112887][T20614] bridge0: port 1(bridge_slave_0) entered disabled state [ 1052.139916][T20614] bridge0: entered promiscuous mode [ 1052.218558][T20614] vcan0: entered promiscuous mode [ 1052.249295][T20614] bond0: entered promiscuous mode [ 1052.260904][T20614] bond_slave_0: entered promiscuous mode [ 1052.267280][T20638] netlink: 116 bytes leftover after parsing attributes in process `syz.3.4424'. [ 1052.290884][T20614] bond_slave_1: entered promiscuous mode [ 1052.352957][T20614] team0: entered promiscuous mode [ 1052.358084][T20614] team_slave_0: entered promiscuous mode [ 1052.375279][T20614] team_slave_1: entered promiscuous mode [ 1052.435591][T20614] dummy0: entered promiscuous mode [ 1052.526609][T20614] nlmon0: entered promiscuous mode [ 1052.562367][T20614] caif0: entered promiscuous mode [ 1052.604307][T20614] batadv0: entered promiscuous mode [ 1052.693085][T20614] vxcan0: entered promiscuous mode [ 1052.739661][T20614] vxcan1: entered promiscuous mode [ 1052.803453][T20614] veth0: entered promiscuous mode [ 1052.869643][T20614] veth1: entered promiscuous mode [ 1052.919449][T20614] wg0: entered promiscuous mode [ 1052.992529][T20614] wg1: entered promiscuous mode [ 1053.027133][T20614] wg2: entered promiscuous mode [ 1053.042385][T20614] veth0_to_bridge: entered promiscuous mode [ 1053.082952][T20614] veth1_to_bridge: entered promiscuous mode [ 1053.122961][T20614] veth0_to_bond: entered promiscuous mode [ 1053.166796][T20614] veth1_to_bond: entered promiscuous mode [ 1053.220179][T20614] veth0_to_team: entered promiscuous mode [ 1053.330906][T20614] veth1_to_team: entered promiscuous mode [ 1053.498087][T20614] veth0_to_batadv: entered promiscuous mode [ 1053.534059][T20614] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1053.593502][T20614] batadv_slave_0: entered promiscuous mode [ 1053.651895][T20614] veth1_to_batadv: entered promiscuous mode [ 1053.678516][T20614] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1053.705177][T20614] batadv_slave_1: entered promiscuous mode [ 1053.740117][T20614] xfrm0: entered promiscuous mode [ 1053.756438][T20614] veth0_to_hsr: entered promiscuous mode [ 1053.816102][T20614] veth1_to_hsr: entered promiscuous mode [ 1053.872031][T20614] hsr0: entered promiscuous mode [ 1053.899773][T20614] veth1_virt_wifi: entered promiscuous mode [ 1053.934565][T20614] veth0_virt_wifi: entered promiscuous mode [ 1053.962077][T20614] virt_wifi0: entered promiscuous mode [ 1054.051803][T20614] vlan0: entered promiscuous mode [ 1054.061398][T20614] vlan1: entered promiscuous mode [ 1054.072857][T20614] macvlan0: entered promiscuous mode [ 1054.099733][T20614] macvlan1: entered promiscuous mode [ 1054.116330][T20614] ipvlan0: entered promiscuous mode [ 1054.126811][T20614] ipvlan1: entered promiscuous mode [ 1054.169291][T20614] macvtap0: entered promiscuous mode [ 1054.193776][T20614] macsec0: entered promiscuous mode [ 1054.216386][T20614] geneve0: entered promiscuous mode [ 1054.238936][T20614] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.248050][T20614] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.258053][T20614] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.267488][T20614] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1054.276902][T20614] geneve1: entered promiscuous mode [ 1054.300236][T20614] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 1054.325829][T20614] netdevsim netdevsim0 netdevsim1: entered promiscuous mode [ 1054.344188][T20614] netdevsim netdevsim0 netdevsim2: entered promiscuous mode [ 1054.365066][T20614] netdevsim netdevsim0 netdevsim3: entered promiscuous mode [ 1054.388464][T20614] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 1054.413153][T20614] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 1054.544690][T20678] syzkaller0: entered promiscuous mode [ 1054.550249][T20678] syzkaller0: entered allmulticast mode [ 1055.065805][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.072342][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.594554][T20700] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4442'. [ 1055.688781][T20702] syzkaller0: entered promiscuous mode [ 1055.700804][T20702] syzkaller0: entered allmulticast mode [ 1056.219758][T20709] syzkaller0: entered promiscuous mode [ 1056.231402][T20709] syzkaller0: entered allmulticast mode [ 1056.591256][T20723] syzkaller0: entered promiscuous mode [ 1056.608740][T20723] syzkaller0: entered allmulticast mode [ 1056.689113][T20725] syzkaller0: entered promiscuous mode [ 1056.701786][T20725] syzkaller0: entered allmulticast mode [ 1057.457334][T20754] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4458'. [ 1057.675188][T20761] syzkaller0: entered promiscuous mode [ 1057.696290][T20761] syzkaller0: entered allmulticast mode [ 1057.956956][T20771] netlink: 48 bytes leftover after parsing attributes in process `syz.3.4467'. [ 1058.093604][T15024] usb 3-1: new high-speed USB device number 104 using dummy_hcd [ 1058.298745][T20788] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4470'. [ 1058.315627][T15024] usb 3-1: Using ep0 maxpacket: 16 [ 1058.330635][ T9] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1058.349673][T15024] usb 3-1: config 0 has an invalid interface number: 34 but max is 0 [ 1058.371720][T15024] usb 3-1: config 0 has no interface number 0 [ 1058.377909][T15024] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1058.409938][T15024] usb 3-1: config 0 interface 34 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 1058.457365][T15024] usb 3-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 0 [ 1058.481191][T15024] usb 3-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1058.490430][T15024] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1058.499211][T15024] usb 3-1: Product: syz [ 1058.515457][T15024] usb 3-1: Manufacturer: syz [ 1058.520236][T15024] usb 3-1: SerialNumber: syz [ 1058.536485][T15024] usb 3-1: config 0 descriptor?? [ 1058.544991][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1058.545288][T20767] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 1058.564118][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1058.578731][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1058.579170][T15024] asix: probe of 3-1:0.34 failed with error -22 [ 1058.599128][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1058.630286][ T9] usb 1-1: config 0 descriptor?? [ 1058.670932][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1058.870832][ T9] usb 1-1: USB disconnect, device number 88 [ 1059.435538][T20800] syzkaller0: entered promiscuous mode [ 1059.442132][T20800] syzkaller0: entered allmulticast mode [ 1059.493042][ T9] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1059.665526][T20805] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4474'. [ 1059.697190][ T9] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1059.723874][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1059.749207][ T9] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1059.755912][T20807] netlink: 'syz.4.4475': attribute type 1 has an invalid length. [ 1059.758921][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1059.787188][ T9] usb 1-1: config 0 descriptor?? [ 1059.805823][ T9] aiptek 1-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1059.814908][T20807] veth0_to_bond: left promiscuous mode [ 1059.818993][T20807] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1059.829863][ T9] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1059.922599][T20811] syzkaller0: entered promiscuous mode [ 1059.928103][T20811] syzkaller0: entered allmulticast mode [ 1060.852301][ T9] usb 3-1: USB disconnect, device number 104 [ 1061.147560][T20778] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1061.300106][T20831] syzkaller0: entered promiscuous mode [ 1061.323405][T20831] syzkaller0: entered allmulticast mode [ 1061.585952][T20839] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4483'. [ 1061.601192][T20842] netlink: 'syz.3.4484': attribute type 1 has an invalid length. [ 1061.687918][T20842] veth0_to_bond: left promiscuous mode [ 1061.697889][T20842] bond1: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1061.780546][T20847] 0: reclassify loop, rule prio 0, protocol 03 [ 1062.204585][ T8] usb 1-1: USB disconnect, device number 89 [ 1062.485503][T20869] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4490'. [ 1062.572792][T20875] syzkaller0: entered promiscuous mode [ 1062.595825][T20875] syzkaller0: entered allmulticast mode [ 1063.042079][T20883] syzkaller0: entered promiscuous mode [ 1063.071068][T20883] syzkaller0: entered allmulticast mode [ 1064.257216][ T9] usb 4-1: new high-speed USB device number 115 using dummy_hcd [ 1064.463892][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1064.480076][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1064.493920][ T9] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1064.503647][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1064.516699][ T9] usb 4-1: config 0 descriptor?? [ 1064.526932][ T9] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1064.740854][T15022] usb 4-1: USB disconnect, device number 115 [ 1065.324088][T15022] usb 4-1: new high-speed USB device number 116 using dummy_hcd [ 1065.559243][T15022] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1065.569712][T15022] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1065.582925][T15022] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1065.592387][T15022] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1065.604311][T15022] usb 4-1: config 0 descriptor?? [ 1065.612729][T15022] aiptek 4-1:0.0: interface has no int in endpoints, but must have minimum 1 [ 1065.637051][T15022] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 1066.839730][T20929] netlink: 48 bytes leftover after parsing attributes in process `syz.0.4504'. [ 1066.929375][T20931] syzkaller0: entered promiscuous mode [ 1066.942799][T20931] syzkaller0: entered allmulticast mode [ 1067.085572][T20936] syzkaller0: entered promiscuous mode [ 1067.091239][T20936] syzkaller0: entered allmulticast mode [ 1067.128531][T20937] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4506'. [ 1067.663348][T20953] 0: reclassify loop, rule prio 0, protocol 03 [ 1067.998084][T15024] usb 4-1: USB disconnect, device number 116 [ 1068.217676][T20961] syzkaller0: entered promiscuous mode [ 1068.237709][T20961] syzkaller0: entered allmulticast mode [ 1068.296581][T20970] syzkaller0: entered promiscuous mode [ 1068.304326][T20970] syzkaller0: entered allmulticast mode [ 1068.317464][T20969] syzkaller0: entered promiscuous mode [ 1068.326596][T20969] syzkaller0: entered allmulticast mode [ 1068.681764][T20978] 0: reclassify loop, rule prio 0, protocol 03 [ 1068.909623][T20986] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4523'. [ 1068.932894][T20989] netlink: 48 bytes leftover after parsing attributes in process `syz.4.4525'. [ 1069.333334][T21002] loop0: detected capacity change from 0 to 512 [ 1069.423545][T21004] syzkaller0: entered promiscuous mode [ 1069.430837][T21004] syzkaller0: entered allmulticast mode [ 1069.820929][T21010] udc usbip-vudc.0: unsupported command 'disconnec' [ 1073.019460][T21026] syzkaller0: entered promiscuous mode [ 1073.032743][T21026] syzkaller0: entered allmulticast mode [ 1074.527523][T21053] syzkaller0: entered promiscuous mode [ 1074.533372][T21053] syzkaller0: entered allmulticast mode [ 1076.131258][T21037] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1076.680866][T21062] syzkaller0: entered promiscuous mode [ 1076.686684][T21062] syzkaller0: entered allmulticast mode [ 1077.390207][T21028] Set syz1 is full, maxelem 65536 reached [ 1078.099248][T21100] loop4: detected capacity change from 0 to 128 [ 1080.693148][T21096] netlink: 'syz.4.4551': attribute type 1 has an invalid length. [ 1080.702772][T21096] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1080.965869][T21124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4555'. [ 1080.985901][T21121] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4553'. [ 1081.085366][T21128] Set syz1 is full, maxelem 65536 reached [ 1081.799177][T21142] syzkaller0: entered promiscuous mode [ 1081.805402][T21142] syzkaller0: entered allmulticast mode [ 1083.837088][T21117] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1085.330225][T21176] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4566'. [ 1085.653712][T21190] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4572'. [ 1085.823502][T21191] syzkaller0: entered promiscuous mode [ 1085.831507][T21191] syzkaller0: entered allmulticast mode [ 1086.570953][T21203] loop3: detected capacity change from 0 to 164 [ 1086.630434][T21203] netlink: 220 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1088.902545][T21203] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4576'. [ 1089.217953][T21216] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4582'. [ 1089.388299][T21227] loop3: detected capacity change from 0 to 1024 [ 1089.402032][T21227] EXT4-fs: Mount option(s) incompatible with ext2 [ 1089.454305][T16619] I/O error, dev loop3, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1089.482889][T21227] netlink: 56 bytes leftover after parsing attributes in process `syz.3.4584'. [ 1089.612102][T21234] syzkaller0: entered promiscuous mode [ 1089.617866][T21234] syzkaller0: entered allmulticast mode [ 1089.636105][T21235] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4586'. [ 1089.652276][T21235] i2c i2c-0: Invalid block write size 59 [ 1089.679355][T21235] ip6erspan0: entered promiscuous mode [ 1090.564945][T21258] Set syz1 is full, maxelem 65536 reached [ 1090.587961][T21257] syzkaller0: entered promiscuous mode [ 1090.596474][T21257] syzkaller0: entered allmulticast mode [ 1091.141435][T21280] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4602'. [ 1091.163686][T21280] i2c i2c-0: Invalid block write size 59 [ 1091.445574][T21290] syzkaller0: entered promiscuous mode [ 1091.465664][T21290] syzkaller0: entered allmulticast mode [ 1092.660079][T21320] syzkaller0: entered promiscuous mode [ 1092.670332][T21320] syzkaller0: entered allmulticast mode [ 1092.770254][T21322] loop0: detected capacity change from 0 to 1024 [ 1092.782525][T21322] EXT4-fs: Mount option(s) incompatible with ext2 [ 1093.123299][T21326] loop4: detected capacity change from 0 to 2048 [ 1093.194644][T21326] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1093.227319][T21328] loop0: detected capacity change from 0 to 32768 [ 1093.277471][T21328] loop2: detected capacity change from 0 to 32768 [ 1093.340833][T21328] loop3: detected capacity change from 0 to 32768 [ 1093.390207][T21326] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 25 vs 281 free clusters [ 1093.527281][T21326] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 1093.594939][T21326] EXT4-fs (loop4): This should not happen!! Data will be lost [ 1093.594939][T21326] [ 1093.650782][T21326] EXT4-fs (loop4): Total free blocks count 0 [ 1093.664521][T21328] md/raid:md0: not clean -- starting background reconstruction [ 1093.687034][T21326] EXT4-fs (loop4): Free/Dirty block details [ 1093.716217][T21326] EXT4-fs (loop4): free_blocks=4096 [ 1093.728296][T21341] can0: slcan on ttyS3. [ 1093.728374][T21328] md/raid:md0: invalid chunk size 0 [ 1093.750612][T21328] md: pers->run() failed ... [ 1093.762308][T21326] EXT4-fs (loop4): dirty_blocks=16 [ 1093.767524][T21326] EXT4-fs (loop4): Block reservation details [ 1093.808751][T21341] Set syz1 is full, maxelem 65536 reached [ 1093.820671][T21326] EXT4-fs (loop4): i_reserved_data_blocks=1 [ 1094.264776][T10123] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 4 with max blocks 2 with error 28 [ 1094.320797][T21340] can0 (unregistered): slcan off ttyS3. [ 1094.715509][T21360] syzkaller0: entered promiscuous mode [ 1094.730558][T21360] syzkaller0: entered allmulticast mode [ 1096.046619][T21392] can0: slcan on ttyS3. [ 1096.131217][T21392] Set syz1 is full, maxelem 65536 reached [ 1096.166043][T21396] syzkaller0: entered promiscuous mode [ 1096.172908][T21396] syzkaller0: entered allmulticast mode [ 1096.574690][T21391] can0 (unregistered): slcan off ttyS3. [ 1098.347392][T21417] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4647'. [ 1098.834102][T21429] 0: reclassify loop, rule prio 0, protocol 03 [ 1099.239950][T21445] can0: slcan on ttyS3. [ 1099.311126][T21445] Set syz1 is full, maxelem 65536 reached [ 1099.724235][T21443] can0 (unregistered): slcan off ttyS3. [ 1100.144310][T21469] netlink: 'syz.4.4664': attribute type 1 has an invalid length. [ 1100.261515][T21471] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4663'. [ 1100.325142][T21473] bond1: (slave veth0_to_bond): Releasing active interface [ 1100.395495][T21473] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 1100.479314][T21469] macvlan2: entered promiscuous mode [ 1100.498893][T21469] macvlan2: entered allmulticast mode [ 1100.519899][T21469] bond2: entered promiscuous mode [ 1100.539418][T21469] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1100.561270][T21469] bond2: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 1100.618549][T21469] bond2: left promiscuous mode [ 1101.598757][T21515] can0: slcan on ttyS3. [ 1101.739549][T21520] Set syz1 is full, maxelem 65536 reached [ 1101.841314][T16397] usb 4-1: new high-speed USB device number 117 using dummy_hcd [ 1101.922175][T21515] can0 (unregistered): slcan off ttyS3. [ 1102.070565][T16397] usb 4-1: Using ep0 maxpacket: 16 [ 1102.088697][T16397] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1102.120672][T16397] usb 4-1: config 0 has no interface number 0 [ 1102.127415][T16397] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1102.185451][T16397] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1102.220309][T16397] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1102.248960][T16397] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.277782][T16397] usb 4-1: Product: syz [ 1102.292221][T16397] usb 4-1: Manufacturer: syz [ 1102.303551][T16397] usb 4-1: SerialNumber: syz [ 1102.329649][T16397] usb 4-1: config 0 descriptor?? [ 1102.336795][T21516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.349558][T21516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.422130][T21536] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4678'. [ 1102.590223][T21516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.627025][T21516] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1102.872044][T16397] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1102.902315][T16397] asix: probe of 4-1:0.34 failed with error -61 [ 1103.037670][T21553] 0: reclassify loop, rule prio 0, protocol 03 [ 1103.372889][T21560] can0: slcan on ttyS3. [ 1103.452019][T21560] can0 (unregistered): slcan off ttyS3. [ 1103.480315][T21560] Set syz1 is full, maxelem 65536 reached [ 1104.676725][ T8] usb 4-1: USB disconnect, device number 117 [ 1105.937780][T21547] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1106.178934][T21628] md: array md0 already has disks! [ 1106.216757][T21628] md: could not open device unknown-block(7,0). [ 1106.251632][T21628] md: error, md_import_device() returned -16 [ 1106.280861][T21628] md: could not open device unknown-block(7,1). [ 1106.310646][T21628] md: error, md_import_device() returned -16 [ 1106.323294][T21634] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4701'. [ 1106.358515][T21635] md: could not open device unknown-block(7,2). [ 1106.366638][T21636] can0: slcan on ttyS3. [ 1106.395461][T21635] md: error, md_import_device() returned -16 [ 1106.511774][T21636] can0 (unregistered): slcan off ttyS3. [ 1106.633819][T21628] md/raid:md0: not clean -- starting background reconstruction [ 1106.656057][T21628] md/raid:md0: invalid chunk size 0 [ 1106.681683][T21628] md: pers->run() failed ... [ 1108.707792][T21674] md: array md0 already has disks! [ 1108.726691][T21674] md: could not open device unknown-block(7,0). [ 1108.763021][T21674] md: error, md_import_device() returned -16 [ 1108.931759][T21680] md/raid:md0: not clean -- starting background reconstruction [ 1108.950018][T21680] md/raid:md0: invalid chunk size 0 [ 1108.969111][T21680] md: pers->run() failed ... [ 1110.648656][T21691] md: array md0 already has disks! [ 1110.669690][T21691] md: could not open device unknown-block(7,0). [ 1110.679803][T21691] md: error, md_import_device() returned -16 [ 1110.690779][T21691] md: could not open device unknown-block(7,1). [ 1110.697388][T21691] md: error, md_import_device() returned -16 [ 1110.707509][T21691] md: could not open device unknown-block(7,2). [ 1110.726969][T21691] md: error, md_import_device() returned -16 [ 1110.798305][T21691] md/raid:md0: not clean -- starting background reconstruction [ 1110.807364][T21691] md/raid:md0: invalid chunk size 0 [ 1110.813410][T21691] md: pers->run() failed ... [ 1110.884157][T21698] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4713'. [ 1110.904972][T21698] i2c i2c-0: Invalid block write size 59 [ 1110.920133][T21698] veth0_to_bond: entered promiscuous mode [ 1110.952859][T21698] ip6erspan0: entered promiscuous mode [ 1110.983941][T21698] bond1: entered promiscuous mode [ 1110.989665][T21698] bond2: entered promiscuous mode [ 1111.347391][T21705] syzkaller0: entered promiscuous mode [ 1111.353877][T21705] syzkaller0: entered allmulticast mode [ 1111.681610][T21676] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1112.799966][T21726] md: array md0 already has disks! [ 1112.807329][T21726] md: could not open device unknown-block(7,0). [ 1112.815587][T21726] md: error, md_import_device() returned -16 [ 1112.824205][T21726] md: could not open device unknown-block(7,1). [ 1112.833728][T21726] md: error, md_import_device() returned -16 [ 1112.872485][T21726] md: could not open device unknown-block(7,2). [ 1112.879998][T21726] md: error, md_import_device() returned -16 [ 1113.068834][T21726] md/raid:md0: not clean -- starting background reconstruction [ 1113.077944][T21726] md/raid:md0: invalid chunk size 0 [ 1113.090779][T21726] md: pers->run() failed ... [ 1113.212896][ T5817] usb 4-1: new high-speed USB device number 118 using dummy_hcd [ 1113.400542][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 1113.424044][ T5817] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1113.458922][ T5817] usb 4-1: config 0 has no interface number 0 [ 1113.510618][ T5817] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1113.541072][ T5817] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1113.582508][ T5817] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1113.606116][ T5817] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.614708][ T5817] usb 4-1: Product: syz [ 1113.632626][ T5817] usb 4-1: Manufacturer: syz [ 1113.637834][ T5817] usb 4-1: SerialNumber: syz [ 1113.665404][ T5817] usb 4-1: config 0 descriptor?? [ 1113.678964][T21729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.699625][T21729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.916191][T21729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1113.924107][T21729] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 1114.146586][ T5817] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1114.157246][ T5817] asix: probe of 4-1:0.34 failed with error -61 [ 1115.145824][T21717] slcan: can't register candev [ 1115.156734][T21717] Falling back ldisc for ttyS3. [ 1115.392569][T21737] loop4: detected capacity change from 0 to 512 [ 1115.405198][T21737] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1115.470720][T21737] EXT4-fs (loop4): 1 truncate cleaned up [ 1115.477851][T21737] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1116.505687][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.516520][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1116.551204][ T5817] usb 4-1: USB disconnect, device number 118 [ 1117.925990][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1118.310201][T21772] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4735'. [ 1118.339877][T21772] i2c i2c-0: Invalid block write size 59 [ 1118.632606][T21784] veth0_to_bond: left promiscuous mode [ 1120.546893][T21802] syzkaller0: entered promiscuous mode [ 1120.565261][T21802] syzkaller0: entered allmulticast mode [ 1121.238593][T21809] bond1: (slave veth0_to_bond): Releasing active interface [ 1121.621550][T21828] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4754'. [ 1121.660717][T21828] i2c i2c-0: Invalid block write size 59 [ 1121.685757][T21828] veth0_to_bond: entered promiscuous mode [ 1121.712401][T21828] ip6erspan0: entered promiscuous mode [ 1121.890666][ T5817] usb 3-1: new high-speed USB device number 105 using dummy_hcd [ 1122.000632][ T8] usb 4-1: new high-speed USB device number 119 using dummy_hcd [ 1122.072986][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1122.090214][ T5817] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1122.101460][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1122.112322][ T5817] usb 3-1: config 0 descriptor?? [ 1122.180823][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 1122.188024][ T8] usb 4-1: config 0 has an invalid interface number: 34 but max is 0 [ 1122.196809][ T8] usb 4-1: config 0 has no interface number 0 [ 1122.209916][ T8] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1122.221000][ T8] usb 4-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1122.234693][ T8] usb 4-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1122.244395][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.252625][ T8] usb 4-1: Product: syz [ 1122.257516][ T8] usb 4-1: Manufacturer: syz [ 1122.262852][ T8] usb 4-1: SerialNumber: syz [ 1122.270332][ T8] usb 4-1: config 0 descriptor?? [ 1122.277736][T21830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.285816][T21830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.348463][ T5817] usbhid 3-1:0.0: can't add hid device: -71 [ 1122.376231][ T5817] usbhid: probe of 3-1:0.0 failed with error -71 [ 1122.425933][ T5817] usb 3-1: USB disconnect, device number 105 [ 1122.562612][T21830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.609722][T21830] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 1122.825179][ T8] asix 4-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1122.838281][ T8] asix: probe of 4-1:0.34 failed with error -61 [ 1122.970631][ T5817] usb 3-1: new high-speed USB device number 106 using dummy_hcd [ 1123.165389][ T5817] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1123.183802][ T5817] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1123.229688][ T5817] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1123.299289][ T5817] usb 3-1: config 0 descriptor?? [ 1123.871403][T21855] loop4: detected capacity change from 0 to 512 [ 1123.902905][T21855] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1123.976615][T21855] EXT4-fs (loop4): 1 truncate cleaned up [ 1124.004781][T21855] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1125.050764][ T5817] usbhid 3-1:0.0: can't add hid device: -71 [ 1125.064809][ T5817] usbhid: probe of 3-1:0.0 failed with error -71 [ 1125.120779][T21875] can0: slcan on ttyS3. [ 1125.151207][ T5817] usb 3-1: USB disconnect, device number 106 [ 1125.237545][ T8] usb 4-1: USB disconnect, device number 119 [ 1125.501362][T21877] can0 (unregistered): slcan off ttyS3. [ 1126.597725][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1128.081259][ T8] usb 4-1: new high-speed USB device number 120 using dummy_hcd [ 1128.285979][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1128.338034][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1128.370946][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1128.401199][ T8] usb 4-1: config 0 descriptor?? [ 1128.539872][T21940] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4778'. [ 1128.608393][T21940] i2c i2c-0: Invalid block write size 59 [ 1128.698564][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1128.708555][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 1128.742219][ T8] usb 4-1: USB disconnect, device number 120 [ 1129.230711][ T8] usb 4-1: new high-speed USB device number 121 using dummy_hcd [ 1129.426464][ T8] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1129.448392][ T8] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1129.479037][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1129.516363][ T8] usb 4-1: config 0 descriptor?? [ 1129.703588][T21961] md: array md0 already has disks! [ 1129.722662][T21961] md: could not open device unknown-block(7,0). [ 1129.743082][T21961] md: error, md_import_device() returned -16 [ 1129.799436][T21961] md: could not open device unknown-block(7,1). [ 1129.806134][T21961] md: error, md_import_device() returned -16 [ 1131.015742][ T8] usbhid 4-1:0.0: can't add hid device: -71 [ 1131.060860][ T8] usbhid: probe of 4-1:0.0 failed with error -71 [ 1131.085249][ T8] usb 4-1: USB disconnect, device number 121 [ 1131.335053][T21976] loop4: detected capacity change from 0 to 32768 [ 1131.372121][T21976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.4787 (21976) [ 1131.520802][T21976] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1131.550880][T21976] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1131.560012][T21976] BTRFS info (device loop4): setting nodatacow, compression disabled [ 1131.563404][T21987] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.4790'. [ 1131.580902][T21976] BTRFS info (device loop4): turning on flush-on-commit [ 1131.588691][T21976] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1131.620684][T21976] BTRFS info (device loop4): use lzo compression, level 0 [ 1131.624572][T21987] i2c i2c-0: Invalid block write size 59 [ 1131.627983][T21976] BTRFS info (device loop4): setting nodatasum [ 1131.657818][T21987] veth0_to_bond: entered promiscuous mode [ 1131.660981][T21976] BTRFS info (device loop4): use no compression [ 1131.670363][T21976] BTRFS info (device loop4): trying to use backup root at mount time [ 1131.670747][T21987] bond1: entered promiscuous mode [ 1131.707182][T21976] BTRFS info (device loop4): max_inline at 0 [ 1131.727671][T21976] BTRFS info (device loop4): using free space tree [ 1131.834817][ T4486] BTRFS warning (device loop4): checksum verify failed on logical 5332992 mirror 1 wanted 0x0a5e5d25 found 0xcee3a718 level 0 [ 1131.869378][T21976] BTRFS warning (device loop4): couldn't read tree root [ 1131.902257][T21976] BTRFS warning (device loop4): try to load backup roots slot 1 [ 1131.930741][T10123] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0xe06dfc66 level 0 [ 1131.977772][T21976] BTRFS warning (device loop4): couldn't read tree root [ 1132.000639][T21976] BTRFS warning (device loop4): try to load backup roots slot 2 [ 1132.024619][ T4486] BTRFS error (device loop4): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 1132.049476][T21976] BTRFS warning (device loop4): couldn't read tree root [ 1132.077130][T21976] BTRFS warning (device loop4): try to load backup roots slot 3 [ 1132.161400][T21976] BTRFS info (device loop4): enabling ssd optimizations [ 1132.180529][T21976] BTRFS info (device loop4): auto enabling async discard [ 1132.204658][T21976] BTRFS info (device loop4): rebuilding free space tree [ 1132.419438][T21976] BTRFS info (device loop4): checking UUID tree [ 1132.580825][ T28] audit: type=1800 audit(1785323885.918:72): pid=21976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4787" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 1132.824176][T15996] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1133.052334][T22009] overlayfs: failed to resolve './file0': -2 [ 1133.910775][ T8] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1134.100656][ T8] usb 5-1: Using ep0 maxpacket: 16 [ 1134.111127][ T8] usb 5-1: config 0 has an invalid interface number: 34 but max is 0 [ 1134.136631][ T8] usb 5-1: config 0 has no interface number 0 [ 1134.179904][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1134.221556][ T8] usb 5-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1134.280695][ T8] usb 5-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1134.300687][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1134.308944][ T8] usb 5-1: Product: syz [ 1134.351234][ T8] usb 5-1: Manufacturer: syz [ 1134.364264][ T8] usb 5-1: SerialNumber: syz [ 1134.412187][ T8] usb 5-1: config 0 descriptor?? [ 1134.418252][T22016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1134.446317][T22016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1134.698696][T22016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1134.730755][T22016] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 1134.960216][ T8] asix 5-1:0.34 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -61 [ 1134.985741][ T8] asix: probe of 5-1:0.34 failed with error -61 [ 1135.041478][T22049] netlink: 16054 bytes leftover after parsing attributes in process `syz.2.4799'. [ 1135.077592][T22049] i2c i2c-0: Invalid block write size 59 [ 1136.677219][ T9] usb 5-1: USB disconnect, device number 90 [ 1137.140573][T22083] md: array md0 already has disks! [ 1137.158161][T22083] md: could not open device unknown-block(7,1). [ 1137.184809][T21879] Set syz1 is full, maxelem 65536 reached [ 1137.191390][T22083] md: error, md_import_device() returned -16 [ 1137.207079][T22083] md: could not open device unknown-block(7,2). [ 1137.230625][T22083] md: error, md_import_device() returned -16 [ 1137.343860][T22083] md/raid:md0: not clean -- starting background reconstruction [ 1137.362719][T22083] md/raid:md0: invalid chunk size 0 [ 1137.419894][T22083] md: pers->run() failed ... [ 1137.559894][T22087] md: could not open device unknown-block(7,3). [ 1137.572124][T22087] md: error, md_import_device() returned -16 [ 1137.790974][T15024] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1137.813239][T22089] md/raid:md0: not clean -- starting background reconstruction [ 1137.832215][T22089] md/raid:md0: invalid chunk size 0 [ 1137.857827][T22089] md: pers->run() failed ... [ 1138.003086][T15024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1138.040682][T15024] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1138.059272][T22097] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4814'. [ 1138.073158][T15024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1138.126934][T15024] usb 1-1: config 0 descriptor?? [ 1138.399092][T15024] usbhid 1-1:0.0: can't add hid device: -71 [ 1138.420753][T15024] usbhid: probe of 1-1:0.0 failed with error -71 [ 1138.464516][T15024] usb 1-1: USB disconnect, device number 90 [ 1138.671286][T22108] can0: slcan on ttyS3. [ 1138.732342][T22108] can0 (unregistered): slcan off ttyS3. [ 1138.819830][T22114] md: array md0 already has disks! [ 1138.857508][T22114] md: could not open device unknown-block(7,1). [ 1138.871217][T22114] md: error, md_import_device() returned -16 [ 1138.912161][T22114] md: could not open device unknown-block(7,2). [ 1138.918620][T22114] md: error, md_import_device() returned -16 [ 1139.001507][T15024] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1139.049032][T22114] md/raid:md0: not clean -- starting background reconstruction [ 1139.064389][T22114] md/raid:md0: invalid chunk size 0 [ 1139.069895][T22114] md: pers->run() failed ... [ 1139.131778][T22116] md: could not open device unknown-block(7,3). [ 1139.147102][T22116] md: error, md_import_device() returned -16 [ 1139.218656][T15024] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1139.246813][T15024] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1139.270141][T15024] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1139.293141][T15024] usb 1-1: config 0 descriptor?? [ 1139.642405][T22125] netlink: 108 bytes leftover after parsing attributes in process `syz.3.4824'. [ 1139.683678][T22120] md/raid:md0: not clean -- starting background reconstruction [ 1139.724273][T22120] md/raid:md0: invalid chunk size 0 [ 1139.739342][T22120] md: pers->run() failed ... [ 1140.166384][T22131] veth0_to_bond: left promiscuous mode [ 1140.554699][T22123] loop4: detected capacity change from 0 to 32768 [ 1140.591761][T22138] md: could not open device unknown-block(7,0). [ 1140.618291][T22138] md: error, md_import_device() returned -16 [ 1140.636047][T22138] md: could not open device unknown-block(7,1). [ 1140.648893][T22138] md: error, md_import_device() returned -16 [ 1140.675986][T22138] md: could not open device unknown-block(7,2). [ 1140.682639][T22138] md: error, md_import_device() returned -16 [ 1140.704025][T22123] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1140.791631][T15024] usbhid 1-1:0.0: can't add hid device: -71 [ 1140.800654][T15024] usbhid: probe of 1-1:0.0 failed with error -71 [ 1140.810151][T15024] usb 1-1: USB disconnect, device number 91 [ 1140.841645][T22151] can0: slcan on ttyS3. [ 1140.887314][T22123] XFS (loop4): Ending clean mount [ 1140.914772][T22138] md/raid:md0: not clean -- starting background reconstruction [ 1140.944602][T22138] md/raid:md0: invalid chunk size 0 [ 1140.953335][T22138] md: pers->run() failed ... [ 1141.007759][T22157] netlink: 108 bytes leftover after parsing attributes in process `syz.0.4833'. [ 1141.032253][T22146] md: could not open device unknown-block(7,3). [ 1141.039182][T22146] md: error, md_import_device() returned -16 [ 1141.050560][T22151] can0 (unregistered): slcan off ttyS3. [ 1141.200707][ T28] audit: type=1800 audit(1785323894.528:73): pid=22123 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4822" name="file1" dev="loop4" ino=4427 res=0 errno=0 [ 1141.572906][T22160] md/raid:md0: not clean -- starting background reconstruction [ 1141.597460][T22160] md/raid:md0: invalid chunk size 0 [ 1141.609285][T22160] md: pers->run() failed ... [ 1141.763482][T15996] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1141.813954][T22167] netlink: 16054 bytes leftover after parsing attributes in process `syz.3.4836'. [ 1141.854736][T22167] i2c i2c-0: Invalid block write size 59 [ 1141.877727][T22167] veth0_to_bond: entered promiscuous mode [ 1142.152680][T22174] veth0_to_bond: left promiscuous mode [ 1142.159623][T22174] bond2: (slave veth0_to_bond): Releasing active interface [ 1142.265108][ C0] vkms_vblank_simulate: vblank timer overrun [ 1142.318182][T22177] netlink: 108 bytes leftover after parsing attributes in process `syz.4.4842'. [ 1142.534634][T22182] md: array md0 already has disks! [ 1142.542781][T22182] md: could not open device unknown-block(7,0). [ 1142.550774][T22182] md: error, md_import_device() returned -16 [ 1142.558293][T22182] md: could not open device unknown-block(7,1). [ 1142.565926][T22182] md: error, md_import_device() returned -16 [ 1142.866056][T22191] can0: slcan on ttyS3. [ 1142.925480][T22190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.4848'. [ 1142.951035][T22191] can0 (unregistered): slcan off ttyS3. [ 1143.249726][T22203] netlink: 108 bytes leftover after parsing attributes in process `syz.2.4852'. [ 1143.281230][T22201] veth0_to_bond: left promiscuous mode [ 1143.660712][T22212] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4855'. [ 1143.690643][T22212] i2c i2c-0: Invalid block write size 59 [ 1143.698758][T22213] md: array md0 already has disks! [ 1143.712572][T22213] md: could not open device unknown-block(7,0). [ 1143.735516][T22213] md: error, md_import_device() returned -16 [ 1143.749666][T22213] md: could not open device unknown-block(7,1). [ 1143.765105][T22213] md: error, md_import_device() returned -16 [ 1144.061420][T22215] syzkaller0: entered promiscuous mode [ 1144.082617][T22215] syzkaller0: entered allmulticast mode [ 1147.874592][T22222] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4860'. [ 1147.885477][T22228] veth0_to_bond: left promiscuous mode [ 1147.901505][T22228] bond2: (slave veth0_to_bond): Releasing active interface [ 1148.171892][T22246] can0: slcan on ttyS3. [ 1148.244323][T22248] md: array md0 already has disks! [ 1148.278956][T22248] md: could not open device unknown-block(7,0). [ 1148.301038][T22248] md: error, md_import_device() returned -16 [ 1148.321277][T22248] md: could not open device unknown-block(7,1). [ 1148.333500][T22250] can0 (unregistered): slcan off ttyS3. [ 1148.355799][T22248] md: error, md_import_device() returned -16 [ 1148.582177][T22262] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4869'. [ 1148.642107][T22262] i2c i2c-0: Invalid block write size 59 [ 1148.684116][T22266] loop4: detected capacity change from 0 to 128 [ 1148.691775][T22262] veth0_to_bond: entered promiscuous mode [ 1148.715003][T22266] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (30846!=65535) [ 1148.792575][T22266] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 ro without journal. Quota mode: none. [ 1148.937529][T22266] EXT4-fs error (device loop4): htree_dirblock_to_tree:1083: inode #2: comm syz.4.4870: Directory block failed checksum [ 1148.987557][ T5777] udevd[5777]: incorrect ext4 checksum on /dev/loop4 [ 1149.120154][T15996] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1149.647722][T22280] md/raid:md0: not clean -- starting background reconstruction [ 1149.664931][T22280] md/raid:md0: invalid chunk size 0 [ 1149.690601][T22280] md: pers->run() failed ... [ 1149.860595][T15024] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1150.099192][T22296] md: array md0 already has disks! [ 1150.118142][T15024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1150.132924][T22296] md: could not open device unknown-block(7,0). [ 1150.139292][T22296] md: error, md_import_device() returned -16 [ 1150.155668][T15024] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1150.175165][T22296] md: could not open device unknown-block(7,1). [ 1150.185391][T15024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1150.197202][T22296] md: error, md_import_device() returned -16 [ 1150.215699][T15024] usb 5-1: config 0 descriptor?? [ 1150.412626][T22302] can0: slcan on ttyS3. [ 1150.503346][T15024] usbhid 5-1:0.0: can't add hid device: -71 [ 1150.513628][T22302] can0 (unregistered): slcan off ttyS3. [ 1150.543856][T15024] usbhid: probe of 5-1:0.0 failed with error -71 [ 1150.570950][T15024] usb 5-1: USB disconnect, device number 91 [ 1150.585716][T22309] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4877'. [ 1151.130581][T15024] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1151.264453][T22321] syzkaller0: entered promiscuous mode [ 1151.287925][T22321] syzkaller0: entered allmulticast mode [ 1151.358506][T15024] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1151.395151][T15024] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1151.446224][T15024] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1151.501917][T15024] usb 5-1: config 0 descriptor?? [ 1151.962468][T22333] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4884'. [ 1152.038540][T22333] i2c i2c-0: Invalid block write size 59 [ 1152.091887][T22333] veth0_to_bond: entered promiscuous mode [ 1152.323165][T22337] md/raid:md0: not clean -- starting background reconstruction [ 1152.331382][T22337] md/raid:md0: invalid chunk size 0 [ 1152.336766][T22337] md: pers->run() failed ... [ 1152.381039][T22340] md: array md0 already has disks! [ 1152.386496][T22341] md: could not open device unknown-block(7,0). [ 1152.395429][T22341] md: error, md_import_device() returned -16 [ 1152.410840][T22342] md: could not open device unknown-block(7,1). [ 1152.423116][T22342] md: error, md_import_device() returned -16 [ 1152.429474][T22340] md: could not open device unknown-block(7,2). [ 1152.437439][T22340] md: error, md_import_device() returned -16 [ 1152.536896][T22340] md/raid:md0: not clean -- starting background reconstruction [ 1152.570632][T22340] md/raid:md0: invalid chunk size 0 [ 1152.579549][T22340] md: pers->run() failed ... [ 1152.631567][T22341] md: could not open device unknown-block(7,3). [ 1152.648114][T22341] md: error, md_import_device() returned -16 [ 1153.049040][T15024] usbhid 5-1:0.0: can't add hid device: -71 [ 1153.070929][T15024] usbhid: probe of 5-1:0.0 failed with error -71 [ 1153.097477][T22351] can0: slcan on ttyS3. [ 1153.116446][T15024] usb 5-1: USB disconnect, device number 92 [ 1153.301328][T22354] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4890'. [ 1153.335993][T22362] syzkaller0: entered promiscuous mode [ 1153.343747][T22353] can0 (unregistered): slcan off ttyS3. [ 1153.360362][T22362] syzkaller0: entered allmulticast mode [ 1154.596580][T22382] syzkaller0: entered promiscuous mode [ 1154.608601][T22382] syzkaller0: entered allmulticast mode [ 1154.614467][ T9] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1154.804192][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1154.827587][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1154.848038][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1154.882726][ T9] usb 1-1: config 0 descriptor?? [ 1155.092858][T22393] can0: slcan on ttyS3. [ 1155.099618][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1155.118239][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1155.142984][ T9] usb 1-1: USB disconnect, device number 92 [ 1155.173334][T22394] can0 (unregistered): slcan off ttyS3. [ 1155.660572][ T9] usb 1-1: new high-speed USB device number 93 using dummy_hcd [ 1155.852318][ T9] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1155.900601][ T9] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1155.909916][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1156.001742][ T9] usb 1-1: config 0 descriptor?? [ 1156.296935][T22421] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4909'. [ 1157.201600][T22435] syzkaller0: entered promiscuous mode [ 1157.222548][T22435] syzkaller0: entered allmulticast mode [ 1157.535405][ T9] usbhid 1-1:0.0: can't add hid device: -71 [ 1157.563633][ T9] usbhid: probe of 1-1:0.0 failed with error -71 [ 1157.612331][ T9] usb 1-1: USB disconnect, device number 93 [ 1157.637553][T22440] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4914'. [ 1157.818586][T22450] can0: slcan on ttyS3. [ 1157.945588][T22450] can0 (unregistered): slcan off ttyS3. [ 1157.976971][T22445] md/raid:md0: not clean -- starting background reconstruction [ 1158.021804][T22445] md/raid:md0: invalid chunk size 0 [ 1158.027188][T22445] md: pers->run() failed ... [ 1158.566262][T22470] loop4: detected capacity change from 0 to 4096 [ 1158.641852][T22470] ntfs3: loop4: Different NTFS sector size (4096) and media sector size (512). [ 1158.798727][T22470] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 1158.875402][T22470] ntfs3: loop4: Failed to initialize $Extend/$Reparse. [ 1159.172014][T22481] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4923'. [ 1159.450719][T22470] overlayfs: upper fs does not support tmpfile. [ 1159.539082][T22470] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1159.606382][T22470] overlayfs: failed to get uuid (/file0, err=0); falling back to uuid=null. [ 1159.638510][T22470] ntfs3: loop4: ino=1b, "file0" failed to parse mft record [ 1159.657465][T22470] ntfs3: loop4: ino=1b, "file0" attr_set_size [ 1159.678601][T22470] overlayfs: failed to verify origin (/, ino=5, err=-2) [ 1159.705451][T22470] overlayfs: failed to verify upper root origin [ 1159.836282][T22499] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4925'. [ 1159.851152][T15996] ntfs3: loop4: ino=1a, ntfs_sync_fs failed, -22. [ 1159.891779][T22501] i2c i2c-0: Invalid block write size 59 [ 1159.927343][T22502] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4926'. [ 1160.076388][T22505] syzkaller0: entered promiscuous mode [ 1160.106298][T22505] syzkaller0: entered allmulticast mode [ 1160.593062][T22522] can0: slcan on ttyS3. [ 1160.656046][T22528] loop4: detected capacity change from 0 to 1024 [ 1160.736006][T22528] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1160.768139][T22527] can0 (unregistered): slcan off ttyS3. [ 1161.017794][ T28] audit: type=1800 audit(1785323914.358:74): pid=22528 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4933" name="file1" dev="loop4" ino=19 res=0 errno=0 [ 1161.666432][T22564] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4936'. [ 1161.705575][T22562] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4937'. [ 1161.971048][T22566] veth0_to_bond: left promiscuous mode [ 1162.551882][T22570] syzkaller0: entered promiscuous mode [ 1162.563517][T22570] syzkaller0: entered allmulticast mode [ 1162.756434][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1163.048455][T22579] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.4942'. [ 1163.100121][T22579] i2c i2c-0: Invalid block write size 59 [ 1163.100292][T22575] syzkaller0: entered promiscuous mode [ 1163.119823][T22575] syzkaller0: entered allmulticast mode [ 1163.758832][T22578] loop4: detected capacity change from 0 to 40427 [ 1163.803252][T22578] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1163.826224][T22578] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1163.903857][T22578] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1164.120772][T22578] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1164.132504][T22578] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1164.326399][T22592] netlink: 52 bytes leftover after parsing attributes in process `syz.0.4945'. [ 1164.342372][ T28] audit: type=1800 audit(1785323917.688:75): pid=22578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.4941" name="file2" dev="loop4" ino=10 res=0 errno=0 [ 1164.438976][T15996] syz-executor: attempt to access beyond end of device [ 1164.438976][T15996] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1164.473759][T15996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1164.662738][T22572] Bluetooth: hci1: command 0x0406 tx timeout [ 1165.275502][T22602] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4946'. [ 1166.989967][T22589] slcan: can't register candev [ 1167.014315][T22589] Falling back ldisc for ttyS3. [ 1167.500495][T22605] veth0_to_bond: left promiscuous mode [ 1167.743791][T22611] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4949'. [ 1167.845800][T22614] syzkaller0: entered promiscuous mode [ 1167.877048][T22614] syzkaller0: entered allmulticast mode [ 1168.003046][T22621] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4951'. [ 1168.055196][T22623] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.4953'. [ 1168.078847][T22623] i2c i2c-0: Invalid block write size 59 [ 1168.390612][T22628] can0: slcan on ttyS3. [ 1168.452017][T22628] can0 (unregistered): slcan off ttyS3. [ 1168.532205][T22628] netlink: 52 bytes leftover after parsing attributes in process `syz.4.4955'. [ 1169.026097][T22637] syzkaller0: entered promiscuous mode [ 1169.036777][T22637] syzkaller0: entered allmulticast mode [ 1169.046385][T22635] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4957'. [ 1169.113636][T22638] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4958'. [ 1169.461675][T22647] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4960'. [ 1169.628056][T22649] loop4: detected capacity change from 0 to 4096 [ 1169.794579][T22649] ntfs3: loop4: failed to convert "0080" to cp775 [ 1172.886472][T22663] syzkaller0: entered promiscuous mode [ 1172.892375][T22663] syzkaller0: entered allmulticast mode [ 1173.173498][T22671] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.4964'. [ 1173.201618][T22671] i2c i2c-0: Invalid block write size 59 [ 1173.224010][T22671] veth0_to_bond: entered promiscuous mode [ 1173.273572][T22674] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4967'. [ 1173.295175][T22675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1173.358035][T22675] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4966'. [ 1173.373938][T22677] can0: slcan on ttyS3. [ 1173.491735][T22677] can0 (unregistered): slcan off ttyS3. [ 1173.545506][T22677] netlink: 52 bytes leftover after parsing attributes in process `syz.2.4968'. [ 1173.556642][T22684] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4969'. [ 1174.093142][T22689] syzkaller0: entered promiscuous mode [ 1174.115459][T22689] syzkaller0: entered allmulticast mode [ 1174.450689][T22703] netlink: 24 bytes leftover after parsing attributes in process `syz.0.4973'. [ 1177.537572][T22693] syzkaller0: entered promiscuous mode [ 1177.544711][T22693] syzkaller0: entered allmulticast mode [ 1177.896599][T22711] syzkaller0: entered promiscuous mode [ 1177.917214][T22711] syzkaller0: entered allmulticast mode [ 1177.946520][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.954024][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.978701][T22714] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4978'. [ 1178.056063][T22720] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4977'. [ 1178.085376][T22716] veth0_to_bond: left promiscuous mode [ 1178.406215][T22727] can0: slcan on ttyS3. [ 1178.501799][T22727] can0 (unregistered): slcan off ttyS3. [ 1178.512885][T22731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1178.605112][T22727] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4982'. [ 1178.725468][T22731] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4981'. [ 1179.197315][T22723] loop4: detected capacity change from 0 to 32768 [ 1179.723576][T22572] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1179.737427][T22572] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1179.751702][T22572] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1179.760748][T22572] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1179.770912][T22572] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1179.781656][T22572] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1180.001735][T15024] usb 3-1: new high-speed USB device number 107 using dummy_hcd [ 1180.113290][T22745] chnl_net:caif_netlink_parms(): no params data found [ 1180.204435][T15024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1180.217778][T15024] usb 3-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1180.228205][T15024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1180.243480][T15024] usb 3-1: config 0 descriptor?? [ 1180.462984][T22745] bridge0: port 1(bridge_slave_0) entered blocking state [ 1180.504560][T22745] bridge0: port 1(bridge_slave_0) entered disabled state [ 1180.528411][T15024] usbhid 3-1:0.0: can't add hid device: -71 [ 1180.534597][T15024] usbhid: probe of 3-1:0.0 failed with error -71 [ 1180.541948][T22745] bridge_slave_0: entered allmulticast mode [ 1180.549672][T22745] bridge_slave_0: entered promiscuous mode [ 1180.571140][T15024] usb 3-1: USB disconnect, device number 107 [ 1180.591642][T22745] bridge0: port 2(bridge_slave_1) entered blocking state [ 1180.604705][T22745] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.622640][T22745] bridge_slave_1: entered allmulticast mode [ 1180.650924][T22745] bridge_slave_1: entered promiscuous mode [ 1180.767174][T22771] syzkaller0: entered promiscuous mode [ 1180.777453][T22771] syzkaller0: entered allmulticast mode [ 1180.786012][T22772] syzkaller0: entered promiscuous mode [ 1180.796578][T22772] syzkaller0: entered allmulticast mode [ 1180.810136][T22745] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1180.895546][T22745] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1180.989484][T22745] team0: Port device team_slave_0 added [ 1181.046279][T22745] team0: Port device team_slave_1 added [ 1181.081084][T15024] usb 3-1: new high-speed USB device number 108 using dummy_hcd [ 1181.163786][T22778] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4989'. [ 1181.175558][T22745] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1181.184720][T22745] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.211981][T22745] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1181.236089][T22745] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1181.253776][T22745] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1181.282613][ C0] vkms_vblank_simulate: vblank timer overrun [ 1181.322824][T15024] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1181.327133][T22745] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1181.350797][T15024] usb 3-1: New USB device found, idVendor=0458, idProduct=3303, bcdDevice= 0.40 [ 1181.372883][T22781] syzkaller0: entered promiscuous mode [ 1181.378608][T22781] syzkaller0: entered allmulticast mode [ 1181.382167][T15024] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1181.436346][T15024] usb 3-1: config 0 descriptor?? [ 1181.679969][T22745] hsr_slave_0: entered promiscuous mode [ 1181.736003][T22745] hsr_slave_1: entered promiscuous mode [ 1181.771963][T22745] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1181.820913][T22745] Cannot create hsr debugfs directory [ 1181.861649][T22572] Bluetooth: hci3: command tx timeout [ 1182.449144][T22814] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1182.488785][T22814] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4993'. [ 1182.757071][T22807] loop4: detected capacity change from 0 to 40427 [ 1182.797183][T22807] F2FS-fs (loop4): Small segment_count (9 < 1 * 24) [ 1182.826554][T22807] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1182.842697][T22807] F2FS-fs (loop4): Found nat_bits in checkpoint [ 1182.907621][T22807] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1182.923027][T22807] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 1183.046442][T15024] usbhid 3-1:0.0: can't add hid device: -71 [ 1183.067909][T15024] usbhid: probe of 3-1:0.0 failed with error -71 [ 1183.097633][T15024] usb 3-1: USB disconnect, device number 108 [ 1183.157587][T15996] syz-executor: attempt to access beyond end of device [ 1183.157587][T15996] loop4: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1183.231422][T15996] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1183.586991][T22745] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1183.635476][T22745] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1183.664878][T22745] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1183.686126][T22745] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1183.752041][T22822] syzkaller0: entered promiscuous mode [ 1183.768141][T22822] syzkaller0: entered allmulticast mode [ 1183.941505][T22572] Bluetooth: hci3: command tx timeout [ 1184.062675][T22825] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4998'. [ 1184.191507][T22830] syzkaller0: entered promiscuous mode [ 1184.197159][T22830] syzkaller0: entered allmulticast mode [ 1184.394884][T22745] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1184.466093][T22745] 8021q: adding VLAN 0 to HW filter on device team0 [ 1184.520129][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 1184.527566][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1184.595995][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.603226][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1184.818583][T22745] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1185.347332][T22858] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1185.376370][T22858] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5004'. [ 1185.403924][T22861] can0: slcan on ttyS3. [ 1185.484489][T22861] can0 (unregistered): slcan off ttyS3. [ 1185.537572][T22745] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1185.564154][T22861] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5005'. [ 1185.792734][T22872] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5006'. [ 1185.824206][T22872] i2c i2c-0: Invalid block write size 59 [ 1185.837717][T22872] veth0_to_bond: entered promiscuous mode [ 1185.875431][T22745] veth0_vlan: entered promiscuous mode [ 1185.909961][T22745] veth1_vlan: entered promiscuous mode [ 1186.007334][T22745] veth0_macvtap: entered promiscuous mode [ 1186.021287][T22572] Bluetooth: hci3: command tx timeout [ 1186.061642][T22745] veth1_macvtap: entered promiscuous mode [ 1186.092692][T22745] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1186.105860][T22745] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1186.137096][T22745] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.146639][T22745] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.155867][T22745] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.165295][T22745] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1186.413727][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.447312][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.563976][T22881] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5007'. [ 1186.611193][ T1081] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1186.633958][ T1081] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1186.773227][T22885] syzkaller0: entered promiscuous mode [ 1186.778844][T22885] syzkaller0: entered allmulticast mode [ 1187.335313][T22895] syzkaller0: entered promiscuous mode [ 1187.359788][T22895] syzkaller0: entered allmulticast mode [ 1187.774001][T22919] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.5016'. [ 1187.792805][T22919] i2c i2c-0: Invalid block write size 59 [ 1187.817794][T22920] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1187.860036][T22920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.5015'. [ 1188.101279][T22572] Bluetooth: hci3: command tx timeout [ 1191.557162][T22925] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5017'. [ 1191.618770][T22931] veth0_to_bond: left promiscuous mode [ 1191.696061][T22934] CUSE: info not properly terminated [ 1191.846220][T22936] syzkaller0: entered promiscuous mode [ 1191.863017][T22936] syzkaller0: entered allmulticast mode [ 1192.306757][T22954] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5025'. [ 1192.343137][T22954] i2c i2c-0: Invalid block write size 59 [ 1192.442129][T22955] syzkaller0: entered promiscuous mode [ 1192.447683][T22955] syzkaller0: entered allmulticast mode [ 1192.644413][T22965] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1192.703791][T22965] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5028'. [ 1196.594512][T22975] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5032'. [ 1196.604196][T22976] veth0_to_bond: left promiscuous mode [ 1196.814467][T22981] syzkaller0: entered promiscuous mode [ 1196.832591][T22981] syzkaller0: entered allmulticast mode [ 1197.202485][T22987] syzkaller0: entered promiscuous mode [ 1197.208482][T22995] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5037'. [ 1197.218348][T22987] syzkaller0: entered allmulticast mode [ 1197.244597][T22995] i2c i2c-0: Invalid block write size 59 [ 1197.664910][T22985] loop4: detected capacity change from 0 to 32768 [ 1197.808203][ T28] audit: type=1800 audit(1785323951.138:76): pid=22985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.5034" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1198.077044][T23003] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5039'. [ 1201.824639][T22995] veth0_to_bond: entered promiscuous mode [ 1201.837234][T23012] netlink: 12 bytes leftover after parsing attributes in process `syz.2.5042'. [ 1202.150031][T23022] syzkaller0: entered promiscuous mode [ 1202.194435][T23022] syzkaller0: entered allmulticast mode [ 1202.228696][T23029] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1202.283906][T23029] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5043'. [ 1202.364800][T23031] syzkaller0: entered promiscuous mode [ 1202.391180][T23031] syzkaller0: entered allmulticast mode [ 1202.635364][T23034] can0: slcan on ttyS3. [ 1202.761490][T23034] can0 (unregistered): slcan off ttyS3. [ 1202.839152][T23034] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5047'. [ 1203.571876][T23058] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.5051'. [ 1203.620676][T23058] i2c i2c-0: Invalid block write size 59 [ 1203.817475][T23061] syzkaller0: entered promiscuous mode [ 1203.830625][T23061] syzkaller0: entered allmulticast mode [ 1203.914786][T23047] loop4: detected capacity change from 0 to 32768 [ 1203.951032][T23047] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.5049 (23047) [ 1204.076837][T23047] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1204.110341][T23047] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1204.150163][T23047] BTRFS info (device loop4): setting nodatasum [ 1204.170625][T23047] BTRFS info (device loop4): force zlib compression, level 3 [ 1204.183390][T23047] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_LZO (0x8) [ 1204.213910][T23047] BTRFS info (device loop4): use lzo compression, level 0 [ 1204.250568][T23047] BTRFS info (device loop4): turning on flush-on-commit [ 1204.277798][T23047] BTRFS info (device loop4): enabling auto defrag [ 1204.295637][T23047] BTRFS info (device loop4): max_inline at 4096 [ 1204.306343][T23047] BTRFS info (device loop4): using free space tree [ 1204.670604][T23047] BTRFS info (device loop4): enabling ssd optimizations [ 1205.441946][T23091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5054'. [ 1205.755520][T15996] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1206.681616][T23111] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1206.728698][T23111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.5059'. [ 1209.832584][T23126] can0: slcan on ttyS3. [ 1209.997541][T23138] i2c i2c-0: Invalid block write size 59 [ 1210.004291][T23126] can0 (unregistered): slcan off ttyS3. [ 1210.064296][T23138] lo: entered promiscuous mode [ 1210.065603][T23126] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5060'. [ 1210.184991][T23138] tunl0: entered promiscuous mode [ 1210.270679][T23138] gre0: entered promiscuous mode [ 1210.470127][T23138] gretap0: entered promiscuous mode [ 1210.541242][T23138] erspan0: entered promiscuous mode [ 1210.608374][T23138] ip_vti0: entered promiscuous mode [ 1210.667227][T23138] ip6_vti0: entered promiscuous mode [ 1210.741530][T23138] sit0: entered promiscuous mode [ 1210.795881][T23138] ip6tnl0: entered promiscuous mode [ 1211.022040][T23138] ip6gre0: entered promiscuous mode [ 1211.106911][T23138] syz_tun: entered promiscuous mode [ 1211.117696][T23162] loop4: detected capacity change from 0 to 4096 [ 1211.228490][T23138] ip6gretap0: entered promiscuous mode [ 1211.375218][T23138] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.383519][T23138] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.431781][T23138] bridge0: entered promiscuous mode [ 1211.535905][T23138] vcan0: entered promiscuous mode [ 1211.552071][T23162] NILFS (loop4): the device already has a read-only mount. [ 1211.611224][T23138] bond0: entered promiscuous mode [ 1211.616716][T23138] bond_slave_0: entered promiscuous mode [ 1211.650847][T23138] bond_slave_1: entered promiscuous mode [ 1211.741638][T23138] team0: entered promiscuous mode [ 1211.746847][T23138] team_slave_0: entered promiscuous mode [ 1211.780952][T23138] team_slave_1: entered promiscuous mode [ 1211.851196][T23138] dummy0: entered promiscuous mode [ 1211.913200][T23138] nlmon0: entered promiscuous mode [ 1211.931818][T23138] caif0: entered promiscuous mode [ 1212.001925][T23138] batadv0: entered promiscuous mode [ 1212.063436][T23138] vxcan0: entered promiscuous mode [ 1212.080640][T23138] vxcan1: entered promiscuous mode [ 1212.111775][T23138] veth0: entered promiscuous mode [ 1212.160817][ T5085] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1212.174716][T23138] veth1: entered promiscuous mode [ 1212.190824][ T5085] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1212.208309][ T5085] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1212.224669][T23138] wg0: entered promiscuous mode [ 1212.230158][ T5085] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1212.241514][ T5085] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1212.249685][ T5085] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1212.259955][T23138] wg1: entered promiscuous mode [ 1212.298835][T23138] wg2: entered promiscuous mode [ 1212.322501][T23138] veth0_to_bridge: entered promiscuous mode [ 1212.375459][T23138] veth1_to_bridge: entered promiscuous mode [ 1212.427010][T23138] veth0_to_bond: entered promiscuous mode [ 1212.495098][T23138] veth1_to_bond: entered promiscuous mode [ 1212.562279][T23138] veth0_to_team: entered promiscuous mode [ 1212.637444][T23138] veth1_to_team: entered promiscuous mode [ 1212.699222][T23138] veth0_to_batadv: entered promiscuous mode [ 1212.720819][T23138] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1212.776308][T23138] batadv_slave_0: entered promiscuous mode [ 1212.809394][T23138] veth1_to_batadv: entered promiscuous mode [ 1212.827047][T23138] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1212.839618][T23138] batadv_slave_1: entered promiscuous mode [ 1212.867476][T23138] xfrm0: entered promiscuous mode [ 1212.882448][T23138] veth0_to_hsr: entered promiscuous mode [ 1212.923855][T23138] veth1_to_hsr: entered promiscuous mode [ 1212.958966][T23138] hsr0: entered promiscuous mode [ 1212.984669][T23138] veth1_virt_wifi: entered promiscuous mode [ 1213.017421][T23138] veth0_virt_wifi: entered promiscuous mode [ 1213.033940][T23138] virt_wifi0: entered promiscuous mode [ 1213.240805][T23138] vlan0: entered promiscuous mode [ 1213.264608][T23138] vlan1: entered promiscuous mode [ 1213.277812][T23138] macvlan0: entered promiscuous mode [ 1213.304776][T23138] macvlan1: entered promiscuous mode [ 1213.324958][T23138] ipvlan0: entered promiscuous mode [ 1213.335677][T23138] ipvlan1: entered promiscuous mode [ 1213.379568][T23138] macvtap0: entered promiscuous mode [ 1213.401915][T23138] macsec0: entered promiscuous mode [ 1213.416300][T23138] geneve0: entered promiscuous mode [ 1213.445797][T23138] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.455188][T23138] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.464742][T23138] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.473803][T23138] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.483307][T23138] geneve1: entered promiscuous mode [ 1213.506743][T23138] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 1213.523338][T23138] netdevsim netdevsim3 netdevsim1: entered promiscuous mode [ 1213.544549][T23138] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 1213.565466][T23138] netdevsim netdevsim3 netdevsim3: entered promiscuous mode [ 1213.593179][T23138] mac80211_hwsim hwsim22 wlan0: entered promiscuous mode [ 1213.617751][T23138] mac80211_hwsim hwsim23 wlan1: entered promiscuous mode [ 1213.635854][T23161] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1213.637186][T23164] veth0_to_bond: left promiscuous mode [ 1214.300966][T23205] loop4: detected capacity change from 0 to 512 [ 1214.340977][ T5085] Bluetooth: hci0: command tx timeout [ 1214.360510][T23205] EXT4-fs (loop4): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 1214.397946][T23205] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e800e028, mo2=0002] [ 1214.415684][T23205] System zones: 1-12 [ 1214.431049][T23205] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1214.449211][T23205] EXT4-fs error (device loop4): ext4_validate_block_bitmap:439: comm syz.4.5073: bg 0: block 361: padding at end of block bitmap is not set [ 1214.469720][T23205] EXT4-fs (loop4): Remounting filesystem read-only [ 1214.530973][T23205] EXT4-fs (loop4): 1 truncate cleaned up [ 1214.558699][T23205] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 1214.594239][T23172] chnl_net:caif_netlink_parms(): no params data found [ 1214.671559][T23205] CUSE: info not properly terminated [ 1214.739020][T23214] can0: slcan on ttyS3. [ 1214.807024][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 1214.871494][T23215] can0 (unregistered): slcan off ttyS3. [ 1214.949506][T23214] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5075'. [ 1214.962494][T23172] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.978382][T23172] bridge0: port 1(bridge_slave_0) entered disabled state [ 1214.990933][T23172] bridge_slave_0: entered allmulticast mode [ 1215.023207][T23172] bridge_slave_0: entered promiscuous mode [ 1215.062659][T23172] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.100914][T23172] bridge0: port 2(bridge_slave_1) entered disabled state [ 1215.112424][T23172] bridge_slave_1: entered allmulticast mode [ 1215.124548][T23172] bridge_slave_1: entered promiscuous mode [ 1215.201399][T23172] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1215.225553][T23172] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1215.314686][T23172] team0: Port device team_slave_0 added [ 1215.336158][T23172] team0: Port device team_slave_1 added [ 1215.407873][T23172] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1215.425809][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.428533][T23228] loop4: detected capacity change from 0 to 32768 [ 1215.452917][T23172] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.488987][T23172] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.508440][T23172] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1215.538506][T23228] XFS (loop4): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1215.550792][T23172] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.651183][T23228] XFS (loop4): Ending clean mount [ 1215.674273][T23172] hsr_slave_0: entered promiscuous mode [ 1215.739257][T23172] hsr_slave_1: entered promiscuous mode [ 1215.781752][T23172] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1215.789425][T23172] Cannot create hsr debugfs directory [ 1215.958724][T23243] i2c i2c-0: Invalid block write size 59 [ 1215.973905][T15996] XFS (loop4): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 1216.054104][T23239] syzkaller0: entered promiscuous mode [ 1216.060275][T23239] syzkaller0: entered allmulticast mode [ 1216.126847][T23243] veth0_to_bond: entered promiscuous mode [ 1216.420744][ T5085] Bluetooth: hci0: command tx timeout [ 1216.985179][T23263] CUSE: info not properly terminated [ 1218.509865][ T5085] Bluetooth: hci0: command tx timeout [ 1219.229527][T23272] md: array md0 already has disks! [ 1219.236478][T23272] md: could not open device unknown-block(7,0). [ 1219.244643][T23272] md: error, md_import_device() returned -16 [ 1219.253796][T23272] md: could not open device unknown-block(7,1). [ 1219.267920][T23272] md: error, md_import_device() returned -16 [ 1219.275162][T23272] md: could not open device unknown-block(7,2). [ 1219.282584][T23272] md: error, md_import_device() returned -16 [ 1219.793160][T23276] i2c i2c-0: Invalid block write size 59 [ 1220.588891][ T5085] Bluetooth: hci0: command tx timeout [ 1221.226891][T23291] md: array md0 already has disks! [ 1221.242673][T23291] md: could not open device unknown-block(7,0). [ 1221.265588][T23291] md: error, md_import_device() returned -16 [ 1221.273098][T23291] md: could not open device unknown-block(7,1). [ 1221.280034][T23291] md: error, md_import_device() returned -16 [ 1221.291894][T23291] md: could not open device unknown-block(7,2). [ 1221.298618][T23291] md: error, md_import_device() returned -16 [ 1222.155853][T23172] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1222.219056][T23290] loop4: detected capacity change from 0 to 32768 [ 1222.279380][T23290] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.5097 (23290) [ 1222.344012][T23290] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1222.372742][T23305] syzkaller0: entered promiscuous mode [ 1222.388211][T23290] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 1222.394328][T23305] syzkaller0: entered allmulticast mode [ 1222.419524][T23290] BTRFS info (device loop4): using free space tree [ 1222.437113][T23172] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1222.485078][T23290] BTRFS info (device loop4): enabling ssd optimizations [ 1222.492485][T23290] BTRFS info (device loop4): auto enabling async discard [ 1222.799725][T15996] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 1223.810645][T16397] usb 5-1: new high-speed USB device number 93 using dummy_hcd [ 1224.022900][T16397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1224.040611][T16397] usb 5-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1224.049997][T16397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1224.067188][T16397] usb 5-1: config 0 descriptor?? [ 1224.327714][T16397] usbhid 5-1:0.0: can't add hid device: -71 [ 1224.346727][T16397] usbhid: probe of 5-1:0.0 failed with error -71 [ 1224.361479][T16397] usb 5-1: USB disconnect, device number 93 [ 1224.930612][T16397] usb 5-1: new high-speed USB device number 94 using dummy_hcd [ 1225.177096][T16397] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1225.189333][T16397] usb 5-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1225.199157][T16397] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1225.229740][T16397] usb 5-1: config 0 descriptor?? [ 1226.097386][T16397] aiptek 5-1:0.0: Aiptek using 400 ms programming speed [ 1226.136698][T16397] input: Aiptek as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input20 [ 1226.522247][T16397] usb 5-1: USB disconnect, device number 94 [ 1226.528656][ C1] aiptek 5-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1226.824092][T23172] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1226.837146][T23172] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1226.849389][T23323] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5101'. [ 1227.055150][T23337] md: array md0 already has disks! [ 1227.064943][T23337] md: could not open device unknown-block(7,0). [ 1227.081154][T23337] md: error, md_import_device() returned -16 [ 1227.098512][T23337] md: could not open device unknown-block(7,1). [ 1227.103272][T23172] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1227.115870][T23337] md: error, md_import_device() returned -16 [ 1227.146143][T23337] md: could not open device unknown-block(7,2). [ 1227.162975][T23337] md: error, md_import_device() returned -16 [ 1227.169933][T23172] 8021q: adding VLAN 0 to HW filter on device team0 [ 1227.199630][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 1227.207024][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1227.279958][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 1227.287505][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1228.202497][T23172] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1228.321401][T23361] syzkaller0: entered promiscuous mode [ 1228.337011][T23361] syzkaller0: entered allmulticast mode [ 1228.361485][T23363] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5112'. [ 1228.556248][T23172] veth0_vlan: entered promiscuous mode [ 1228.634606][T23172] veth1_vlan: entered promiscuous mode [ 1228.835492][T23365] syzkaller0: entered promiscuous mode [ 1228.852270][T23365] syzkaller0: entered allmulticast mode [ 1229.190667][T16397] usb 4-1: new high-speed USB device number 122 using dummy_hcd [ 1229.392673][T16397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1229.421832][T16397] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 1229.445027][T16397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1229.487002][T16397] usb 4-1: config 0 descriptor?? [ 1229.770930][T16397] usbhid 4-1:0.0: can't add hid device: -71 [ 1229.777470][T16397] usbhid: probe of 4-1:0.0 failed with error -71 [ 1229.793594][T16397] usb 4-1: USB disconnect, device number 122 [ 1230.320594][T16397] usb 4-1: new high-speed USB device number 123 using dummy_hcd [ 1230.523123][T16397] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1230.534510][T16397] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 1230.544206][T16397] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1230.556233][T16397] usb 4-1: config 0 descriptor?? [ 1231.401675][T16397] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 1231.431188][T16397] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input21 [ 1231.851854][T16397] usb 4-1: USB disconnect, device number 123 [ 1231.857982][ C1] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 1233.203172][T23172] veth0_macvtap: entered promiscuous mode [ 1233.227478][T23172] veth1_macvtap: entered promiscuous mode [ 1233.334988][T23172] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1233.395027][T23172] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1233.443845][T23172] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.474208][T23390] netlink: 88 bytes leftover after parsing attributes in process `syz.4.5119'. [ 1233.480485][T23172] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.530553][T23172] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.562183][T23172] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1233.602097][T23392] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5120'. [ 1233.614396][T23397] loop4: detected capacity change from 0 to 512 [ 1233.644846][T23393] syzkaller0: entered promiscuous mode [ 1233.664970][T23397] EXT4-fs (loop4): revision level too high, forcing read-only mode [ 1233.673588][T23397] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=8802c01c, mo2=0002] [ 1233.679372][T23393] syzkaller0: entered allmulticast mode [ 1233.682298][T23397] EXT4-fs (loop4): orphan cleanup on readonly fs [ 1233.695224][T23397] EXT4-fs error (device loop4): ext4_orphan_get:1404: inode #13: comm syz.4.5122: iget: bad i_size value: 12154761577498 [ 1233.712806][T23397] EXT4-fs error (device loop4): ext4_orphan_get:1409: comm syz.4.5122: couldn't read orphan inode 13 (err -117) [ 1233.727757][T23397] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1233.751300][T23397] EXT4-fs warning (device loop4): dx_probe:893: inode #2: comm syz.4.5122: dx entry: limit 65535 != root limit 120 [ 1233.764534][T23397] EXT4-fs warning (device loop4): dx_probe:966: inode #2: comm syz.4.5122: Corrupt directory, running e2fsck is recommended [ 1233.781766][T23397] EXT4-fs error (device loop4): ext4_readdir:263: inode #2: block 3: comm syz.4.5122: path /544/file0: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4294967295, rec_len=17, size=1024 fake=0 [ 1233.874135][T15996] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1234.298163][ T146] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.323272][ T146] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.421205][T23410] md: array md0 already has disks! [ 1234.436780][T23410] md: could not open device unknown-block(7,0). [ 1234.450813][T23410] md: error, md_import_device() returned -16 [ 1234.467921][T23410] md: could not open device unknown-block(7,1). [ 1234.480634][T23410] md: error, md_import_device() returned -16 [ 1234.498169][T23410] md: could not open device unknown-block(7,2). [ 1234.508164][T23410] md: error, md_import_device() returned -16 [ 1234.516346][T23407] syzkaller0: entered promiscuous mode [ 1234.530517][T23407] syzkaller0: entered allmulticast mode [ 1234.573484][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.611432][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.736054][T23418] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5129'. [ 1238.311315][T23426] netlink: 44 bytes leftover after parsing attributes in process `syz.3.5130'. [ 1238.655190][T23437] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5069'. [ 1239.443385][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1239.450058][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1240.036522][T23448] lo: left promiscuous mode [ 1240.051979][T23448] tunl0: left promiscuous mode [ 1240.057677][T23448] gre0: left promiscuous mode [ 1240.090168][T23450] md: array md0 already has disks! [ 1240.096361][T23450] md: could not open device unknown-block(7,0). [ 1240.104306][T23450] md: error, md_import_device() returned -16 [ 1240.111990][T23450] md: could not open device unknown-block(7,1). [ 1240.118425][T23450] md: error, md_import_device() returned -16 [ 1240.125869][T23450] md: could not open device unknown-block(7,2). [ 1240.135377][T23450] md: error, md_import_device() returned -16 [ 1240.138934][T23448] gretap0: left promiscuous mode [ 1240.155566][T23452] netlink: 88 bytes leftover after parsing attributes in process `syz.0.5137'. [ 1240.158201][T23448] erspan0: left promiscuous mode [ 1240.210961][T23448] ip_vti0: left promiscuous mode [ 1240.235408][T23448] ip6_vti0: left promiscuous mode [ 1240.258494][T23448] sit0: left promiscuous mode [ 1240.305569][T23448] ip6tnl0: left promiscuous mode [ 1240.332576][T23448] ip6gre0: left promiscuous mode [ 1240.337848][T23448] syz_tun: left promiscuous mode [ 1240.370759][T23448] ip6gretap0: left promiscuous mode [ 1240.384150][T23448] vcan0: left promiscuous mode [ 1240.403684][T23448] bond0: left promiscuous mode [ 1240.424805][T23448] team0: left promiscuous mode [ 1240.431422][T23448] dummy0: left promiscuous mode [ 1240.436687][T23448] nlmon0: left promiscuous mode [ 1240.443531][T23448] caif0: left promiscuous mode [ 1240.450072][T23448] batadv0: left promiscuous mode [ 1240.457412][T23448] vxcan0: left promiscuous mode [ 1240.463020][T23448] vxcan1: left promiscuous mode [ 1240.468458][T23448] veth0: left promiscuous mode [ 1240.477323][T23448] veth1: left promiscuous mode [ 1240.488488][T23448] wg0: left promiscuous mode [ 1240.494171][T23448] wg1: left promiscuous mode [ 1240.499224][T23448] wg2: left promiscuous mode [ 1240.512613][T23448] veth0_to_bridge: left promiscuous mode [ 1240.527467][T23448] bridge_slave_0: left promiscuous mode [ 1240.541402][T23448] veth1_to_bridge: left promiscuous mode [ 1240.554756][T23448] bridge_slave_1: left promiscuous mode [ 1240.574337][T23448] bond_slave_0: left promiscuous mode [ 1240.589628][T23448] veth1_to_bond: left promiscuous mode [ 1240.596815][T23448] bond_slave_1: left promiscuous mode [ 1240.605067][T23448] veth0_to_team: left promiscuous mode [ 1240.613411][T23448] team_slave_0: left promiscuous mode [ 1240.619715][T23448] veth1_to_team: left promiscuous mode [ 1240.625985][T23448] team_slave_1: left promiscuous mode [ 1240.633758][T23448] veth0_to_batadv: left promiscuous mode [ 1240.640021][T23448] batadv_slave_0: left promiscuous mode [ 1240.656353][T23448] veth1_to_batadv: left promiscuous mode [ 1240.669673][T23448] batadv_slave_1: left promiscuous mode [ 1240.683756][T23448] xfrm0: left promiscuous mode [ 1240.696422][T23448] veth0_to_hsr: left promiscuous mode [ 1240.711905][T23448] veth1_to_hsr: left promiscuous mode [ 1240.725206][T23448] hsr0: left promiscuous mode [ 1240.751578][T23448] veth1_virt_wifi: left promiscuous mode [ 1240.770285][T23448] veth0_virt_wifi: left promiscuous mode [ 1240.794044][T23448] virt_wifi0: left promiscuous mode [ 1240.834405][T23448] vlan0: left promiscuous mode [ 1240.862295][T23448] vlan1: left promiscuous mode [ 1240.901109][T23448] macvlan0: left promiscuous mode [ 1240.919207][T23448] macvlan1: left promiscuous mode [ 1240.950860][T23448] ipvlan0: left promiscuous mode [ 1240.959735][T23448] ipvlan1: left promiscuous mode [ 1240.976569][T23448] macvtap0: left promiscuous mode [ 1241.007921][T23448] macsec0: left promiscuous mode [ 1241.025901][T23448] geneve0: left promiscuous mode [ 1241.042136][T23448] geneve1: left promiscuous mode [ 1241.061474][T23448] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 1241.089557][T23448] netdevsim netdevsim4 netdevsim1: left promiscuous mode [ 1241.111902][T23448] netdevsim netdevsim4 netdevsim2: left promiscuous mode [ 1241.119451][T23448] netdevsim netdevsim4 netdevsim3: left promiscuous mode [ 1241.141790][T23448] mac80211_hwsim hwsim18 wlan0: left promiscuous mode [ 1241.149151][T23448] mac80211_hwsim hwsim19 wlan1: left promiscuous mode [ 1241.156823][T23448] ip6erspan0: left promiscuous mode [ 1241.163252][T23448] bond1: left promiscuous mode [ 1241.168455][T23448] bond2: left promiscuous mode [ 1241.174153][T23460] netlink: 44 bytes leftover after parsing attributes in process `syz.0.5140'. [ 1241.388048][T23473] syzkaller0: entered promiscuous mode [ 1241.432097][T23473] syzkaller0: entered allmulticast mode [ 1241.593271][T23495] gadgetfs: bound to dummy_udc driver [ 1241.895383][T23500] md: array md0 already has disks! [ 1241.918352][T23500] md: could not open device unknown-block(7,0). [ 1241.955081][T23500] md: error, md_import_device() returned -16 [ 1241.970541][T12628] usb 1-1: new full-speed USB device number 94 using dummy_hcd [ 1242.005910][T23503] md: could not open device unknown-block(7,1). [ 1242.037350][T23503] md: error, md_import_device() returned -16 [ 1242.084207][T23500] md: could not open device unknown-block(7,2). [ 1242.154691][T23500] md: error, md_import_device() returned -16 [ 1242.335735][T23498] gadgetfs: suspended from state 2 [ 1242.713963][T23505] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5148'. [ 1246.426331][T23512] netlink: 44 bytes leftover after parsing attributes in process `syz.4.5151'. [ 1246.684839][T23534] syzkaller0: entered promiscuous mode [ 1246.688280][T23535] md: array md0 already has disks! [ 1246.701792][T23534] syzkaller0: entered allmulticast mode [ 1246.717853][T23535] md: could not open device unknown-block(7,0). [ 1246.738666][T23535] md: error, md_import_device() returned -16 [ 1246.790823][T23539] md: could not open device unknown-block(7,1). [ 1246.797205][T23539] md: error, md_import_device() returned -16 [ 1246.849188][T23535] md: could not open device unknown-block(7,2). [ 1246.872895][T23535] md: error, md_import_device() returned -16 [ 1247.005052][T23545] netlink: 108 bytes leftover after parsing attributes in process `syz.2.5158'. [ 1248.509817][T23564] syzkaller0: entered promiscuous mode [ 1248.516000][T23564] syzkaller0: entered allmulticast mode [ 1248.643766][T23567] md: array md0 already has disks! [ 1248.658846][T23567] md: could not open device unknown-block(7,0). [ 1248.665443][T23567] md: error, md_import_device() returned -16 [ 1248.673114][T23567] md: could not open device unknown-block(7,1). [ 1248.679851][T23567] md: error, md_import_device() returned -16 [ 1248.699212][T23567] md: could not open device unknown-block(7,2). [ 1248.718907][T23567] md: error, md_import_device() returned -16 [ 1249.963308][T23573] netlink: 108 bytes leftover after parsing attributes in process `syz.3.5168'. [ 1251.919755][T23596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1257.951013][T23623] md: array md0 already has disks! [ 1257.957988][T23623] md: could not open device unknown-block(7,0). [ 1257.967551][T23623] md: error, md_import_device() returned -16 [ 1257.975241][T23623] md: could not open device unknown-block(7,1). [ 1257.982983][T23623] md: error, md_import_device() returned -16 [ 1257.993102][T23623] md: could not open device unknown-block(7,2). [ 1257.999914][T23623] md: error, md_import_device() returned -16 [ 1259.760613][T12627] usb 4-1: new high-speed USB device number 124 using dummy_hcd [ 1259.980491][T12627] usb 4-1: Using ep0 maxpacket: 32 [ 1259.988324][T12627] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 1259.999896][T12627] usb 4-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 1260.011047][T12627] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 1260.027588][T12627] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 1260.036972][T12627] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.058249][T12627] usb 4-1: Product: syz [ 1260.064220][T12627] usb 4-1: Manufacturer: syz [ 1260.068995][T12627] usb 4-1: SerialNumber: syz [ 1260.091497][T12627] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 1260.118911][T12627] imon 4-1:155.0: unable to initialize intf0, err -19 [ 1260.135332][T12627] imon:imon_probe: failed to initialize context! [ 1260.142297][T12627] imon 4-1:155.0: unable to register, err -19 [ 1261.210682][T12627] usb 1-1: new high-speed USB device number 95 using dummy_hcd [ 1261.390463][T12627] usb 1-1: Using ep0 maxpacket: 8 [ 1261.408308][T12627] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1261.438660][T12627] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.463568][T12627] usb 1-1: Product: syz [ 1261.472541][T12627] usb 1-1: Manufacturer: syz [ 1261.482994][T12627] usb 1-1: SerialNumber: syz [ 1261.504911][T12627] usb 1-1: config 0 descriptor?? [ 1261.576007][T23636] loop4: detected capacity change from 0 to 40427 [ 1261.595066][T23636] F2FS-fs (loop4): Invalid log_blocksize (64), supports only 12 [ 1261.603950][T23636] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 1261.643638][T23636] F2FS-fs (loop4): invalid crc value [ 1261.814335][T12627] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1261.994407][T23636] F2FS-fs (loop4): Start checkpoint disabled! [ 1262.280275][T23636] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 1262.320240][T23636] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e6 [ 1263.062730][T16393] usb 4-1: USB disconnect, device number 124 [ 1263.335515][ T1081] kworker/u4:6: attempt to access beyond end of device [ 1263.335515][ T1081] loop4: rw=1, sector=45096, nr_sectors = 16 limit=40427 [ 1263.385605][ T1081] kworker/u4:6: attempt to access beyond end of device [ 1263.385605][ T1081] loop4: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 1263.446781][ T1081] F2FS-fs (loop4): Stopped filesystem due to reason: 3 [ 1263.555440][T23659] syzkaller0: entered promiscuous mode [ 1263.561386][T23659] syzkaller0: entered allmulticast mode [ 1263.625728][T12627] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 1263.655794][T12627] usb 1-1: USB disconnect, device number 95 [ 1263.780935][ T5817] usb 4-1: new high-speed USB device number 125 using dummy_hcd [ 1263.970735][ T5817] usb 4-1: Using ep0 maxpacket: 16 [ 1263.981898][ T5817] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1263.993846][ T5817] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1264.015413][ T5817] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= f.89 [ 1264.040561][ T5817] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 1264.048836][ T5817] usb 4-1: SerialNumber: syz [ 1264.070195][ T5817] usb 4-1: 0:2 : does not exist [ 1264.137988][T23664] i2c i2c-0: Invalid block write size 59 [ 1264.533088][ T5817] usb 4-1: 5:0: cannot get min/max values for control 2 (id 5) [ 1264.563661][ T5817] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1264.631519][ T5817] usb 4-1: 5:0: cannot get min/max values for control 3 (id 5) [ 1264.673983][ T5817] usb 4-1: USB disconnect, device number 125 [ 1265.924451][ T5085] Bluetooth: hci3: Received unexpected HCI Event 0x00 [ 1268.372897][T23664] lo: entered promiscuous mode [ 1268.378423][T23664] tunl0: entered promiscuous mode [ 1268.384319][T23664] gre0: entered promiscuous mode [ 1268.389541][T23664] gretap0: entered promiscuous mode [ 1268.395063][T23664] erspan0: entered promiscuous mode [ 1268.401949][T23664] ip_vti0: entered promiscuous mode [ 1268.407621][T23664] ip6_vti0: entered promiscuous mode [ 1268.450842][T23664] sit0: entered promiscuous mode [ 1268.456046][T23664] ip6tnl0: entered promiscuous mode [ 1268.469224][T23664] ip6gre0: entered promiscuous mode [ 1268.490025][T23664] syz_tun: entered promiscuous mode [ 1268.510738][T23664] ip6gretap0: entered promiscuous mode [ 1268.516613][T23664] vcan0: entered promiscuous mode [ 1268.539629][T23664] bond0: entered promiscuous mode [ 1268.550429][T23664] bond_slave_0: entered promiscuous mode [ 1268.560845][T23664] bond_slave_1: entered promiscuous mode [ 1268.566810][T23664] team0: entered promiscuous mode [ 1268.586808][T23664] team_slave_0: entered promiscuous mode [ 1268.597472][T23664] team_slave_1: entered promiscuous mode [ 1268.607702][T23664] dummy0: entered promiscuous mode [ 1268.614351][T23664] nlmon0: entered promiscuous mode [ 1268.619889][T23664] caif0: entered promiscuous mode [ 1268.626011][T23664] batadv0: entered promiscuous mode [ 1268.632002][T23664] vxcan0: entered promiscuous mode [ 1268.637620][T23664] vxcan1: entered promiscuous mode [ 1268.643345][T23664] veth0: entered promiscuous mode [ 1268.648578][T23664] veth1: entered promiscuous mode [ 1268.670803][T23664] wg0: entered promiscuous mode [ 1268.675904][T23664] wg1: entered promiscuous mode [ 1268.688352][T23664] wg2: entered promiscuous mode [ 1268.699157][T23664] veth0_to_bridge: entered promiscuous mode [ 1268.713800][T23664] bridge_slave_0: entered promiscuous mode [ 1268.720081][T23664] veth1_to_bridge: entered promiscuous mode [ 1268.727066][T23664] bridge_slave_1: entered promiscuous mode [ 1268.733769][T23664] veth0_to_bond: entered promiscuous mode [ 1268.740136][T23664] veth1_to_bond: entered promiscuous mode [ 1268.747192][T23664] veth0_to_team: entered promiscuous mode [ 1268.753978][T23664] veth1_to_team: entered promiscuous mode [ 1268.761004][T23664] veth0_to_batadv: entered promiscuous mode [ 1268.767326][T23664] batadv_slave_0: entered promiscuous mode [ 1268.782901][T23664] veth1_to_batadv: entered promiscuous mode [ 1268.789615][T23664] batadv_slave_1: entered promiscuous mode [ 1268.806781][T23664] xfrm0: entered promiscuous mode [ 1268.812541][T23664] veth0_to_hsr: entered promiscuous mode [ 1268.818939][T23664] veth1_to_hsr: entered promiscuous mode [ 1268.835115][T23664] hsr0: entered promiscuous mode [ 1268.845813][T23664] veth1_virt_wifi: entered promiscuous mode [ 1268.857277][T23664] veth0_virt_wifi: entered promiscuous mode [ 1268.876681][T23664] virt_wifi0: entered promiscuous mode [ 1268.883388][T23664] vlan0: entered promiscuous mode [ 1268.888799][T23664] vlan1: entered promiscuous mode [ 1268.912216][T23664] macvlan0: entered promiscuous mode [ 1268.918186][T23664] macvlan1: entered promiscuous mode [ 1268.924424][T23664] ipvlan0: entered promiscuous mode [ 1268.930019][T23664] ipvlan1: entered promiscuous mode [ 1268.941431][T23664] macvtap0: entered promiscuous mode [ 1268.946944][T23664] macsec0: entered promiscuous mode [ 1268.953406][T23664] geneve0: entered promiscuous mode [ 1268.958939][T23664] geneve1: entered promiscuous mode [ 1268.968743][T23664] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 1268.987439][T23664] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 1268.997931][T23664] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 1269.013255][T23664] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 1269.021724][T23664] mac80211_hwsim hwsim18 wlan0: entered promiscuous mode [ 1269.029167][T23664] mac80211_hwsim hwsim19 wlan1: entered promiscuous mode [ 1269.038328][T23664] ip6erspan0: entered promiscuous mode [ 1269.044233][T23664] bond1: entered promiscuous mode [ 1269.049519][T23664] bond2: entered promiscuous mode [ 1269.076211][T23687] lo: left promiscuous mode [ 1269.083962][T23687] tunl0: left promiscuous mode [ 1269.090602][T23687] gre0: left promiscuous mode [ 1269.098091][T23687] gretap0: left promiscuous mode [ 1269.105744][T23687] erspan0: left promiscuous mode [ 1269.113217][T23687] ip_vti0: left promiscuous mode [ 1269.119953][T23687] ip6_vti0: left promiscuous mode [ 1269.128337][T23687] sit0: left promiscuous mode [ 1269.140974][T23687] ip6tnl0: left promiscuous mode [ 1269.148327][T23687] ip6gre0: left promiscuous mode [ 1269.155717][T23687] syz_tun: left promiscuous mode [ 1269.163229][T23687] ip6gretap0: left promiscuous mode [ 1269.171116][T23687] bridge0: left promiscuous mode [ 1269.178142][T23687] vcan0: left promiscuous mode [ 1269.184722][T23687] bond0: left promiscuous mode [ 1269.192012][T23687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1269.200015][T23687] team0: left promiscuous mode [ 1269.208516][T23687] 8021q: adding VLAN 0 to HW filter on device team0 [ 1269.216834][T23687] dummy0: left promiscuous mode [ 1269.224719][T23687] nlmon0: left promiscuous mode [ 1269.250190][T23687] caif0: left promiscuous mode [ 1269.255772][T23687] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1269.470649][T15022] usb 3-1: new high-speed USB device number 109 using dummy_hcd [ 1270.058042][T15022] usb 3-1: Using ep0 maxpacket: 8 [ 1271.029301][T15022] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 1271.037714][T15022] usb 3-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1271.048695][T15022] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1271.058378][T15022] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1271.550446][T16397] usb 3-1: USB disconnect, device number 109 [ 1272.037056][T23777] md: array md0 already has disks! [ 1272.073866][T23777] md: could not open device unknown-block(7,0). [ 1272.140506][T23777] md: error, md_import_device() returned -16 [ 1272.149502][T23780] md: could not open device unknown-block(7,1). [ 1272.206152][T23780] md: error, md_import_device() returned -16 [ 1272.236414][T23782] md: could not open device unknown-block(7,2). [ 1272.282619][T23782] md: error, md_import_device() returned -16 [ 1272.340332][T23779] syzkaller0: entered promiscuous mode [ 1272.372842][T23779] syzkaller0: entered allmulticast mode [ 1272.544771][T23777] md/raid:md0: not clean -- starting background reconstruction [ 1272.546097][T23787] i2c i2c-0: Invalid block write size 59 [ 1272.571518][T23777] md/raid:md0: invalid chunk size 0 [ 1272.597268][T23777] md: pers->run() failed ... [ 1272.678695][T23780] md: could not open device unknown-block(7,3). [ 1272.688006][T23780] md: error, md_import_device() returned -16 [ 1276.505622][T23787] lo: entered promiscuous mode [ 1276.534037][T23787] tunl0: entered promiscuous mode [ 1276.557489][T23787] gre0: entered promiscuous mode [ 1276.691226][T23787] gretap0: entered promiscuous mode [ 1276.760241][T23787] erspan0: entered promiscuous mode [ 1276.812166][T23787] ip_vti0: entered promiscuous mode [ 1276.829326][T23787] ip6_vti0: entered promiscuous mode [ 1276.880000][T23787] sit0: entered promiscuous mode [ 1276.972691][T23787] ip6tnl0: entered promiscuous mode [ 1277.041259][T23787] ip6gre0: entered promiscuous mode [ 1277.328093][T23787] syz_tun: entered promiscuous mode [ 1277.706003][T23787] ip6gretap0: entered promiscuous mode [ 1277.813670][T23787] bridge0: port 2(bridge_slave_1) entered disabled state [ 1277.821962][T23787] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.932384][T23787] bridge0: entered promiscuous mode [ 1278.086579][T23787] vcan0: entered promiscuous mode [ 1278.108156][T23787] bond0: entered promiscuous mode [ 1278.116780][T23787] bond_slave_0: entered promiscuous mode [ 1278.128848][T23787] bond_slave_1: entered promiscuous mode [ 1278.157876][T23787] team0: entered promiscuous mode [ 1278.163364][T23787] team_slave_0: entered promiscuous mode [ 1278.169176][T23787] team_slave_1: entered promiscuous mode [ 1278.196120][T23787] dummy0: entered promiscuous mode [ 1278.219194][T23787] nlmon0: entered promiscuous mode [ 1278.231949][T23787] caif0: entered promiscuous mode [ 1278.246735][T23787] batadv0: entered promiscuous mode [ 1278.269244][T23787] vxcan0: entered promiscuous mode [ 1278.281576][T23787] vxcan1: entered promiscuous mode [ 1278.296554][T23787] veth0: entered promiscuous mode [ 1278.324197][T23787] veth1: entered promiscuous mode [ 1278.349736][T23787] wg0: entered promiscuous mode [ 1278.370149][T23787] wg1: entered promiscuous mode [ 1278.389377][T23787] wg2: entered promiscuous mode [ 1278.406562][T23787] veth0_to_bridge: entered promiscuous mode [ 1278.444781][T23787] veth1_to_bridge: entered promiscuous mode [ 1278.482940][T23787] veth0_to_bond: entered promiscuous mode [ 1278.519051][T23787] veth1_to_bond: entered promiscuous mode [ 1278.547864][T23787] veth0_to_team: entered promiscuous mode [ 1278.584413][T23787] veth1_to_team: entered promiscuous mode [ 1278.622432][T23787] veth0_to_batadv: entered promiscuous mode [ 1278.634442][T23787] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1278.653637][T23787] batadv_slave_0: entered promiscuous mode [ 1278.678950][T23787] veth1_to_batadv: entered promiscuous mode [ 1278.700190][T23787] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1278.715286][T23787] batadv_slave_1: entered promiscuous mode [ 1278.739144][T23787] xfrm0: entered promiscuous mode [ 1278.763955][T23787] veth0_to_hsr: entered promiscuous mode [ 1278.803226][T23787] veth1_to_hsr: entered promiscuous mode [ 1278.843485][T23787] hsr0: entered promiscuous mode [ 1278.866454][T23787] veth1_virt_wifi: entered promiscuous mode [ 1278.891404][T23787] veth0_virt_wifi: entered promiscuous mode [ 1278.903686][T23787] virt_wifi0: entered promiscuous mode [ 1278.984337][T23787] vlan0: entered promiscuous mode [ 1278.990219][T23787] vlan1: entered promiscuous mode [ 1279.010135][T23787] macvlan0: entered promiscuous mode [ 1279.032399][T23787] macvlan1: entered promiscuous mode [ 1279.047756][T23787] ipvlan0: entered promiscuous mode [ 1279.059163][T23787] ipvlan1: entered promiscuous mode [ 1279.100739][T23787] macvtap0: entered promiscuous mode [ 1279.125313][T23787] macsec0: entered promiscuous mode [ 1279.148735][T23787] geneve0: entered promiscuous mode [ 1279.171121][T23787] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.180617][T23787] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.189554][T23787] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.199126][T23787] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1279.208326][T23787] geneve1: entered promiscuous mode [ 1279.232074][T23787] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1279.251063][T23787] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1279.271140][T23787] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1279.295223][T23787] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1279.316092][T23787] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 1279.342447][T23787] mac80211_hwsim hwsim25 wlan1: entered promiscuous mode [ 1279.389367][T23800] veth0_to_bond: left promiscuous mode [ 1280.958071][T23847] md: array md0 already has disks! [ 1280.991293][T23847] md: could not open device unknown-block(7,0). [ 1280.997676][T23847] md: error, md_import_device() returned -16 [ 1281.033044][T23847] md: could not open device unknown-block(7,1). [ 1281.067753][T23841] overlay: Unknown parameter 'dont_measure' [ 1281.075664][T23847] md: error, md_import_device() returned -16 [ 1281.091627][T23854] md: could not open device unknown-block(7,2). [ 1281.105277][T23853] loop4: detected capacity change from 0 to 256 [ 1281.108645][T23854] md: error, md_import_device() returned -16 [ 1281.156703][ T28] audit: type=1800 audit(1785324034.458:77): pid=23841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.5217" name="enable" dev="configfs" ino=74563 res=0 errno=0 [ 1281.229988][T23842] [ 1281.232490][T23842] ====================================================== [ 1281.239988][T23842] WARNING: possible circular locking dependency detected [ 1281.247313][T23842] syzkaller #0 Not tainted [ 1281.252026][T23842] ------------------------------------------------------ [ 1281.259188][T23842] syz.3.5217/23842 is trying to acquire lock: [ 1281.265683][T23842] ffffffff8db2b450 (&subsys->su_mutex){+.+.}-{3:3}, at: configfs_rmdir+0x63c/0x980 [ 1281.275297][T23842] [ 1281.275297][T23842] but task is already holding lock: [ 1281.282784][T23842] ffff88805e660b80 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1281.287683][T23853] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1281.292689][T23842] [ 1281.292689][T23842] which lock already depends on the new lock. [ 1281.292689][T23842] [ 1281.292700][T23842] [ 1281.292700][T23842] the existing dependency chain (in reverse order) is: [ 1281.292707][T23842] [ 1281.292707][T23842] -> #3 (&sb->s_type->i_mutex_key#27){++++}-{3:3}: [ 1281.292744][T23842] down_write+0x97/0x200 [ 1281.339621][T23842] configfs_depend_item_unlocked+0x157/0x430 [ 1281.347031][T23842] usbg_make_tpg+0x1f7/0x580 [ 1281.352279][T23842] target_fabric_make_tpg+0xa4/0x6d0 [ 1281.358369][T23842] configfs_mkdir+0x515/0x9e0 [ 1281.363787][T23842] vfs_mkdir+0x2a5/0x470 [ 1281.369155][T23842] do_mkdirat+0x1dc/0x450 [ 1281.374334][T23842] __x64_sys_mkdir+0x6e/0x80 [ 1281.379580][T23842] do_syscall_64+0x55/0xb0 [ 1281.384601][T23842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.391210][T23842] [ 1281.391210][T23842] -> #2 (&opts->dep_lock){+.+.}-{3:3}: [ 1281.399252][T23842] __mutex_lock+0x135/0xc80 [ 1281.404291][T23842] usbg_make_tpg+0x148/0x580 [ 1281.409423][T23842] target_fabric_make_tpg+0xa4/0x6d0 [ 1281.415333][T23842] configfs_mkdir+0x515/0x9e0 [ 1281.420832][T23842] vfs_mkdir+0x2a5/0x470 [ 1281.425880][T23842] do_mkdirat+0x1dc/0x450 [ 1281.430743][T23842] __x64_sys_mkdir+0x6e/0x80 [ 1281.435968][T23842] do_syscall_64+0x55/0xb0 [ 1281.441082][T23842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.447783][T23842] [ 1281.447783][T23842] -> #1 (tpg_instances_lock){+.+.}-{3:3}: [ 1281.456052][T23842] __mutex_lock+0x135/0xc80 [ 1281.461266][T23842] usbg_make_tpg+0xf8/0x580 [ 1281.466567][T23842] target_fabric_make_tpg+0xa4/0x6d0 [ 1281.472574][T23842] configfs_mkdir+0x515/0x9e0 [ 1281.477957][T23842] vfs_mkdir+0x2a5/0x470 [ 1281.482997][T23842] do_mkdirat+0x1dc/0x450 [ 1281.487975][T23842] __x64_sys_mkdir+0x6e/0x80 [ 1281.493184][T23842] do_syscall_64+0x55/0xb0 [ 1281.498300][T23842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.504932][T23842] [ 1281.504932][T23842] -> #0 (&subsys->su_mutex){+.+.}-{3:3}: [ 1281.513011][T23842] __lock_acquire+0x37ef/0x7d80 [ 1281.518944][T23842] lock_acquire+0x19e/0x420 [ 1281.523982][T23842] __mutex_lock+0x135/0xc80 [ 1281.529287][T23842] configfs_rmdir+0x63c/0x980 [ 1281.534503][T23842] vfs_rmdir+0x352/0x4b0 [ 1281.539629][T23842] do_rmdir+0x29f/0x590 [ 1281.544319][T23842] __x64_sys_rmdir+0x49/0x50 [ 1281.549532][T23842] do_syscall_64+0x55/0xb0 [ 1281.554482][T23842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.561012][T23842] [ 1281.561012][T23842] other info that might help us debug this: [ 1281.561012][T23842] [ 1281.571263][T23842] Chain exists of: [ 1281.571263][T23842] &subsys->su_mutex --> &opts->dep_lock --> &sb->s_type->i_mutex_key#27 [ 1281.571263][T23842] [ 1281.585633][T23842] Possible unsafe locking scenario: [ 1281.585633][T23842] [ 1281.593182][T23842] CPU0 CPU1 [ 1281.598651][T23842] ---- ---- [ 1281.604065][T23842] lock(&sb->s_type->i_mutex_key#27); [ 1281.609642][T23842] lock(&opts->dep_lock); [ 1281.616788][T23842] lock(&sb->s_type->i_mutex_key#27); [ 1281.624977][T23842] lock(&subsys->su_mutex); [ 1281.629669][T23842] [ 1281.629669][T23842] *** DEADLOCK *** [ 1281.629669][T23842] [ 1281.637821][T23842] 3 locks held by syz.3.5217/23842: [ 1281.643053][T23842] #0: ffff888018f22418 (sb_writers#22){.+.+}-{0:0}, at: mnt_want_write+0x41/0x90 [ 1281.652529][T23842] #1: ffff88805e660670 (&sb->s_type->i_mutex_key#7/1){+.+.}-{3:3}, at: do_rmdir+0x1c6/0x590 [ 1281.662758][T23842] #2: ffff88805e660b80 (&sb->s_type->i_mutex_key#27){++++}-{3:3}, at: vfs_rmdir+0xee/0x4b0 [ 1281.672885][T23842] [ 1281.672885][T23842] stack backtrace: [ 1281.678870][T23842] CPU: 0 PID: 23842 Comm: syz.3.5217 Not tainted syzkaller #0 [ 1281.686711][T23842] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1281.696884][T23842] Call Trace: [ 1281.700430][T23842] [ 1281.703531][T23842] dump_stack_lvl+0x18c/0x250 [ 1281.708452][T23842] ? load_image+0x420/0x420 [ 1281.713089][T23842] ? show_regs_print_info+0x20/0x20 [ 1281.718494][T23842] ? print_circular_bug+0x12b/0x1a0 [ 1281.723925][T23842] check_noncircular+0x2fc/0x400 [ 1281.729093][T23842] ? print_deadlock_bug+0x5d0/0x5d0 [ 1281.734499][T23842] ? lockdep_lock+0xf5/0x230 [ 1281.739169][T23842] ? _find_first_zero_bit+0xd6/0x100 [ 1281.744740][T23842] __lock_acquire+0x37ef/0x7d80 [ 1281.749890][T23842] ? verify_lock_unused+0x140/0x140 [ 1281.755580][T23842] ? verify_lock_unused+0x140/0x140 [ 1281.761001][T23842] lock_acquire+0x19e/0x420 [ 1281.765548][T23842] ? configfs_rmdir+0x63c/0x980 [ 1281.770861][T23842] ? __might_sleep+0xe0/0xe0 [ 1281.775575][T23842] ? read_lock_is_recursive+0x20/0x20 [ 1281.781072][T23842] __mutex_lock+0x135/0xc80 [ 1281.785697][T23842] ? configfs_rmdir+0x63c/0x980 [ 1281.790755][T23842] ? configfs_rmdir+0x63c/0x980 [ 1281.795798][T23842] ? mutex_lock_nested+0x20/0x20 [ 1281.800749][T23842] ? __lock_acquire+0x7d80/0x7d80 [ 1281.805888][T23842] ? lockref_put_or_lock+0x72/0xb0 [ 1281.811032][T23842] ? dput+0x3b/0x1e0 [ 1281.814939][T23842] ? dput+0x3b/0x1e0 [ 1281.818934][T23842] configfs_rmdir+0x63c/0x980 [ 1281.823724][T23842] vfs_rmdir+0x352/0x4b0 [ 1281.828070][T23842] do_rmdir+0x29f/0x590 [ 1281.832334][T23842] ? __check_object_size+0x4fc/0xa40 [ 1281.837625][T23842] ? d_delete_notify+0x150/0x150 [ 1281.842748][T23842] ? getname_flags+0x20a/0x500 [ 1281.847549][T23842] __x64_sys_rmdir+0x49/0x50 [ 1281.852254][T23842] do_syscall_64+0x55/0xb0 [ 1281.856708][T23842] ? clear_bhb_loop+0x40/0x90 [ 1281.861412][T23842] ? clear_bhb_loop+0x40/0x90 [ 1281.866214][T23842] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1281.872215][T23842] RIP: 0033:0x7fd4ae39de99 [ 1281.876890][T23842] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1281.897158][T23842] RSP: 002b:00007fd4af32c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000054 [ 1281.905840][T23842] RAX: ffffffffffffffda RBX: 00007fd4ae626090 RCX: 00007fd4ae39de99 [ 1281.914185][T23842] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000280 [ 1281.922166][T23842] RBP: 00007fd4ae433eaf R08: 0000000000000000 R09: 0000000000000000 [ 1281.930235][T23842] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1281.938213][T23842] R13: 00007fd4ae626128 R14: 00007fd4ae626090 R15: 00007ffc861466b8 [ 1281.946757][T23842] [ 1281.979341][T23847] md/raid:md0: not clean -- starting background reconstruction [ 1282.004656][T23847] md/raid:md0: invalid chunk size 0 [ 1282.012967][T23847] md: pers->run() failed ... [ 1282.063432][T23853] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck.