last executing test programs: 25m57.218735386s ago: executing program 0 (id=631): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$IPSET_CMD_DESTROY(r2, 0x0, 0x44014) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@setlink={0x2c, 0x13, 0x1, 0x70bd29, 0x25dfdbf8, {0x0, 0x0, 0x0, r1, 0x3007, 0x3c59}, [@IFLA_ADDRESS={0xa, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1b}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8804) 25m56.040908039s ago: executing program 0 (id=632): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f00000000c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r4, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) write(0xffffffffffffffff, 0x0, 0x0) 25m53.738526826s ago: executing program 0 (id=634): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$kcm(0x2, 0x200000000000001, 0x0) socket$igmp(0x2, 0x3, 0x2) sched_setscheduler(0x0, 0x0, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0xc0d4) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x3}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x1) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r2, &(0x7f0000000040)={0x50, 0x0, r3, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r2, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_fuse_handle_req(r2, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r2, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) 25m46.893511604s ago: executing program 0 (id=644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setparam(r2, &(0x7f00000006c0)=0x4) r5 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r5, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x0, 0x0, 0xffffffff}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x12) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000140)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x4000000, @mcast1}}}, 0x32) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x34, r1, 0x1, 0x0, 0x0, {0x4f}, [@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 25m45.107959013s ago: executing program 0 (id=646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000002c0)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r2, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x7623415862a2987c, 0x9, 0x1}, &(0x7f0000000040)=0x10) 25m42.905706931s ago: executing program 0 (id=653): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 25m35.359085243s ago: executing program 1 (id=662): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f00000001c0), 0x4008, &(0x7f0000000600)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) statfs(0x0, 0x0) read$FUSE(r0, &(0x7f0000002100)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000380)={0x50, 0x0, r1}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000004280)="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", 0x2000, &(0x7f0000004200)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)={0x60, 0xffffffffffffffb4, 0x8, {{0x480000000000000, 0x80dc0, 0x0, 0xfffffffffffffffc, 0x3, 0x0, 0x80000000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 25m31.071173666s ago: executing program 1 (id=670): socket$igmp(0x2, 0x3, 0x2) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) syz_emit_ethernet(0x377, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) socket$kcm(0x10, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000480)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x14}}]}, &(0x7f0000000100)=0x10) add_key(&(0x7f0000000040)='rxrpc\x00', 0x0, &(0x7f0000000340)="0000000000000002ff69000000", 0xd, 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000840)={r2, @in6={{0xa, 0x4e23, 0xe84, @empty, 0x129}}, 0x2, 0x2, 0x0, 0x2, 0x5, 0x8, 0x4}, 0x9c) 25m30.024399975s ago: executing program 1 (id=672): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @empty}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgget(0x0, 0x40b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) 25m27.663831293s ago: executing program 32 (id=653): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001400)=ANY=[@ANYBLOB="0100000042000000060000000800000000000000", @ANYRES32, @ANYBLOB], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x8001, 0x0, r0}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x8000, r1}, 0x38) 25m26.029625132s ago: executing program 1 (id=676): prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x200000000001, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r3, 0x11a, 0x5, 0x0, &(0x7f0000000040)=0x7ccd4176) write(0xffffffffffffffff, 0x0, 0x0) 25m22.831982649s ago: executing program 1 (id=681): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB], 0x90}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800000041000701fefffffffeffffff017c0000040042800c00018006000600800a000014000280100015800c"], 0x38}, 0x1, 0x0, 0x0, 0x4048015}, 0xc000) syz_io_uring_setup(0xfff, &(0x7f0000000000)={0x0, 0x9a81, 0x400, 0x2, 0x14d}, &(0x7f0000000080), &(0x7f00000000c0), &(0x7f0000000140)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_dev$sndpcmc(&(0x7f0000000120), 0x1, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) rt_sigprocmask(0x0, &(0x7f0000001480)={[0xffffffffffffffff]}, 0x0, 0x8) r4 = getpgrp(0x0) r5 = getpgrp(0x0) r6 = gettid() rt_tgsigqueueinfo(r5, r6, 0x16, &(0x7f00000000c0)={0x3f, 0x8000006, 0x1}) rt_tgsigqueueinfo(r4, r6, 0x1f, &(0x7f00000003c0)={0x21, 0x5, 0x10004}) mknodat$null(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0, 0x103) r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000140), 0x0, &(0x7f0000002280)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x8000}}) statx(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x2000, 0x800, 0x0) 25m20.317867126s ago: executing program 1 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @empty}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgget(0x0, 0x40b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) 25m5.250067985s ago: executing program 33 (id=683): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) getrlimit(0x7, &(0x7f00000000c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x20008005}, 0x10888) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f00000000c0)={@multicast1, @empty}, 0xc) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) msgget(0x0, 0x40b) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./debug\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./debug\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./debug/bluetooth/hci0/msft_opcode\x00', 0x2, 0x0) read$FUSE(r2, 0x0, 0x0) ioctl$int_in(0xffffffffffffffff, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(0xffffffffffffffff, 0x4028af11, &(0x7f0000000240)={0x1, 0x1, 0x0, &(0x7f0000000200)=""/51, 0x0}) 22.706254447s ago: executing program 2 (id=3110): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r5, 0xd0087000) r6 = dup(r5) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x1fe, 0x16) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/36, 0x24}, {0x0}, {0x0}], 0x3}, 0x1}], 0x2, 0x40002000, 0x0) 19.265272265s ago: executing program 2 (id=3114): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_open_dev$usbfs(&(0x7f00000002c0), 0xf27, 0x20183) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x3c}}, 0x24000841) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) write(r7, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=3', 0x37) 14.921218103s ago: executing program 5 (id=3120): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) 13.146454306s ago: executing program 5 (id=3122): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") syz_mount_image$vfat(&(0x7f00000005c0), &(0x7f00000000c0)='./file0\x00', 0x10108c0, &(0x7f0000000740)=ANY=[@ANYBLOB='iocharset=utf8,shortname=winnt,shortname=win95\x00\x00ni_xlate=0,showexec,shortname=winnt,shortname=win95,nonumtairodir,nonumtail=0,shortname=mixed,nfs=nostale_ro,utf8=0,\x00', @ANYRESHEX, @ANYRES64, @ANYRESHEX, @ANYRESDEC], 0x1, 0x26c, &(0x7f0000000340)="$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") socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xd, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x1000000000a) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000025300)=""/102392, 0x18ff8) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000055c0)={0x28, 0x2d, 0x107, 0x0, 0x25dfdbfc, {0x9, 0x7c}, [@nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0xb3}]}, @nested={0xc, 0x2, 0x0, 0x1, [@nested={0x6, 0x2, 0x0, 0x1, [@generic="cb78"]}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40088d1}, 0xc010) r2 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x4, 0x0, 0xffffffffffff59fa, 0x0, 0x6}, {0x0, 0x0, 0xffffffffffff7fff, 0xcd6}, 0x80000, 0x0, 0x1, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xe, 0x8, 0x7}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) 12.85773587s ago: executing program 3 (id=3123): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r5, 0xd0087000) r6 = dup(r5) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x1fe, 0x16) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/36, 0x24}, {0x0}, {0x0}], 0x3}, 0x1}], 0x2, 0x40002000, 0x0) 12.791916766s ago: executing program 2 (id=3124): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f00000003c0)) keyctl$get_persistent(0x16, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 10.558001917s ago: executing program 3 (id=3126): syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x1, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x7, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff}}}, &(0x7f0000000480)) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x40000000015, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_open_dev$video(0x0, 0x1, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0xa, 0x1ac8, 0x7, 0x4880, 0xffffffffffffffff, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x0, 0x2, 0x6}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB="1800"/12, @ANYRES32=r0, @ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000900)=r1, 0x4) socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000840)=@hci={0x1f, 0x7f, 0x3}, 0x80, 0x0}, 0x20000041) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, 0x0, 0x0) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x24, 0x1, 0x4, 0x1, 0x0, 0x0, {0x2}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}, @NFULA_CFG_QTHRESH={0x8, 0x5, 0x1, 0x0, 0xfff}]}, 0x24}}, 0x48044) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x20}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000500)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_NEWRULE={0x34, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0xb0}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r4, 0x0, 0x20000110) sendto$inet(r3, &(0x7f0000000600)="0011223344", 0x5, 0x0, &(0x7f0000000700)={0x2, 0x1234, @loopback}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) nanosleep(0x0, 0x0) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffff7f}]}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r6}, 0x8) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x7f00, 0x80, 0x9, 0x9bfb, {{0xf, 0x4, 0x2, 0x9, 0x3c, 0x66, 0x0, 0xfd, 0x2f, 0x0, @rand_addr=0x64010100, @empty, {[@cipso={0x86, 0x6, 0x2}, @ra={0x94, 0x4}, @end, @lsrr={0x83, 0x1b, 0xc2, [@broadcast, @private=0xa010102, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000003c0)={'syztnl1\x00', 0x0}) socket$inet_tcp(0x2, 0x1, 0x0) 10.317949738s ago: executing program 4 (id=3127): syz_mount_image$vfat(&(0x7f0000000240), &(0x7f0000000280)='./file0\x00', 0x8000, &(0x7f0000000740)=ANY=[@ANYBLOB="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", @ANYBLOB="5490f41e89db5c6987bb89944e3ce8a9d74aa557beeb12bf7bf4a19bec956b719f048f1e043475577b7adb3114dbb00a614a03808dfe14f5f5c2dd1b71c4d5a6a09435057b932b0b", @ANYRESHEX], 0x3, 0x240, &(0x7f0000000500)="$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") bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000044) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000400)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff0400", @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000e027030000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000065"], 0x254}}, 0x0) write$binfmt_register(0xffffffffffffffff, &(0x7f00000002c0)={0x3a, 'syz3', 0x3a, 'M', 0x3a, 0xffffffffffffffc0, 0x3a, 'syz', 0x3a, '/dev/snd/pcmC#D#c\x00', 0x3a, './file0'}, 0x3c) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000011c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}, 0x1, 0x0, 0x0, 0x4}, 0x0) 8.50569524s ago: executing program 2 (id=3128): r0 = signalfd(0xffffffffffffffff, &(0x7f00000002c0)={[0x7fffffff]}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getrlimit(0xd, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) r4 = fcntl$dupfd(r3, 0x0, r3) ioctl$USBDEVFS_SUBMITURB(r4, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x0, &(0x7f0000000080)={0x80, 0x0, 0x0, 0x0, 0x7995}, 0xfff7, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) ioctl$USBDEVFS_REAPURB(r4, 0x4004550c, 0x0) ptrace$pokeuser(0x6, 0x0, 0x358, 0xffff8881f5c0a000) ioctl$BTRFS_IOC_BALANCE_V2(r3, 0xc4009420, 0x0) ioctl$BTRFS_IOC_RM_DEV_V2(r0, 0x5000943a, &(0x7f0000000e40)={{}, 0x0, 0x0, @inherit={0x60, &(0x7f0000000440)={0x1, 0x3, 0x6b1b, 0x2, {0x4, 0x2, 0x5, 0x3, 0x7fff}, [0x9, 0x6, 0x1]}}, @devid}) 8.50374324s ago: executing program 5 (id=3129): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) flock(r0, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sync() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$inet6(0xa, 0x800000000000002, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) 6.944538208s ago: executing program 5 (id=3130): syz_mount_image$hfsplus(&(0x7f0000000000), &(0x7f0000000640)='./file0\x00', 0x1000004, &(0x7f0000000180)=ANY=[], 0x3, 0x5f1, &(0x7f0000000c80)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@multicast1, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x8001, 0x0, 0x0, 0xa, 0x0, 0x0, 0x4f}, {0x0, 0x0, 0x0, 0x800, 0x7}, {0x0, 0x0, 0xe6}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@remote, 0x404d3, 0x2b}, 0x0, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf}}, 0xe4) r1 = socket$key(0xf, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x0) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0212000002"], 0x10}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) close(r0) 6.918618725s ago: executing program 4 (id=3131): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_emit_vhci(0x0, 0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x9, 0x4, 0x4, 0x2, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1}, 0x50) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r1, &(0x7f0000000400)="2ae0e710", 0x4, 0x0, 0x0, 0x0) setsockopt$inet6_int(r1, 0x29, 0x31, &(0x7f00000000c0)=0x6, 0x4) recvmmsg(r1, &(0x7f0000006700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/31, 0x1f}, 0x11}], 0x621, 0x10162, 0x0) 6.831333347s ago: executing program 3 (id=3132): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ed) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT], 0x48}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f00000008c0), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_GET(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [@L2TP_ATTR_IFNAME={0x14, 0x8, 'vlan0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x80) syz_open_dev$usbfs(&(0x7f00000002c0), 0xf27, 0x20183) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x3c, r1, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0x1}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r2}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x3c}}, 0x24000841) r7 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./sys/class/fcloop/ctl/add_local_port\x00', 0x1, 0x0) syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00'], 0x47, 0xc11, &(0x7f0000001940)="$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") openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x0) fanotify_init(0xf00, 0x0) write(r7, &(0x7f0000000600)='wwnn=0x3333333333333333,wwpn=0x4444444444444444,roles=3', 0x37) 5.277542903s ago: executing program 4 (id=3133): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040)}, 0x38) mkdirat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1c0) socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getxattr(0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x94) close(r3) socket$kcm(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, 0x0, &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) close(0x3) r4 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./trace/trace_options\x00', 0x1, 0x0) write$P9_RREADDIR(r4, &(0x7f0000000180)={0xb, 0x29, 0x2, {0x7}}, 0xb) syz_mount_image$f2fs(&(0x7f0000000340), &(0x7f0000000180)='./bus\x00', 0x8, &(0x7f00000001c0)={[{@memory_low}, {@acl}, {@data_flush}, {@six_active_logs}, {@checkpoint_diasble}, {@checkpoint_diasble}, {@memory_low}, {@noacl}, {@compress_cache}, {@alloc_mode_def}, {@inline_data}, {@noflush_merge}, {@noflush_merge}, {@fault_type={'fault_type', 0x3d, 0x1}}]}, 0x1, 0x5526, &(0x7f0000001580)="$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") 4.873029177s ago: executing program 5 (id=3134): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000a00)={'syz1\x00', {0x9, 0x207, 0x5, 0x4}, 0x3f, [0x9, 0x2, 0x18, 0x2, 0x2, 0x400, 0x80000000, 0x0, 0xfffffc01, 0x0, 0x6, 0x1, 0xfffffffd, 0x39, 0x747d5e13, 0x7ff, 0xfffffb9a, 0xfffffffe, 0x1, 0xfffffffb, 0x2004, 0x3, 0x0, 0x1, 0x482, 0x4800, 0x300000, 0x3, 0xe, 0x400, 0x1, 0x10002, 0x1ff, 0x8000, 0x0, 0x3, 0x0, 0x3, 0xa, 0x8da7, 0x2, 0x200, 0xffffffff, 0x5, 0xe, 0x4, 0x2, 0x6f, 0x240, 0x9, 0x1, 0x4199d, 0x6, 0x2, 0xfffffff6, 0xffffffff, 0x4, 0x40000006, 0x1000, 0x5, 0x3d, 0x8, 0xa, 0x5], [0x7, 0x2, 0xf, 0x8000, 0xfffffffd, 0x3, 0x3, 0x25, 0x6, 0xff7ffffc, 0x8, 0x7fff, 0x72c, 0x5, 0x3, 0x8, 0x10000, 0x400, 0x7ffd, 0x3, 0x3, 0xf, 0x5, 0x0, 0xa, 0x4, 0x1, 0x3ff, 0x0, 0xfffffffe, 0x8, 0x1000003, 0x10, 0xfffffff9, 0xfffffffd, 0x7, 0x1, 0xffff7fff, 0x6, 0x2000008, 0x7fd, 0xfdff, 0x2, 0x96, 0xfffffff9, 0x2, 0xffffffff, 0x5, 0x401, 0xe, 0x3, 0x5, 0x9, 0xe, 0x5, 0x7, 0x6, 0x2, 0x1, 0x1, 0x8, 0x7ff, 0x1, 0x3], [0x401, 0x8000e584, 0x9806, 0xcd3, 0xb, 0x1f, 0x404, 0x4, 0x4008, 0x8, 0x7, 0x9, 0x1e88, 0x5, 0x80000001, 0x2dc000, 0x8, 0x1000, 0x63dd7e7f, 0x10, 0x4, 0xffff, 0x0, 0x1000, 0x80040101, 0x5, 0x4, 0x7, 0x200003, 0x100, 0x5, 0x80, 0x9, 0x8001, 0x10000, 0x10000000, 0x3, 0x400004, 0x3, 0x4d7e, 0x3, 0x1000000b, 0x3, 0xbf23, 0x6, 0x9, 0x7, 0x0, 0x5, 0xe, 0x6, 0x100fdfd, 0x93, 0x9, 0x4, 0xea, 0x9, 0x20000005, 0x3, 0x80, 0x0, 0x7d, 0x3fd, 0x5], [0x108f, 0xffff, 0x3, 0x0, 0x88, 0x2, 0x4000000, 0x4, 0x5, 0x2, 0x763, 0xb, 0x406, 0x1, 0x5, 0x1000, 0x7f, 0x31d2, 0x3fa6, 0x5, 0x0, 0x5, 0x8000, 0x4, 0x9ac, 0x4, 0x3, 0x2, 0x0, 0x284c, 0x3b, 0x20000001, 0x5, 0x5, 0xa80a, 0x65f413f9, 0x8, 0x20008, 0x8a5, 0x8a, 0x46, 0x409, 0x5, 0x4, 0xc, 0xe, 0x4, 0xffffffff, 0x7, 0xffff8a33, 0xfffffff8, 0xf, 0x3, 0x200, 0x4007, 0xd4, 0xfffbfffd, 0x80a, 0xe, 0x101, 0x4, 0xf, 0x136, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) write$uinput_user_dev(r4, 0x0, 0x0) readv(r4, 0x0, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1000004, 0x13, r5, 0xd0087000) r6 = dup(r5) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000080)=0x1fe, 0x16) sendto$inet6(r5, 0x0, 0x0, 0x40000, &(0x7f0000000180)={0xa, 0x4e20, 0x8041, @ipv4={'\x00', '\xff\xff', @local}, 0x627bcafb}, 0x1c) recvmmsg(r5, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x7ffffffe}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)=""/36, 0x24}, {0x0}, {0x0}], 0x3}, 0x1}], 0x2, 0x40002000, 0x0) 4.803685004s ago: executing program 3 (id=3135): socket$inet6_udp(0xa, 0x2, 0x0) syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x47, &(0x7f0000000200)=0x7) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, &(0x7f0000000080)=0xfd8) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x1, @empty, 0x4000ca}, 0x1c) recvmmsg(r4, &(0x7f0000000900)=[{{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000006c0)=""/75}, {&(0x7f0000000740)=""/20, 0x1200}, {&(0x7f0000000780)=""/202}], 0x12, &(0x7f0000000280)=""/23}, 0x8001}], 0x1, 0x1822b, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x4098884, &(0x7f0000000240)={0xa, 0x4e20, 0x10, @mcast2}, 0x1c) sendto$inet6(r5, &(0x7f0000000040), 0x3000, 0x0, 0x0, 0x0) 4.215979124s ago: executing program 2 (id=3136): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000696000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f000068c000/0xc000)=nil, &(0x7f0000695000/0x1000)=nil, &(0x7f0000011000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000180)={'syz', 0x2}, 0x0, 0x0, 0xffffffffffffffff) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r5, 0x0, &(0x7f00000003c0)) keyctl$get_persistent(0x16, 0x0, r5) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) chroot(&(0x7f0000000100)='./file0\x00') 2.177102045s ago: executing program 5 (id=3137): ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) syz_mount_image$squashfs(&(0x7f0000000000), &(0x7f0000000200)='./file0\x00', 0x200000, &(0x7f0000000180)=ANY=[], 0x1, 0x1a4, &(0x7f0000000440)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0x0) 1.817736496s ago: executing program 4 (id=3138): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0xffffffffffffffff, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x50afa, 0x70823}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x9}]}}}]}, 0x3c}}, 0x24000800) 1.682970231s ago: executing program 4 (id=3139): socket$inet_tcp(0x2, 0x1, 0x0) r0 = open(&(0x7f0000000180)='.\x00', 0x0, 0x0) r1 = open(&(0x7f0000000300)='.\x00', 0x100000, 0x40) flock(r1, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x60}}, 0x0) flock(r0, 0x5) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sync() ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x4e23, 0x3, @mcast1, 0x2}, 0x1c) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mount(0x0, &(0x7f0000000040)='./rpc_pipefs\x00', &(0x7f0000000080)='rpc_pipefs\x00', 0x0, 0x0) ioctl$XFS_IOC_PATH_TO_FSHANDLE(0xffffffffffffffff, 0xc0385868, 0x0) 1.664628335s ago: executing program 3 (id=3140): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0xa27}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x400}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) mount$9p_fd(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)) r4 = socket$inet(0x2, 0x3, 0x4) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb}) sendmmsg$inet(r4, &(0x7f0000000280)=[{{&(0x7f0000000240)={0x2, 0x4e01, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='4\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00D$\r'], 0x38}}], 0x1, 0x46000) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x303}, "399421fe8a4c9563", "009383722a2e38c96600", "d6dc09ff", "16de86d67a8426bd"}, 0x28) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r3) recvfrom(r3, 0x0, 0x0, 0x40000041, 0x0, 0x0) r5 = semget(0x1, 0x4, 0x69c) semop(r5, &(0x7f0000000080)=[{0x1, 0x8001, 0x1000}, {0x1, 0x5b7a, 0x800}], 0x2) semop(r5, &(0x7f00000000c0)=[{0x1, 0x2, 0x1800}, {0x1, 0xbbd9, 0x1000}], 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 573.669584ms ago: executing program 3 (id=3141): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000f00)='./dev/ram0\x00', 0x2, 0x0) read(r0, &(0x7f0000000540)=""/217, 0xd9) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./sys\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./sys/module/block2mtd/parameters/block2mtd\x00', 0x1, 0x0) write(r1, &(0x7f0000000200)='/dev/ram0,6', 0xb) 119.402539ms ago: executing program 4 (id=3142): r0 = socket$igmp6(0xa, 0x3, 0x2) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x4a3bbd6e, @local, 0x7fffffff}, 0x1c) 0s ago: executing program 2 (id=3143): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x4004844) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x2, 0x6, 0x638, 0x448, 0x308, 0x1c0, 0x448, 0x1c0, 0x568, 0x568, 0x568, 0x568, 0x568, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private2={0xfc, 0x2, '\x00', 0x1}, [0xffffffff, 0xff000000, 0xff000000, 0xffffff00], [0xff, 0xffffff00, 0xff000000, 0xffffffff], 'wg2\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x2b, 0x8, 0x1, 0x18}, 0x0, 0xa8, 0xe0, 0x0, {0x7a00000010000000}}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x2, 0x5}, {0xffffffffffffffff, 0x7, 0x1}, {0xffffffffffffffff, 0x23}, 0x6, 0x7ff}}}, {{@ipv6={@remote, @mcast2, [0x0, 0x0, 0x0, 0xffffff00], [0xffffff00, 0x0, 0xffffffff, 0xff], 'macvlan0\x00', 'veth1_vlan\x00', {}, {}, 0x6, 0x1}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffff}, {}, {0x87, 0x2, 0x1}}}}, {{@uncond, 0x0, 0x100, 0x148, 0x48000000, {}, [@inet=@rpfilter={{0x28}, {0xd}}, @common=@srh={{0x30}, {0x33, 0x66, 0xf8, 0xa6, 0x9, 0x440, 0x502}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@multicast1, @ipv4=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x14, 0x22, 0x40}}}, {{@uncond, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x2}}, @inet=@rpfilter={{0x28}, {0xe}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@rand_addr=0x64010100, @ipv4=@loopback, 0x2}}}, {{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x6}}]}, @HL={0x28, 'HL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x698) kernel console output (not intermixed with test programs): 0525, idProduct=a4a1, bcdDevice= 0.40 [ 1193.543071][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1193.904130][ T27] usb 4-1: USB disconnect, device number 19 [ 1198.365171][T12869] loop3: detected capacity change from 0 to 40427 [ 1198.451267][T12869] F2FS-fs (loop3): Invalid log_blocksize (0), supports only 12 [ 1198.652514][T12869] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1199.772050][T12869] F2FS-fs (loop3): invalid crc value [ 1199.945145][T12869] F2FS-fs (loop3): Failed to initialize F2FS segment manager (-4) [ 1200.033083][ T5840] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 1200.414344][ T5840] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1200.614235][ T5840] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1200.637198][ T5840] usb 6-1: string descriptor 0 read error: -22 [ 1200.668741][ T5840] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1200.703447][ T5840] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1201.624776][T12910] input: syz1 as /devices/virtual/input/input7 [ 1203.134278][T11571] usb 6-1: USB disconnect, device number 11 [ 1206.932876][ T5854] usb 5-1: new full-speed USB device number 13 using dummy_hcd [ 1208.482549][ T5854] usb 5-1: not running at top speed; connect to a high speed hub [ 1208.501198][ T5854] usb 5-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1208.523021][ T5854] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1208.533165][ T5854] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1209.275649][ T5854] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1209.282862][ T5840] usb 3-1: new low-speed USB device number 25 using dummy_hcd [ 1209.285165][ T5854] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1209.302373][ T5854] uvcvideo 5-1:1.1: No supported video formats found. [ 1209.312071][ T5854] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 1209.404691][T12969] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1678'. [ 1210.697832][ T5840] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1210.712356][ T5854] usb 5-1: USB disconnect, device number 13 [ 1210.714596][ T5840] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1210.733837][ T5840] usb 3-1: string descriptor 0 read error: -22 [ 1210.744624][ T5840] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1210.756578][ T5840] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1212.543075][ T5840] usb 3-1: USB disconnect, device number 25 [ 1216.762145][T13000] loop5: detected capacity change from 0 to 1024 [ 1216.775207][T13002] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1687'. [ 1218.048004][T13000] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1219.124356][ T8505] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1220.637285][T13023] loop5: detected capacity change from 0 to 128 [ 1220.883044][ T5840] usb 4-1: new low-speed USB device number 20 using dummy_hcd [ 1221.793019][ T5840] usb 4-1: unable to get BOS descriptor or descriptor too short [ 1221.812167][ T5840] usb 4-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1221.834642][ T5840] usb 4-1: string descriptor 0 read error: -22 [ 1221.841329][ T5840] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1221.858073][ T5840] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1222.653442][ T5840] usb 3-1: new full-speed USB device number 26 using dummy_hcd [ 1222.921020][ T5840] usb 3-1: not running at top speed; connect to a high speed hub [ 1222.981341][ T5840] usb 3-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1223.055976][ T5840] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1223.150741][ T5840] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1223.335093][ T5840] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1223.423340][ T5840] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1223.430307][ T5840] uvcvideo 3-1:1.1: No supported video formats found. [ 1223.476409][ T5840] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 1223.630372][ T5840] usb 3-1: USB disconnect, device number 26 [ 1225.094605][T13043] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1696'. [ 1226.345986][ T8473] usb 4-1: USB disconnect, device number 20 [ 1227.953200][ T8655] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 1228.375110][ T8655] usb 4-1: config 0 interface 0 altsetting 5 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1228.402881][ T8655] usb 4-1: config 0 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1228.447294][ T8655] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1228.455277][ T8655] usb 4-1: New USB device found, idVendor=06a3, idProduct=0cd0, bcdDevice= 0.00 [ 1228.479998][ T8655] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1228.523820][ T8655] usb 4-1: config 0 descriptor?? [ 1230.811751][ T8655] input: HID 06a3:0cd0 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:06A3:0CD0.0001/input/input8 [ 1231.945960][ T8655] saitek 0003:06A3:0CD0.0001: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 06a3:0cd0] on usb-dummy_hcd.3-1/input0 [ 1232.968136][ T9] usb 4-1: USB disconnect, device number 21 [ 1233.043913][T13075] fido_id[13075]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1233.154693][T13082] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1707'. [ 1235.392899][ T172] usb 5-1: new full-speed USB device number 14 using dummy_hcd [ 1235.600816][ T172] usb 5-1: not running at top speed; connect to a high speed hub [ 1235.621991][ T172] usb 5-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1235.663075][ T172] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1235.719986][ T172] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1235.764645][ T172] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1235.805466][ T172] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1235.828821][ T172] uvcvideo 5-1:1.1: No supported video formats found. [ 1235.847424][ T172] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 1235.975241][ T172] usb 5-1: USB disconnect, device number 14 [ 1237.043307][ T8655] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 1237.288529][ T8655] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1237.319420][ T8655] usb 6-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1237.347381][ T8655] usb 6-1: string descriptor 0 read error: -22 [ 1237.356311][ T8655] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1237.436837][ T8655] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.865069][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 1237.911939][T13113] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1713'. [ 1238.829669][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.836225][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1239.595986][T13119] fuse: Unknown parameter 'group_i00000000000000000000' [ 1239.639761][T13121] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1717'. [ 1241.992852][ T8474] usb 6-1: USB disconnect, device number 12 [ 1243.442898][ T8474] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 1246.722363][ T8474] usb 4-1: device descriptor read/all, error -71 [ 1248.517011][T13167] FAULT_INJECTION: forcing a failure. [ 1248.517011][T13167] name failslab, interval 1, probability 0, space 0, times 1 [ 1248.544464][T13167] CPU: 0 PID: 13167 Comm: syz.4.1730 Not tainted syzkaller #0 [ 1248.552015][T13167] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1248.562115][T13167] Call Trace: [ 1248.565494][T13167] [ 1248.568518][T13167] dump_stack_lvl+0x18c/0x250 [ 1248.573498][T13167] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1248.579295][T13167] ? show_regs_print_info+0x20/0x20 [ 1248.584544][T13167] ? asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1248.590221][T13167] should_fail_ex+0x394/0x4c0 [ 1248.594985][T13167] should_failslab+0x9/0x20 [ 1248.599556][T13167] slab_pre_alloc_hook+0x59/0x300 [ 1248.604640][T13167] ? __fprop_add_percpu_max+0x200/0x200 [ 1248.610231][T13167] ? metadata_dst_alloc+0x2c/0x3f0 [ 1248.615481][T13167] ? metadata_dst_alloc+0x2c/0x3f0 [ 1248.620646][T13167] __kmem_cache_alloc_node+0x53/0x250 [ 1248.626057][T13167] ? metadata_dst_alloc+0x2c/0x3f0 [ 1248.631197][T13167] __kmalloc+0xa7/0x240 [ 1248.635383][T13167] ? tcf_idr_check_alloc+0x682/0x7f0 [ 1248.640873][T13167] metadata_dst_alloc+0x2c/0x3f0 [ 1248.645853][T13167] __ip_tun_set_dst+0x38/0x320 [ 1248.650726][T13167] ? __nla_parse+0x40/0x50 [ 1248.655177][T13167] tunnel_key_init+0x840/0x1610 [ 1248.660055][T13167] ? kasan_set_track+0x4e/0x70 [ 1248.664844][T13167] ? __kasan_kmalloc+0x8f/0xa0 [ 1248.669633][T13167] ? tcf_ctinfo_init+0xc0/0xda0 [ 1248.674517][T13167] ? tc_ctl_action+0x43f/0xbc0 [ 1248.679334][T13167] ? tunnel_key_release+0x60/0x60 [ 1248.684410][T13167] ? nla_memcpy+0x59/0xb0 [ 1248.688781][T13167] tcf_action_init_1+0x458/0x6d0 [ 1248.693752][T13167] ? tc_action_load_ops+0x540/0x540 [ 1248.698972][T13167] ? _raw_read_unlock+0x28/0x40 [ 1248.703963][T13167] ? tc_action_load_ops+0x233/0x540 [ 1248.709205][T13167] ? __skb_flow_dissect+0x1eb/0x6e70 [ 1248.714557][T13167] ? __nla_parse+0x40/0x50 [ 1248.719006][T13167] tcf_action_init+0x287/0x970 [ 1248.723809][T13167] ? tcf_action_init_1+0x6d0/0x6d0 [ 1248.728978][T13167] ? __nla_validate+0x50/0x50 [ 1248.733724][T13167] tc_ctl_action+0x43f/0xbc0 [ 1248.738366][T13167] ? tca_get_fill+0x550/0x550 [ 1248.743075][T13167] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1248.749336][T13167] ? tca_get_fill+0x550/0x550 [ 1248.754049][T13167] rtnetlink_rcv_msg+0x843/0xf90 [ 1248.759108][T13167] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1248.764262][T13167] ? rtnetlink_bind+0x80/0x80 [ 1248.768973][T13167] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1248.774985][T13167] ? lock_chain_count+0x20/0x20 [ 1248.779879][T13167] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1248.785324][T13167] ? lockdep_hardirqs_on+0x98/0x150 [ 1248.790634][T13167] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1248.796041][T13167] ? _local_bh_enable+0xa0/0xa0 [ 1248.800933][T13167] ? __dev_queue_xmit+0x272/0x37e0 [ 1248.806071][T13167] ? __dev_queue_xmit+0x1329/0x37e0 [ 1248.811302][T13167] ? __dev_queue_xmit+0x272/0x37e0 [ 1248.816460][T13167] ? ref_tracker_free+0x686/0x830 [ 1248.821530][T13167] netlink_rcv_skb+0x235/0x4c0 [ 1248.826411][T13167] ? rtnetlink_bind+0x80/0x80 [ 1248.831120][T13167] ? netlink_ack+0x1160/0x1160 [ 1248.835923][T13167] ? __lock_acquire+0x7d80/0x7d80 [ 1248.840980][T13167] ? netlink_deliver_tap+0x2e/0x1b0 [ 1248.846205][T13167] netlink_unicast+0x7b1/0x930 [ 1248.851003][T13167] netlink_sendmsg+0x8d0/0xbf0 [ 1248.855801][T13167] ? netlink_getsockopt+0x590/0x590 [ 1248.861025][T13167] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1248.866646][T13167] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1248.871973][T13167] ? security_socket_sendmsg+0x80/0xa0 [ 1248.877481][T13167] ? netlink_getsockopt+0x590/0x590 [ 1248.882712][T13167] ____sys_sendmsg+0x61b/0x980 [ 1248.887584][T13167] ? __asan_memset+0x22/0x40 [ 1248.892194][T13167] ? __sys_sendmsg_sock+0x30/0x30 [ 1248.897237][T13167] ? __import_iovec+0x5f2/0x850 [ 1248.902122][T13167] ? import_iovec+0x73/0xa0 [ 1248.906657][T13167] ___sys_sendmsg+0x2a6/0x360 [ 1248.911360][T13167] ? __sys_sendmsg+0x2b0/0x2b0 [ 1248.916196][T13167] __se_sys_sendmsg+0x1d0/0x2c0 [ 1248.921073][T13167] ? __x64_sys_sendmsg+0x80/0x80 [ 1248.926049][T13167] ? lockdep_hardirqs_on+0x98/0x150 [ 1248.931265][T13167] do_syscall_64+0x55/0xb0 [ 1248.935711][T13167] ? clear_bhb_loop+0x40/0x90 [ 1248.940411][T13167] ? clear_bhb_loop+0x40/0x90 [ 1248.945115][T13167] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1248.951050][T13167] RIP: 0033:0x7fbbb959e159 [ 1248.955566][T13167] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1248.975253][T13167] RSP: 002b:00007fbbba45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1248.983723][T13167] RAX: ffffffffffffffda RBX: 00007fbbb9825fa0 RCX: 00007fbbb959e159 [ 1248.991731][T13167] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1248.999714][T13167] RBP: 00007fbbb963506b R08: 0000000000000000 R09: 0000000000000000 [ 1249.007693][T13167] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1249.015671][T13167] R13: 00007fbbb9826038 R14: 00007fbbb9825fa0 R15: 00007ffc83122fa8 [ 1249.020119][T13175] fuse: Unknown parameter 'group_i00000000000000000000' [ 1249.023644][T13167] [ 1249.373059][ T8655] usb 3-1: new low-speed USB device number 27 using dummy_hcd [ 1249.781932][ T8655] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1249.851750][ T8655] usb 3-1: config 1 has 0 interfaces, different from the descriptor's value: 2 [ 1249.954759][ T8655] usb 3-1: string descriptor 0 read error: -22 [ 1249.961113][ T8655] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1250.723797][ T8655] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1253.424095][ T9] usb 3-1: USB disconnect, device number 27 [ 1258.331801][T13216] loop2: detected capacity change from 0 to 512 [ 1258.365819][T13216] EXT4-fs (loop2): Unsupported encryption level 190 [ 1258.513839][T10506] I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1258.531722][T13220] loop4: detected capacity change from 0 to 2048 [ 1258.681756][T13220] loop4: p1 p3 < > p4 < p5 > [ 1258.703140][T13220] loop4: partition table partially beyond EOD, truncated [ 1258.714871][T13220] loop4: p1 size 196608 extends beyond EOD, truncated [ 1258.735922][T13220] loop4: p3 start 614273 is beyond EOD, truncated [ 1258.754822][T13220] loop4: p5 size 196608 extends beyond EOD, truncated [ 1259.549646][ T5142] loop4: p1 p3 < > p4 < p5 > [ 1259.599693][ T5142] loop4: partition table partially beyond EOD, truncated [ 1259.836323][ T5142] loop4: p1 size 196608 extends beyond EOD, truncated [ 1259.883198][ T5142] loop4: p3 start 614273 is beyond EOD, truncated [ 1259.896060][ T5142] loop4: p5 size 196608 extends beyond EOD, truncated [ 1260.350057][T13232] fuse: Unknown parameter 'group_i00000000000000000000' [ 1260.409843][T10506] udevd[10506]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1260.426843][T10706] udevd[10706]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1260.441023][T10517] udevd[10517]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1260.577204][T10517] udevd[10517]: inotify_add_watch(7, /dev/loop4p5, 10) failed: No such file or directory [ 1260.588594][T10706] udevd[10706]: inotify_add_watch(7, /dev/loop4p1, 10) failed: No such file or directory [ 1260.610281][T10506] udevd[10506]: inotify_add_watch(7, /dev/loop4p4, 10) failed: No such file or directory [ 1263.557118][T13255] zram0: detected capacity change from 0 to 65536 [ 1265.552674][T13264] xt_NFQUEUE: number of total queues is 0 [ 1269.724253][T13287] fuse: Unknown parameter 'group_id00000000000000000000' [ 1275.093183][ T28] audit: type=1326 audit(1790690054.750:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13314 comm="syz.2.1768" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d4979e159 code=0x0 [ 1275.578030][T13326] fuse: Unknown parameter 'group_id00000000000000000000' [ 1279.276930][ T28] audit: type=1326 audit(1790690058.910:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13354 comm="syz.4.1778" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbb959e159 code=0x0 [ 1280.407719][T13368] fuse: Unknown parameter 'group_id00000000000000000000' [ 1283.744339][ T28] audit: type=1326 audit(1790690063.400:41): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13386 comm="syz.4.1788" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fbbb959e159 code=0x0 [ 1284.904231][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1284.958811][T13397] FAULT_INJECTION: forcing a failure. [ 1284.958811][T13397] name failslab, interval 1, probability 0, space 0, times 0 [ 1286.229932][T13397] CPU: 1 PID: 13397 Comm: syz.5.1790 Not tainted syzkaller #0 [ 1286.237471][T13397] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1286.247559][T13397] Call Trace: [ 1286.250870][T13397] [ 1286.253829][T13397] dump_stack_lvl+0x18c/0x250 [ 1286.258552][T13397] ? show_regs_print_info+0x20/0x20 [ 1286.263792][T13397] ? load_image+0x420/0x420 [ 1286.268372][T13397] ? __lock_acquire+0x7d80/0x7d80 [ 1286.273433][T13397] ? ___sys_sendmsg+0x2a6/0x360 [ 1286.278307][T13397] ? do_syscall_64+0x55/0xb0 [ 1286.282895][T13397] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1286.288961][T13397] should_fail_ex+0x394/0x4c0 [ 1286.293635][T13397] should_failslab+0x9/0x20 [ 1286.298131][T13397] slab_pre_alloc_hook+0x59/0x300 [ 1286.303154][T13397] kmem_cache_alloc+0x5a/0x2c0 [ 1286.307906][T13397] ? skb_clone+0x1eb/0x370 [ 1286.312314][T13397] skb_clone+0x1eb/0x370 [ 1286.316547][T13397] ? netlink_trim+0x133/0x220 [ 1286.321214][T13397] netlink_trim+0x14a/0x220 [ 1286.325735][T13397] netlink_broadcast_filtered+0x6d/0x1130 [ 1286.331443][T13397] ? __asan_memset+0x22/0x40 [ 1286.336024][T13397] ? tcf_action_dump+0x204/0x290 [ 1286.340973][T13397] nlmsg_notify+0xe3/0x1a0 [ 1286.345381][T13397] tc_ctl_action+0x856/0xbc0 [ 1286.349962][T13397] ? tca_get_fill+0x550/0x550 [ 1286.354651][T13397] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1286.360826][T13397] ? tca_get_fill+0x550/0x550 [ 1286.365509][T13397] rtnetlink_rcv_msg+0x843/0xf90 [ 1286.370458][T13397] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1286.375574][T13397] ? rtnetlink_bind+0x80/0x80 [ 1286.380248][T13397] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1286.386245][T13397] ? lock_chain_count+0x20/0x20 [ 1286.391088][T13397] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1286.396450][T13397] ? lockdep_hardirqs_on+0x98/0x150 [ 1286.401644][T13397] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1286.407012][T13397] ? _local_bh_enable+0xa0/0xa0 [ 1286.411882][T13397] ? __dev_queue_xmit+0x272/0x37e0 [ 1286.416980][T13397] ? __dev_queue_xmit+0x1329/0x37e0 [ 1286.422166][T13397] ? __dev_queue_xmit+0x272/0x37e0 [ 1286.427273][T13397] ? ref_tracker_free+0x686/0x830 [ 1286.432291][T13397] netlink_rcv_skb+0x235/0x4c0 [ 1286.437052][T13397] ? rtnetlink_bind+0x80/0x80 [ 1286.441721][T13397] ? netlink_ack+0x1160/0x1160 [ 1286.446478][T13397] ? __lock_acquire+0x7d80/0x7d80 [ 1286.451492][T13397] ? netlink_deliver_tap+0x2e/0x1b0 [ 1286.456706][T13397] netlink_unicast+0x7b1/0x930 [ 1286.461476][T13397] netlink_sendmsg+0x8d0/0xbf0 [ 1286.466304][T13397] ? netlink_getsockopt+0x590/0x590 [ 1286.471503][T13397] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1286.477039][T13397] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1286.482312][T13397] ? security_socket_sendmsg+0x80/0xa0 [ 1286.487757][T13397] ? netlink_getsockopt+0x590/0x590 [ 1286.492943][T13397] ____sys_sendmsg+0x61b/0x980 [ 1286.497703][T13397] ? __asan_memset+0x22/0x40 [ 1286.502280][T13397] ? __sys_sendmsg_sock+0x30/0x30 [ 1286.507287][T13397] ? __import_iovec+0x5f2/0x850 [ 1286.512135][T13397] ? import_iovec+0x73/0xa0 [ 1286.516633][T13397] ___sys_sendmsg+0x2a6/0x360 [ 1286.521306][T13397] ? __sys_sendmsg+0x2b0/0x2b0 [ 1286.526086][T13397] __se_sys_sendmsg+0x1d0/0x2c0 [ 1286.530931][T13397] ? __x64_sys_sendmsg+0x80/0x80 [ 1286.535890][T13397] ? lockdep_hardirqs_on+0x98/0x150 [ 1286.541092][T13397] do_syscall_64+0x55/0xb0 [ 1286.545495][T13397] ? clear_bhb_loop+0x40/0x90 [ 1286.550162][T13397] ? clear_bhb_loop+0x40/0x90 [ 1286.554844][T13397] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1286.560733][T13397] RIP: 0033:0x7f1885d9e159 [ 1286.565139][T13397] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1286.584764][T13397] RSP: 002b:00007f1886bc2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1286.593176][T13397] RAX: ffffffffffffffda RBX: 00007f1886025fa0 RCX: 00007f1885d9e159 [ 1286.601140][T13397] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000005 [ 1286.609117][T13397] RBP: 00007f1885e3506b R08: 0000000000000000 R09: 0000000000000000 [ 1286.617079][T13397] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1286.625038][T13397] R13: 00007f1886026038 R14: 00007f1886025fa0 R15: 00007fff2f44c108 [ 1286.633005][T13397] [ 1287.300173][T13406] fuse: Bad value for 'user_id' [ 1289.312481][T13416] loop5: detected capacity change from 0 to 64 [ 1289.956547][T13420] loop4: detected capacity change from 0 to 2048 [ 1290.029117][T13420] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 1290.230398][ T28] audit: type=1326 audit(2000000004.430:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13421 comm="syz.5.1799" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1290.510165][T13427] UDF-fs: unknown compression code (0) [ 1290.714332][T13428] UDF-fs: unknown compression code (0) [ 1292.142862][ T172] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 1292.345030][ T172] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1292.363005][ T172] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1292.393964][ T172] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1292.440829][ T172] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 1.00 [ 1292.456430][ T172] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1292.472901][ T172] usb 3-1: Product: syz [ 1292.477291][ T172] usb 3-1: Manufacturer: syz [ 1292.490240][ T172] rndis_host 3-1:1.0: skipping garbage [ 1292.505463][ T172] usb 3-1: bad CDC descriptors [ 1292.779547][ T27] usb 3-1: USB disconnect, device number 28 [ 1292.843317][ T5813] usb 4-1: new full-speed USB device number 24 using dummy_hcd [ 1292.866527][T13450] fuse: Bad value for 'user_id' [ 1293.034186][ T5813] usb 4-1: not running at top speed; connect to a high speed hub [ 1293.047362][ T5813] usb 4-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1293.057959][ T5813] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1293.067217][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1293.105464][ T5813] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1293.115930][ T5813] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1293.123231][ T5813] uvcvideo 4-1:1.1: No supported video formats found. [ 1293.130124][ T5813] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 1293.411402][ T5813] usb 4-1: USB disconnect, device number 24 [ 1294.672527][T13458] loop2: detected capacity change from 0 to 64 [ 1294.749626][ T28] audit: type=1326 audit(2000000008.960:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13455 comm="syz.5.1810" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1300.284359][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.290666][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1300.512830][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 1300.647038][T13503] loop4: detected capacity change from 0 to 64 [ 1300.940637][T13504] fuse: Bad value for 'user_id' [ 1301.002927][ T28] audit: type=1326 audit(2000000015.210:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13505 comm="syz.5.1821" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1302.858561][T13520] KVM: debugfs: duplicate directory 13520-5 [ 1304.950987][T13538] loop4: detected capacity change from 0 to 64 [ 1306.083965][T13549] fuse: Bad value for 'fd' [ 1307.724120][ T5854] usb 3-1: new full-speed USB device number 29 using dummy_hcd [ 1307.924307][ T5854] usb 3-1: not running at top speed; connect to a high speed hub [ 1307.935565][ T5854] usb 3-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1307.952939][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1307.979302][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1309.306087][ T5854] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1310.587962][ T5854] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1310.597327][ T5854] uvcvideo 3-1:1.1: No supported video formats found. [ 1310.604414][ T5854] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 1310.631955][ T5854] usb 3-1: USB disconnect, device number 29 [ 1310.775519][T13567] loop2: detected capacity change from 0 to 64 [ 1311.275509][T13575] fuse: Bad value for 'fd' [ 1313.549770][ T9] usb 3-1: new full-speed USB device number 30 using dummy_hcd [ 1313.739682][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1313.772640][ T9] usb 3-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 1314.112725][ T9] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=3 [ 1314.619243][ T9] usb 3-1: Manufacturer: syz [ 1314.662165][ T9] usb 3-1: SerialNumber: syz [ 1315.017018][ T9] usb 3-1: config 0 descriptor?? [ 1315.170679][T13600] loop4: detected capacity change from 0 to 64 [ 1315.926287][ T9] usb 3-1: can't set config #0, error -71 [ 1315.962260][ T9] usb 3-1: USB disconnect, device number 30 [ 1315.994278][T13607] fuse: Bad value for 'fd' [ 1320.718708][T13642] fuse: Bad value for 'fd' [ 1323.218587][T13662] fuse: Bad value for 'fd' [ 1324.264208][T13667] loop2: detected capacity change from 0 to 256 [ 1324.510017][T13667] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x68afaf67, utbl_chksum : 0xe619d30d) [ 1324.524058][T13674] fuse: Bad value for 'fd' [ 1325.131353][T13667] syz.2.1876: attempt to access beyond end of device [ 1325.131353][T13667] loop2: rw=524288, sector=34359738488, nr_sectors = 8 limit=256 [ 1325.165953][T13667] syz.2.1876: attempt to access beyond end of device [ 1325.165953][T13667] loop2: rw=0, sector=34359738488, nr_sectors = 8 limit=256 [ 1325.284344][ T28] audit: type=1800 audit(2000000011.730:45): pid=13667 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1876" name="file1" dev="loop2" ino=1048599 res=0 errno=0 [ 1327.801024][T13695] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 1327.806028][ T27] IPVS: starting estimator thread 0... [ 1327.933155][T13697] IPVS: using max 24 ests per chain, 57600 per kthread [ 1329.576763][ T28] audit: type=1326 audit(2000000016.020:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13712 comm="syz.5.1889" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1329.683174][ T5840] usb 4-1: new full-speed USB device number 25 using dummy_hcd [ 1329.877803][ T5840] usb 4-1: not running at top speed; connect to a high speed hub [ 1331.225821][ T5840] usb 4-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1331.243967][ T5840] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1331.253346][ T5840] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1331.349271][ T5840] usb 4-1: can't set config #1, error -71 [ 1331.364243][ T5840] usb 4-1: USB disconnect, device number 25 [ 1334.677799][T13749] 9pnet_virtio: no channels available for device syz [ 1337.027532][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 1339.578848][T13782] 9pnet_virtio: no channels available for device syz [ 1339.615638][T13782] overlayfs: failed to clone upperpath [ 1339.743331][ T5854] usb 3-1: new full-speed USB device number 31 using dummy_hcd [ 1341.593995][ T5854] usb 3-1: not running at top speed; connect to a high speed hub [ 1341.619124][ T5854] usb 3-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1341.642986][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1341.668478][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1341.697838][ T5854] uvcvideo 3-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1341.756945][ T5854] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1341.776743][ T5854] uvcvideo 3-1:1.1: No supported video formats found. [ 1341.803007][ T5854] uvcvideo 3-1:1.1: Failed to initialize the device (-22). [ 1341.899553][ T5854] usb 3-1: USB disconnect, device number 31 [ 1342.112962][ T5813] usb 5-1: new full-speed USB device number 15 using dummy_hcd [ 1342.307090][ T5813] usb 5-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 1342.333112][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1342.386806][ T5813] usb 5-1: selecting invalid altsetting 3 [ 1342.393199][ T5813] comedi comedi5: could not set alternate setting 3 in high speed [ 1342.402285][ T5813] usbduxsigma 5-1:128.0: driver 'usbduxsigma' failed to auto-configure device. [ 1342.425341][ T5813] usbduxsigma: probe of 5-1:128.0 failed with error -22 [ 1342.724774][ T5840] usb 5-1: USB disconnect, device number 15 [ 1344.540016][T13819] 9pnet_virtio: no channels available for device syz [ 1345.892125][ T28] audit: type=1326 audit(2000000032.330:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13840 comm="syz.2.1932" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d4979e159 code=0x0 [ 1345.943070][ T5813] usb 5-1: new full-speed USB device number 16 using dummy_hcd [ 1346.156359][ T5813] usb 5-1: not running at top speed; connect to a high speed hub [ 1346.168053][ T5813] usb 5-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1346.179923][ T5813] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1346.195516][ T5813] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1346.221157][ T5813] uvcvideo 5-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1346.238695][ T5813] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1346.249638][ T5813] uvcvideo 5-1:1.1: No supported video formats found. [ 1346.268232][ T5813] uvcvideo 5-1:1.1: Failed to initialize the device (-22). [ 1346.438191][ T5813] usb 5-1: USB disconnect, device number 16 [ 1347.630273][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 1349.239861][T13866] 9pnet_virtio: no channels available for device syz [ 1350.795053][ T28] audit: type=1326 audit(2000000037.240:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13873 comm="syz.5.1945" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1350.979269][T13877] usb usb8: usbfs: process 13877 (syz.2.1946) did not claim interface 0 before use [ 1351.288405][ T172] usb 4-1: new full-speed USB device number 26 using dummy_hcd [ 1351.516122][ T172] usb 4-1: not running at top speed; connect to a high speed hub [ 1351.652121][ T172] usb 4-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1351.769721][ T172] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1351.897801][ T172] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1352.300783][ T172] uvcvideo 4-1:1.1: Unknown video format 00000000-0000-0000-0000-000000000000 [ 1352.449970][ T172] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1352.577752][ T172] uvcvideo 4-1:1.1: No supported video formats found. [ 1352.683329][ T172] uvcvideo 4-1:1.1: Failed to initialize the device (-22). [ 1353.466523][T13896] loop2: detected capacity change from 0 to 8 [ 1354.026718][ T172] usb 4-1: USB disconnect, device number 26 [ 1354.094803][T13901] 9pnet_virtio: no channels available for device syz [ 1354.103916][T13901] overlayfs: failed to clone upperpath [ 1355.720433][ T28] audit: type=1326 audit(2000000042.160:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13910 comm="syz.5.1958" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1360.138174][T13943] 9pnet_virtio: no channels available for device syz [ 1360.154510][T13943] overlayfs: failed to clone upperpath [ 1360.955261][ T28] audit: type=1326 audit(2000000047.400:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13951 comm="syz.3.1970" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74b919e159 code=0x0 [ 1362.256913][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.268845][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1365.305072][T13980] hugetlbfs: syz.4.1966 (13980): Using mlock ulimits for SHM_HUGETLB is obsolete [ 1366.208317][T13983] 9pnet_virtio: no channels available for device syz [ 1369.442013][ T27] usb 4-1: new full-speed USB device number 27 using dummy_hcd [ 1369.449942][T13486] Bluetooth: hci2: command 0x0405 tx timeout [ 1371.215667][ T27] usb 4-1: device descriptor read/all, error -71 [ 1372.731472][ T28] audit: type=1326 audit(2000000059.170:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14010 comm="syz.5.1983" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1885d9e159 code=0x0 [ 1375.744966][T14019] 9pnet_virtio: no channels available for device syz [ 1375.806222][T14019] overlayfs: failed to clone upperpath [ 1375.936052][T14022] xt_HMARK: spi-set and port-set can't be combined [ 1375.975401][T14024] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1378.453129][ T28] audit: type=1326 audit(2000000064.880:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14048 comm="syz.2.2001" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2d4979e159 code=0x0 [ 1378.555114][T14051] loop3: detected capacity change from 0 to 4096 [ 1378.834234][T14051] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1378.859639][T14051] NILFS (loop3): trying rollback from an earlier position [ 1379.516670][T14051] NILFS (loop3): recovery complete [ 1379.646567][T14059] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1380.656421][T14069] 9pnet_virtio: no channels available for device syz [ 1381.215921][T14074] vlan2: entered promiscuous mode [ 1381.263411][T14074] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2008'. [ 1381.310613][T14074] hsr_slave_0: left promiscuous mode [ 1381.611135][T14084] capability: warning: `syz.5.2010' uses deprecated v2 capabilities in a way that may be insecure [ 1381.912857][ T172] usb 3-1: new full-speed USB device number 32 using dummy_hcd [ 1381.963977][ T28] audit: type=1326 audit(2000000068.410:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14085 comm="syz.3.2012" exe="/root/ci2-linux-6-6-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f74b919e159 code=0x0 [ 1382.188301][ T172] usb 3-1: not running at top speed; connect to a high speed hub [ 1382.209011][ T172] usb 3-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1382.240168][ T172] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1382.264595][ T172] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1382.324786][ T172] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1382.331786][ T172] usb 3-1: No streaming interface found for terminal 2. [ 1382.612581][T11571] usb 3-1: USB disconnect, device number 32 [ 1383.073115][ T5783] Bluetooth: hci2: command 0x0405 tx timeout [ 1386.855862][T14113] loop2: detected capacity change from 0 to 128 [ 1390.903222][T11571] usb 4-1: new full-speed USB device number 29 using dummy_hcd [ 1391.114070][T11571] usb 4-1: not running at top speed; connect to a high speed hub [ 1391.862406][T11571] usb 4-1: config 1 has an invalid descriptor of length 34, skipping remainder of the config [ 1391.873170][T11571] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1391.882250][T11571] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1391.910827][T11571] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1391.932880][T11571] usb 4-1: No streaming interface found for terminal 2. [ 1392.079227][T14143] 9pnet_virtio: no channels available for device syz [ 1392.118142][T14143] overlayfs: failed to clone upperpath [ 1392.130250][ T172] usb 4-1: USB disconnect, device number 29 [ 1393.694367][T14156] loop2: detected capacity change from 0 to 4096 [ 1393.712032][T14156] EXT4-fs: inline encryption not supported [ 1393.737420][T14156] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1393.746880][T14162] FAULT_INJECTION: forcing a failure. [ 1393.746880][T14162] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1393.763078][T14156] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1393.778217][T14162] CPU: 0 PID: 14162 Comm: syz.3.2033 Not tainted syzkaller #0 [ 1393.785844][T14162] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1393.796196][T14162] Call Trace: [ 1393.799506][T14162] [ 1393.802480][T14162] dump_stack_lvl+0x18c/0x250 [ 1393.807258][T14162] ? show_regs_print_info+0x20/0x20 [ 1393.812619][T14162] ? load_image+0x420/0x420 [ 1393.817187][T14162] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1393.823234][T14162] ? lock_chain_count+0x20/0x20 [ 1393.828148][T14162] should_fail_ex+0x394/0x4c0 [ 1393.832886][T14162] get_futex_key+0x136/0x1030 [ 1393.837641][T14162] ? futex_setup_timer+0xc0/0xc0 [ 1393.842635][T14162] futex_wake+0x127/0x4f0 [ 1393.844268][T14156] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=280ec1a8, mo2=0003] [ 1393.847012][T14162] ? futex_wake_mark+0x150/0x150 [ 1393.860326][T14162] ? trace_contention_end+0x39/0xe0 [ 1393.865585][T14162] ? __mutex_lock+0x30d/0xc80 [ 1393.870329][T14162] do_futex+0x35d/0x3e0 [ 1393.874531][T14162] ? mutex_unlock+0x10/0x10 [ 1393.879015][T14156] System zones: [ 1393.879054][T14162] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1393.882628][T14156] 0-5 [ 1393.888517][T14162] ? aa_af_perm+0x330/0x330 [ 1393.888561][T14162] __se_sys_futex+0x3a9/0x440 [ 1393.888585][T14162] ? __x64_sys_futex+0xf0/0xf0 [ 1393.888609][T14162] ? __x64_sys_futex+0x21/0xf0 [ 1393.888630][T14162] do_syscall_64+0x55/0xb0 [ 1393.888652][T14162] ? clear_bhb_loop+0x40/0x90 [ 1393.888677][T14162] ? clear_bhb_loop+0x40/0x90 [ 1393.888709][T14162] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1393.888735][T14162] RIP: 0033:0x7f74b919e159 [ 1393.888755][T14162] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1393.888773][T14162] RSP: 002b:00007f74ba1110e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1393.888796][T14162] RAX: ffffffffffffffda RBX: 00007f74b9426098 RCX: 00007f74b919e159 [ 1393.888811][T14162] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007f74b942609c [ 1393.888825][T14162] RBP: 00007f74b9426090 R08: 0000000000745a32 R09: 0000000000000000 [ 1393.888839][T14162] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1393.888852][T14162] R13: 00007f74b9426128 R14: 00007ffeac3451b0 R15: 00007ffeac345298 [ 1393.888881][T14162] [ 1394.072980][T14156] [ 1394.128399][T14156] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1395.212539][ T5774] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1399.460831][T14204] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2037'. [ 1400.403084][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1400.524967][T14204] ceph: No mds server is up or the cluster is laggy [ 1401.301993][T14224] fuse: Unknown parameter 'use00000000000000000000' [ 1406.123747][T14263] fuse: Unknown parameter 'user_i00000000000000000000' [ 1414.227956][T14303] fuse: Unknown parameter 'user_i00000000000000000000' [ 1421.250996][T14350] fuse: Unknown parameter 'user_i00000000000000000000' [ 1422.123501][T14356] netlink: 'syz.5.2089': attribute type 1 has an invalid length. [ 1422.245223][T14356] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2089'. [ 1423.149347][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.155847][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1427.555001][T14387] fuse: Unknown parameter 'user_id00000000000000000000' [ 1429.282083][T14399] Can't find ip_set type hash:ne [ 1434.462001][T14429] fuse: Unknown parameter 'user_id00000000000000000000' [ 1441.033650][T14467] fuse: Unknown parameter 'user_id00000000000000000000' [ 1441.835419][T14473] netlink: 'syz.5.2111': attribute type 1 has an invalid length. [ 1441.843425][T14473] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2111'. [ 1445.395824][T14494] loop3: detected capacity change from 0 to 128 [ 1447.430455][T14507] netlink: 'syz.5.2130': attribute type 1 has an invalid length. [ 1447.462856][T14507] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2130'. [ 1454.288048][T14537] input: syz1 as /devices/virtual/input/input9 [ 1459.355686][T14568] netlink: 'syz.3.2140': attribute type 1 has an invalid length. [ 1459.379992][T14568] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2140'. [ 1467.062922][ T8474] usb 4-1: new full-speed USB device number 30 using dummy_hcd [ 1467.268365][T14614] Can't find ip_set type hash:ne [ 1467.313135][ T8474] usb 4-1: device descriptor read/64, error -71 [ 1467.603714][ T8474] usb 4-1: new full-speed USB device number 31 using dummy_hcd [ 1467.646062][T14620] input: syz1 as /devices/virtual/input/input10 [ 1477.271532][T14665] input: syz1 as /devices/virtual/input/input11 [ 1478.773351][ T5813] usb 4-1: new full-speed USB device number 32 using dummy_hcd [ 1478.791692][T14673] netlink: 'syz.5.2172': attribute type 1 has an invalid length. [ 1478.811868][T14673] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2172'. [ 1478.932947][ T5813] usb 4-1: device descriptor read/64, error -71 [ 1479.752900][ T5813] usb 4-1: new full-speed USB device number 33 using dummy_hcd [ 1479.815660][T14679] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2180'. [ 1479.903809][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1479.953493][T14685] 9pnet_virtio: no channels available for device syz [ 1479.995156][ T5813] usb 4-1: device descriptor read/64, error -71 [ 1480.020220][T14679] ceph: No mds server is up or the cluster is laggy [ 1480.113582][ T5813] usb usb4-port1: attempt power cycle [ 1482.110973][T13486] Bluetooth: hci2: command 0x0405 tx timeout [ 1482.506381][T14708] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2190'. [ 1482.558570][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1482.837580][ T9] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1483.296806][T14708] ceph: No mds server is up or the cluster is laggy [ 1483.853394][ T5854] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1484.589098][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.595564][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1490.831783][T14761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2202'. [ 1491.102854][ T5854] usb 5-1: new full-speed USB device number 17 using dummy_hcd [ 1491.253058][ T5854] usb 5-1: device descriptor read/64, error -71 [ 1492.602910][T14761] ceph: No mds server is up or the cluster is laggy [ 1492.668714][ T5854] usb 5-1: new full-speed USB device number 18 using dummy_hcd [ 1492.832911][ T5854] usb 5-1: device descriptor read/64, error -71 [ 1493.757054][ T5854] usb usb5-port1: attempt power cycle [ 1499.496763][T14805] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 1501.066221][ T172] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1501.090113][T14805] ceph: No mds server is up or the cluster is laggy [ 1511.270221][T14855] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2228'. [ 1511.328983][ T5840] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1512.691615][T14855] ceph: No mds server is up or the cluster is laggy [ 1512.699486][ T5840] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1520.255142][T14900] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2241'. [ 1520.303979][ T5813] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1521.312415][ T5813] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1521.362836][T14900] ceph: No mds server is up or the cluster is laggy [ 1527.799783][T14949] netlink: 'syz.2.2252': attribute type 1 has an invalid length. [ 1527.828696][T14949] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2252'. [ 1530.683495][T14958] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2253'. [ 1530.794635][ T172] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1530.912899][T14958] ceph: No mds server is up or the cluster is laggy [ 1532.972336][ T5813] usb 4-1: new full-speed USB device number 35 using dummy_hcd [ 1533.204695][ T5813] usb 4-1: not running at top speed; connect to a high speed hub [ 1533.990542][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1534.012212][ T5813] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1534.066417][ T5813] usb 4-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1534.122049][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1534.136637][ T5813] usb 4-1: Found UVC 1.00 device (046d:0825) [ 1534.145119][ T5813] usb 4-1: No streaming interface found for terminal 2. [ 1534.340456][ T5813] usb 4-1: USB disconnect, device number 35 [ 1538.260224][T15004] input: syz1 as /devices/virtual/input/input12 [ 1546.520437][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1546.533438][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1561.767330][ T5854] usb 3-1: new full-speed USB device number 33 using dummy_hcd [ 1562.795649][ T5854] usb 3-1: not running at top speed; connect to a high speed hub [ 1562.823100][ T5854] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.842842][ T5854] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1562.852321][ T5854] usb 3-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1562.889981][ T5854] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1562.930442][ T5854] usb 3-1: Found UVC 1.00 device (046d:0825) [ 1562.960051][ T5854] usb 3-1: No streaming interface found for terminal 2. [ 1563.130971][ T5840] usb 3-1: USB disconnect, device number 33 [ 1574.019569][T15180] FAULT_INJECTION: forcing a failure. [ 1574.019569][T15180] name failslab, interval 1, probability 0, space 0, times 0 [ 1574.063191][T15180] CPU: 0 PID: 15180 Comm: syz.4.2309 Not tainted syzkaller #0 [ 1574.070739][T15180] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1574.080858][T15180] Call Trace: [ 1574.084252][T15180] [ 1574.087187][T15180] dump_stack_lvl+0x18c/0x250 [ 1574.091882][T15180] ? show_regs_print_info+0x20/0x20 [ 1574.097088][T15180] ? load_image+0x420/0x420 [ 1574.101598][T15180] ? idr_get_free+0x8a4/0xa10 [ 1574.106288][T15180] ? node_tag_clear+0x1ec/0x310 [ 1574.111229][T15180] should_fail_ex+0x394/0x4c0 [ 1574.115934][T15180] should_failslab+0x9/0x20 [ 1574.120479][T15180] slab_pre_alloc_hook+0x59/0x300 [ 1574.125548][T15180] ? __fprop_add_percpu_max+0x200/0x200 [ 1574.131124][T15180] ? metadata_dst_alloc+0x2c/0x3f0 [ 1574.136274][T15180] ? metadata_dst_alloc+0x2c/0x3f0 [ 1574.141440][T15180] __kmem_cache_alloc_node+0x53/0x250 [ 1574.146877][T15180] ? metadata_dst_alloc+0x2c/0x3f0 [ 1574.152043][T15180] __kmalloc+0xa7/0x240 [ 1574.156255][T15180] ? tcf_idr_check_alloc+0x682/0x7f0 [ 1574.161589][T15180] metadata_dst_alloc+0x2c/0x3f0 [ 1574.166563][T15180] __ip_tun_set_dst+0x38/0x320 [ 1574.171339][T15180] ? __nla_parse+0x40/0x50 [ 1574.175768][T15180] tunnel_key_init+0x840/0x1610 [ 1574.180628][T15180] ? kasan_set_track+0x4e/0x70 [ 1574.185399][T15180] ? __kasan_kmalloc+0x8f/0xa0 [ 1574.190182][T15180] ? tcf_ctinfo_init+0xc0/0xda0 [ 1574.195035][T15180] ? tc_ctl_action+0x43f/0xbc0 [ 1574.199819][T15180] ? tunnel_key_release+0x60/0x60 [ 1574.204892][T15180] ? nla_memcpy+0x59/0xb0 [ 1574.209258][T15180] tcf_action_init_1+0x458/0x6d0 [ 1574.214306][T15180] ? tc_action_load_ops+0x540/0x540 [ 1574.219524][T15180] ? _raw_read_unlock+0x28/0x40 [ 1574.224470][T15180] ? tc_action_load_ops+0x233/0x540 [ 1574.229687][T15180] ? __skb_flow_dissect+0x1eb/0x6e70 [ 1574.234981][T15180] ? __nla_parse+0x40/0x50 [ 1574.239403][T15180] tcf_action_init+0x287/0x970 [ 1574.244178][T15180] ? tcf_action_init_1+0x6d0/0x6d0 [ 1574.249330][T15180] ? __nla_validate+0x50/0x50 [ 1574.254037][T15180] tc_ctl_action+0x43f/0xbc0 [ 1574.258636][T15180] ? tca_get_fill+0x550/0x550 [ 1574.263321][T15180] ? trace_raw_output_contention_end+0xd0/0xd0 [ 1574.269506][T15180] ? tca_get_fill+0x550/0x550 [ 1574.274187][T15180] rtnetlink_rcv_msg+0x843/0xf90 [ 1574.279151][T15180] ? rtnetlink_rcv_msg+0x220/0xf90 [ 1574.284276][T15180] ? rtnetlink_bind+0x80/0x80 [ 1574.288959][T15180] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1574.294943][T15180] ? lock_chain_count+0x20/0x20 [ 1574.299797][T15180] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1574.305183][T15180] ? lockdep_hardirqs_on+0x98/0x150 [ 1574.310389][T15180] ? __local_bh_enable_ip+0x13a/0x1c0 [ 1574.315781][T15180] ? _local_bh_enable+0xa0/0xa0 [ 1574.320635][T15180] ? __dev_queue_xmit+0x272/0x37e0 [ 1574.325750][T15180] ? __dev_queue_xmit+0x1329/0x37e0 [ 1574.330953][T15180] ? __dev_queue_xmit+0x272/0x37e0 [ 1574.336096][T15180] ? ref_tracker_free+0x686/0x830 [ 1574.341142][T15180] netlink_rcv_skb+0x235/0x4c0 [ 1574.345947][T15180] ? rtnetlink_bind+0x80/0x80 [ 1574.350634][T15180] ? netlink_ack+0x1160/0x1160 [ 1574.355412][T15180] ? __lock_acquire+0x7d80/0x7d80 [ 1574.360446][T15180] ? netlink_deliver_tap+0x2e/0x1b0 [ 1574.365645][T15180] netlink_unicast+0x7b1/0x930 [ 1574.370426][T15180] netlink_sendmsg+0x8d0/0xbf0 [ 1574.375199][T15180] ? netlink_getsockopt+0x590/0x590 [ 1574.380400][T15180] ? apparmor_socket_sendmsg+0x8e/0x330 [ 1574.385950][T15180] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 1574.391233][T15180] ? security_socket_sendmsg+0x80/0xa0 [ 1574.396691][T15180] ? netlink_getsockopt+0x590/0x590 [ 1574.401913][T15180] ____sys_sendmsg+0x61b/0x980 [ 1574.406710][T15180] ? __asan_memset+0x22/0x40 [ 1574.411307][T15180] ? __sys_sendmsg_sock+0x30/0x30 [ 1574.416333][T15180] ? __import_iovec+0x5f2/0x850 [ 1574.421215][T15180] ? import_iovec+0x73/0xa0 [ 1574.425725][T15180] ___sys_sendmsg+0x2a6/0x360 [ 1574.430410][T15180] ? __sys_sendmsg+0x2b0/0x2b0 [ 1574.435211][T15180] __se_sys_sendmsg+0x1d0/0x2c0 [ 1574.440065][T15180] ? __x64_sys_sendmsg+0x80/0x80 [ 1574.445042][T15180] ? lockdep_hardirqs_on+0x98/0x150 [ 1574.450240][T15180] do_syscall_64+0x55/0xb0 [ 1574.454656][T15180] ? clear_bhb_loop+0x40/0x90 [ 1574.459339][T15180] ? clear_bhb_loop+0x40/0x90 [ 1574.464015][T15180] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1574.469906][T15180] RIP: 0033:0x7fbbb959e159 [ 1574.474317][T15180] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1574.493922][T15180] RSP: 002b:00007fbbba45f028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1574.502332][T15180] RAX: ffffffffffffffda RBX: 00007fbbb9825fa0 RCX: 00007fbbb959e159 [ 1574.510322][T15180] RDX: 0000000000000000 RSI: 0000200000000300 RDI: 0000000000000006 [ 1574.518293][T15180] RBP: 00007fbbb963506b R08: 0000000000000000 R09: 0000000000000000 [ 1574.526282][T15180] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1574.534250][T15180] R13: 00007fbbb9826038 R14: 00007fbbb9825fa0 R15: 00007ffc83122fa8 [ 1574.542234][T15180] [ 1579.364944][T15203] SET target dimension over the limit! [ 1582.462990][T11571] usb 5-1: new full-speed USB device number 20 using dummy_hcd [ 1583.017587][T11571] usb 5-1: not running at top speed; connect to a high speed hub [ 1583.034695][T11571] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1583.062977][T11571] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1583.082474][T11571] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1583.112144][T11571] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1583.146112][T11571] usb 5-1: No streaming interface found for terminal 2. [ 1583.317598][T14324] usb 5-1: USB disconnect, device number 20 [ 1585.512162][T15241] SET target dimension over the limit! [ 1586.392729][T15254] loop3: detected capacity change from 0 to 128 [ 1592.224429][T15283] SET target dimension over the limit! [ 1599.838568][T15321] SET target dimension over the limit! [ 1605.598727][T15348] SET target dimension over the limit! [ 1607.479144][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.485639][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1611.381324][T15367] Can't find ip_set type hash:ne [ 1612.550535][T15375] loop4: detected capacity change from 0 to 128 [ 1612.586204][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1615.120909][T15392] SET target dimension over the limit! [ 1624.519716][T15427] Can't find ip_set type hash:ne [ 1627.118401][T15440] loop2: detected capacity change from 0 to 128 [ 1627.128498][T15442] loop4: detected capacity change from 0 to 128 [ 1628.643083][ T8474] usb 5-1: new full-speed USB device number 21 using dummy_hcd [ 1628.916339][ T8474] usb 5-1: not running at top speed; connect to a high speed hub [ 1628.965902][ T8474] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1629.051088][ T8474] usb 5-1: New USB device found, idVendor=046d, idProduct=0825, bcdDevice= 1.00 [ 1629.106943][ T8474] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1629.194592][ T8474] usb 5-1: Found UVC 1.00 device (046d:0825) [ 1629.241246][ T8474] usb 5-1: No streaming interface found for terminal 2. [ 1629.432896][ T8474] usb 5-1: USB disconnect, device number 21 [ 1630.721046][T15474] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1630.733409][T15474] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1630.744685][T15474] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1630.765973][T15474] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1630.774201][T15474] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1630.785804][T15474] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1630.918739][T15476] netlink: 'syz.4.2393': attribute type 1 has an invalid length. [ 1630.937791][T15476] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2393'. [ 1632.903071][T15474] Bluetooth: hci3: command tx timeout [ 1634.109511][T15486] bridge0: port 2(bridge_slave_1) entered disabled state [ 1634.117392][T15486] bridge0: port 1(bridge_slave_0) entered disabled state [ 1634.994548][T15474] Bluetooth: hci3: command tx timeout [ 1635.583069][T15486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1636.435781][T15486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1636.932884][T15486] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.941831][T15486] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.952391][T15486] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1636.961483][T15486] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1637.773749][T15474] Bluetooth: hci3: command tx timeout [ 1637.942723][T15486] syz.4.2395 (15486) used greatest stack depth: 20392 bytes left [ 1639.352092][T15472] chnl_net:caif_netlink_parms(): no params data found [ 1639.382975][ T28] audit: type=1800 audit(2000000131.530:54): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2405" name=08 dev="sda1" ino=2047 res=0 errno=0 [ 1639.677970][ T3004] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1639.783015][T15474] Bluetooth: hci3: command tx timeout [ 1639.843992][T15472] bridge0: port 1(bridge_slave_0) entered blocking state [ 1639.851464][T15472] bridge0: port 1(bridge_slave_0) entered disabled state [ 1639.893175][T15472] bridge_slave_0: entered allmulticast mode [ 1639.904742][T15472] bridge_slave_0: entered promiscuous mode [ 1640.019910][ T3004] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.193271][T15472] bridge0: port 2(bridge_slave_1) entered blocking state [ 1640.229128][T15472] bridge0: port 2(bridge_slave_1) entered disabled state [ 1640.253067][T15472] bridge_slave_1: entered allmulticast mode [ 1640.265322][T15472] bridge_slave_1: entered promiscuous mode [ 1640.437817][ T3004] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1640.523648][T15472] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1643.178180][ T3004] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1643.235311][T15472] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1643.330083][T15472] team0: Port device team_slave_0 added [ 1644.195861][T15472] team0: Port device team_slave_1 added [ 1644.305632][T15472] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1644.312636][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.361159][T15472] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1644.439565][ T3004] netdevsim netdevsim2 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.486346][T15472] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1644.502968][T15472] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1644.555409][T15472] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1644.620342][ T3004] netdevsim netdevsim2 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.659836][ T3004] netdevsim netdevsim2 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.744378][ T3004] netdevsim netdevsim2 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1644.788026][T15472] hsr_slave_0: entered promiscuous mode [ 1644.804125][T15472] hsr_slave_1: entered promiscuous mode [ 1646.836499][T15555] loop4: detected capacity change from 0 to 8 [ 1648.877205][T15472] netdevsim netdevsim2 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.151770][T15472] netdevsim netdevsim2 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.405986][T15472] netdevsim netdevsim2 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1649.419242][T15578] loop3: detected capacity change from 0 to 128 [ 1649.840298][T15472] netdevsim netdevsim2 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1652.306317][T15472] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1652.364375][T15472] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1652.393100][T15472] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1652.756464][T15604] ieee802154 phy0 wpan0: encryption failed: -22 [ 1653.420562][T15472] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1653.748433][ T3004] hsr_slave_0: left promiscuous mode [ 1653.764297][ T3004] hsr_slave_1: left promiscuous mode [ 1653.803516][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1653.811001][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1653.843856][ T3004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1653.851319][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1653.903735][ T3004] bridge_slave_1: left allmulticast mode [ 1653.909437][ T3004] bridge_slave_1: left promiscuous mode [ 1653.934180][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1653.983680][ T3004] bridge_slave_0: left allmulticast mode [ 1653.989378][ T3004] bridge_slave_0: left promiscuous mode [ 1654.024498][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1654.153661][ T3004] veth1_macvtap: left promiscuous mode [ 1654.159270][ T3004] veth0_macvtap: left promiscuous mode [ 1654.173591][ T3004] veth1_vlan: left promiscuous mode [ 1654.178972][ T3004] veth0_vlan: left promiscuous mode [ 1655.815392][T15631] loop3: detected capacity change from 0 to 128 [ 1660.573349][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 1660.750330][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 1660.865714][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1661.021184][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1661.626523][ T172] hid-generic 0000:0000:0000.0002: unknown main item tag 0x0 [ 1661.676305][ T172] hid-generic 0000:0000:0000.0002: hidraw0: HID v0.00 Device [syz1] on syz0 [ 1661.928625][ T3004] bond0 (unregistering): Released all slaves [ 1662.231790][T15472] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1662.266399][T15472] 8021q: adding VLAN 0 to HW filter on device team0 [ 1662.294856][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 1662.302085][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1663.246061][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1663.253246][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1663.877694][T15472] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1664.939146][T15472] veth0_vlan: entered promiscuous mode [ 1665.016997][T15472] veth1_vlan: entered promiscuous mode [ 1665.118425][T15472] veth0_macvtap: entered promiscuous mode [ 1665.190716][T15472] veth1_macvtap: entered promiscuous mode [ 1666.102209][T15472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.192535][T15472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.202549][T15472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1666.213293][T15472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.230442][T15472] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1666.248430][T15472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.272938][T15472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.297160][T15472] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1666.322834][T15472] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1666.341239][T15472] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1666.368438][T15472] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.392970][T15472] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.401727][T15472] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.432902][T15472] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1666.583274][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.591167][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.682637][T14644] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1666.709142][T14644] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1666.770739][T15713] netlink: 'syz.4.2452': attribute type 1 has an invalid length. [ 1666.791682][T15713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2452'. [ 1669.805812][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.812137][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1672.058916][T13486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1672.075264][T13486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1672.094409][T13486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1672.105376][T13486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1672.113141][T13486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1672.120549][T13486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1672.305242][T15740] loop2: detected capacity change from 0 to 128 [ 1673.602227][T15737] chnl_net:caif_netlink_parms(): no params data found [ 1674.183403][T13486] Bluetooth: hci1: command tx timeout [ 1674.224033][T15737] bridge0: port 1(bridge_slave_0) entered blocking state [ 1674.231258][T15737] bridge0: port 1(bridge_slave_0) entered disabled state [ 1674.295329][T15737] bridge_slave_0: entered allmulticast mode [ 1674.302633][T15737] bridge_slave_0: entered promiscuous mode [ 1674.378947][T15737] bridge0: port 2(bridge_slave_1) entered blocking state [ 1674.412915][T15737] bridge0: port 2(bridge_slave_1) entered disabled state [ 1674.447208][T15737] bridge_slave_1: entered allmulticast mode [ 1674.470415][T15737] bridge_slave_1: entered promiscuous mode [ 1674.568235][T15737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1674.599736][T15737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1674.720888][T15737] team0: Port device team_slave_0 added [ 1674.764764][T15737] team0: Port device team_slave_1 added [ 1674.873328][T15737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1674.887717][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.292816][T13486] Bluetooth: hci1: command tx timeout [ 1676.404151][T15737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1676.769581][T15737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1676.891996][T15737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1676.922840][T15737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1677.262134][ T49] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1678.342997][T13486] Bluetooth: hci1: command tx timeout [ 1678.436555][T15737] hsr_slave_0: entered promiscuous mode [ 1679.035584][T15799] input: syz1 as /devices/virtual/input/input13 [ 1680.435572][T13486] Bluetooth: hci1: command tx timeout [ 1680.504243][T15737] hsr_slave_1: entered promiscuous mode [ 1680.520304][T15737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1680.613020][T15737] Cannot create hsr debugfs directory [ 1681.616875][ T49] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1681.866758][ T49] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.024535][ T49] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1682.395425][ T49] netdevsim netdevsim3 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.461152][ T49] netdevsim netdevsim3 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.519381][ T49] netdevsim netdevsim3 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.580908][ T49] netdevsim netdevsim3 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1682.727510][T15737] netdevsim netdevsim3 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1682.936256][T15737] netdevsim netdevsim3 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1683.461939][T15737] netdevsim netdevsim3 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1683.636787][T15737] netdevsim netdevsim3 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1685.332267][T15845] input: syz1 as /devices/virtual/input/input14 [ 1688.530796][T15879] FAULT_INJECTION: forcing a failure. [ 1688.530796][T15879] name failslab, interval 1, probability 0, space 0, times 0 [ 1688.573946][T15879] CPU: 1 PID: 15879 Comm: syz.2.2488 Not tainted syzkaller #0 [ 1688.581474][T15879] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1688.591556][T15879] Call Trace: [ 1688.594854][T15879] [ 1688.597803][T15879] dump_stack_lvl+0x18c/0x250 [ 1688.602531][T15879] ? show_regs_print_info+0x20/0x20 [ 1688.607758][T15879] ? load_image+0x420/0x420 [ 1688.612290][T15879] ? __might_sleep+0xe0/0xe0 [ 1688.616910][T15879] ? __lock_acquire+0x7d80/0x7d80 [ 1688.621958][T15879] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1688.627967][T15879] should_fail_ex+0x394/0x4c0 [ 1688.632677][T15879] should_failslab+0x9/0x20 [ 1688.637208][T15879] slab_pre_alloc_hook+0x59/0x300 [ 1688.642263][T15879] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.647493][T15879] kmem_cache_alloc+0x5a/0x2c0 [ 1688.652285][T15879] ? taskstats_exit+0x14d/0xce0 [ 1688.657167][T15879] taskstats_exit+0x14d/0xce0 [ 1688.661870][T15879] ? sysctl_delayacct+0x220/0x220 [ 1688.666924][T15879] ? rcu_read_lock_any_held+0xb4/0x140 [ 1688.672414][T15879] ? rcu_read_lock_bh_held+0x100/0x100 [ 1688.677912][T15879] do_exit+0x8fc/0x2530 [ 1688.682220][T15879] ? put_task_struct+0xc0/0xc0 [ 1688.687037][T15879] ? lockdep_hardirqs_on_prepare+0x44c/0x7d0 [ 1688.693764][T15879] ? get_signal+0x100e/0x1390 [ 1688.699168][T15879] ? lock_chain_count+0x20/0x20 [ 1688.704045][T15879] ? _raw_spin_lock_irq+0xbb/0xf0 [ 1688.709099][T15879] do_group_exit+0x22d/0x2f0 [ 1688.713718][T15879] ? lockdep_hardirqs_on+0x98/0x150 [ 1688.718941][T15879] get_signal+0x12a6/0x1390 [ 1688.723475][T15879] arch_do_signal_or_restart+0xc2/0x7b0 [ 1688.729092][T15879] ? __ia32_sys_get_robust_list+0x110/0x110 [ 1688.735010][T15879] ? get_sigframe_size+0x20/0x20 [ 1688.740009][T15879] ? __sys_connect+0x27f/0x470 [ 1688.744817][T15879] ? exit_to_user_mode_loop+0x3b/0x110 [ 1688.750305][T15879] exit_to_user_mode_loop+0x70/0x110 [ 1688.755620][T15879] exit_to_user_mode_prepare+0xee/0x180 [ 1688.761191][T15879] syscall_exit_to_user_mode+0x1a/0x50 [ 1688.766671][T15879] do_syscall_64+0x61/0xb0 [ 1688.771112][T15879] ? clear_bhb_loop+0x40/0x90 [ 1688.775806][T15879] ? clear_bhb_loop+0x40/0x90 [ 1688.780503][T15879] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1688.786424][T15879] RIP: 0033:0x7f4925f9e159 [ 1688.790854][T15879] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1688.810498][T15879] RSP: 002b:00007f4926e180e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1688.818967][T15879] RAX: fffffffffffffe00 RBX: 00007f4926225fa8 RCX: 00007f4925f9e159 [ 1688.827063][T15879] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4926225fa8 [ 1688.835063][T15879] RBP: 00007f4926225fa0 R08: 0000000000000000 R09: 0000000000000000 [ 1688.843054][T15879] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1688.851044][T15879] R13: 00007f4926226038 R14: 00007fff795f3580 R15: 00007fff795f3668 [ 1688.859055][T15879] [ 1689.280030][T15737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1690.642910][T15737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1690.691825][T15737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1690.765439][T15737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1691.746646][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1691.771160][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1691.814216][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1691.821659][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1691.895617][ T49] bridge_slave_1: left allmulticast mode [ 1691.901325][ T49] bridge_slave_1: left promiscuous mode [ 1691.910155][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 1692.053960][ T49] bridge_slave_0: left allmulticast mode [ 1692.060136][ T49] bridge_slave_0: left promiscuous mode [ 1692.093024][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 1692.233595][ T49] veth1_macvtap: left promiscuous mode [ 1692.239303][ T49] veth0_macvtap: left promiscuous mode [ 1692.245774][ T49] veth1_vlan: left promiscuous mode [ 1692.251150][ T49] veth0_vlan: left promiscuous mode [ 1694.151656][T15913] Cannot find set identified by id 0 to match [ 1696.716344][ T49] team0 (unregistering): Port device team_slave_1 removed [ 1696.823596][ T49] team0 (unregistering): Port device team_slave_0 removed [ 1696.971648][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1697.127163][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1698.651497][ T49] bond0 (unregistering): Released all slaves [ 1699.571913][T15901] netlink: 'syz.2.2496': attribute type 1 has an invalid length. [ 1699.580169][T15901] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2496'. [ 1699.815898][T15737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1699.858741][T15737] 8021q: adding VLAN 0 to HW filter on device team0 [ 1699.885966][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1699.893205][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1699.924779][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1699.931992][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1700.030435][T15737] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1700.110780][ T49] IPVS: stop unused estimator thread 0... [ 1700.572084][T15737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1700.674939][T15737] veth0_vlan: entered promiscuous mode [ 1701.555947][T15737] veth1_vlan: entered promiscuous mode [ 1701.636326][T15737] veth0_macvtap: entered promiscuous mode [ 1701.679059][T15737] veth1_macvtap: entered promiscuous mode [ 1702.147498][T15737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1702.253533][T15737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.348113][T15737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1702.450950][T15737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.501022][T15737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1702.511749][T15737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.522491][T15737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.532425][T15737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1702.543097][T15737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1702.554546][T15737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1702.575106][T15737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.591645][T15737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.603044][T15737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.612191][T15737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1702.738438][T11976] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.772888][T11976] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1702.794556][T15957] loop2: detected capacity change from 0 to 128 [ 1702.863220][ T3537] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1702.871102][ T3537] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1707.038230][T15977] input: syz1 as /devices/virtual/input/input15 [ 1709.006342][T15984] netlink: 'syz.4.2513': attribute type 1 has an invalid length. [ 1709.035575][T15984] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2513'. [ 1721.831739][T16078] input: syz1 as /devices/virtual/input/input16 [ 1726.805003][T16105] 9pnet_virtio: no channels available for device syz [ 1726.814989][T16105] overlayfs: failed to clone upperpath [ 1728.450315][T16128] loop2: detected capacity change from 0 to 128 [ 1729.352981][ T8473] usb 4-1: new high-speed USB device number 36 using dummy_hcd [ 1729.554630][ T8473] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1729.576221][ T8473] usb 4-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1729.632208][ T8473] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1729.667866][ T8473] usb 4-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 1729.705889][ T8473] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1729.760401][ T8473] usb 4-1: config 0 descriptor?? [ 1730.098875][ T8473] usbhid 4-1:0.0: can't add hid device: -71 [ 1730.549616][T16140] netlink: 168 bytes leftover after parsing attributes in process `syz.5.2564'. [ 1730.567824][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.574256][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.589810][ T8473] usbhid: probe of 4-1:0.0 failed with error -71 [ 1730.644898][ T8473] usb 4-1: USB disconnect, device number 36 [ 1734.594253][T16164] xt_HMARK: spi-set and port-set can't be combined [ 1734.677770][T16164] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1740.314253][T16180] Can't find ip_set type hash:ne [ 1743.639391][T16203] cramfs: checking physical address 0x00000000239bd000 for linear cramfs image [ 1744.221034][T16203] cramfs: wrong magic [ 1744.271731][T16203] cramfs: wrong magic [ 1744.274179][T16206] xt_HMARK: spi-set and port-set can't be combined [ 1744.536824][T16212] FAULT_INJECTION: forcing a failure. [ 1744.536824][T16212] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 1744.561460][T16212] CPU: 0 PID: 16212 Comm: syz.3.2586 Not tainted syzkaller #0 [ 1744.569004][T16212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1744.579098][T16212] Call Trace: [ 1744.582407][T16212] [ 1744.585362][T16212] dump_stack_lvl+0x18c/0x250 [ 1744.590118][T16212] ? show_regs_print_info+0x20/0x20 [ 1744.595370][T16212] ? load_image+0x420/0x420 [ 1744.599963][T16212] ? __might_fault+0xaa/0x120 [ 1744.604687][T16212] ? __lock_acquire+0x7d80/0x7d80 [ 1744.609975][T16212] ? __virt_addr_valid+0x10c/0x380 [ 1744.615289][T16212] should_fail_ex+0x394/0x4c0 [ 1744.620268][T16212] _copy_to_user+0x2f/0xa0 [ 1744.624724][T16212] ? sockfs_setattr+0x160/0x160 [ 1744.629616][T16212] listxattr+0x16a/0x280 [ 1744.633971][T16212] __x64_sys_flistxattr+0x13c/0x1b0 [ 1744.639193][T16212] do_syscall_64+0x55/0xb0 [ 1744.643629][T16212] ? clear_bhb_loop+0x40/0x90 [ 1744.648319][T16212] ? clear_bhb_loop+0x40/0x90 [ 1744.653090][T16212] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1744.658987][T16212] RIP: 0033:0x7fc99e39e159 [ 1744.663455][T16212] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1744.683121][T16212] RSP: 002b:00007fc99f24c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000c4 [ 1744.691589][T16212] RAX: ffffffffffffffda RBX: 00007fc99e625fa0 RCX: 00007fc99e39e159 [ 1744.699714][T16212] RDX: 000000000000001a RSI: 00002000000000c0 RDI: 0000000000000004 [ 1744.708016][T16212] RBP: 00007fc99e43506b R08: 0000000000000000 R09: 0000000000000000 [ 1744.716043][T16212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1744.724139][T16212] R13: 00007fc99e626038 R14: 00007fc99e625fa0 R15: 00007ffe434d9518 [ 1744.732613][T16212] [ 1745.604345][T16215] Can't find ip_set type hash:ne [ 1750.008118][T16245] xt_HMARK: spi-set and port-set can't be combined [ 1753.206573][T16260] Can't find ip_set type hash:ne [ 1756.705580][T16290] loop3: detected capacity change from 0 to 4096 [ 1756.752250][T16290] NILFS (loop3): invalid segment: Checksum error in segment payload [ 1756.774087][T16290] NILFS (loop3): trying rollback from an earlier position [ 1756.830495][T16290] NILFS (loop3): recovery complete [ 1756.873310][T16291] NILFS (loop3): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1758.582850][T15474] Bluetooth: hci3: command 0x0406 tx timeout [ 1769.974909][T16355] 9pnet_virtio: no channels available for device syz [ 1769.984713][T16355] overlayfs: failed to clone upperpath [ 1771.647693][T16373] loop3: detected capacity change from 0 to 128 [ 1775.687183][T16395] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2633'. [ 1776.566522][T16396] ceph: No mds server is up or the cluster is laggy [ 1783.496766][T16451] xt_HMARK: spi-set and port-set can't be combined [ 1783.951299][T16452] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1785.576824][T16457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2650'. [ 1785.695680][T16459] 9pnet_virtio: no channels available for device syz [ 1785.706895][T16459] overlayfs: failed to clone upperpath [ 1785.745428][T14324] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1786.013823][T14324] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1786.803392][T14324] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1787.153296][T16460] ceph: No mds server is up or the cluster is laggy [ 1791.385426][T16488] 9pnet_virtio: no channels available for device syz [ 1791.796103][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.808267][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1793.592895][T13486] Bluetooth: hci1: command tx timeout [ 1796.958723][T16509] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2665'. [ 1797.411811][T11571] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1797.629154][T16519] ceph: No mds server is up or the cluster is laggy [ 1797.805729][ T8655] libceph: mon0 (1)0.0.0.0:6789 socket error on write [ 1798.999070][T15474] Bluetooth: hci1: command 0x0406 tx timeout [ 1800.065708][T16534] xt_HMARK: spi-set and port-set can't be combined [ 1800.518083][T16536] xt_HMARK: spi-set and port-set can't be combined [ 1802.480489][T16538] 9pnet_virtio: no channels available for device syz [ 1804.673369][T15474] Bluetooth: hci1: command 0x0406 tx timeout [ 1809.264358][T16569] 9pnet_virtio: no channels available for device syz [ 1809.282424][T16568] xt_HMARK: spi-set and port-set can't be combined [ 1809.305917][T16569] overlayfs: failed to clone upperpath [ 1814.421088][T16619] 9pnet_virtio: no channels available for device syz [ 1814.430876][T16619] overlayfs: failed to clone upperpath [ 1818.555210][T16651] xt_HMARK: spi-set and port-set can't be combined [ 1822.952709][T16662] SET target dimension over the limit! [ 1824.577156][T16674] 9pnet_virtio: no channels available for device syz [ 1824.597042][T16674] overlayfs: failed to clone upperpath [ 1827.954591][T16702] SET target dimension over the limit! [ 1828.563300][T16705] 9pnet_virtio: no channels available for device syz [ 1828.573029][T16705] overlayfs: failed to clone upperpath [ 1833.214590][T16740] 9pnet_virtio: no channels available for device syz [ 1835.935533][T13486] Bluetooth: hci1: command 0x0406 tx timeout [ 1838.381605][T16778] 9pnet_virtio: no channels available for device syz [ 1838.399580][T16778] overlayfs: failed to clone upperpath [ 1841.085778][T16795] process 'syz.5.2746' launched '/dev/ttyS3' with NULL argv: empty string added [ 1843.071190][T16816] 9pnet_virtio: no channels available for device syz [ 1843.102620][T16816] overlayfs: failed to clone upperpath [ 1849.487613][T16858] 9pnet_virtio: no channels available for device syz [ 1849.505411][T16858] overlayfs: failed to clone upperpath [ 1852.932152][T16880] xt_HMARK: spi-set and port-set can't be combined [ 1853.228610][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1853.892999][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1861.213827][T16936] KVM: debugfs: duplicate directory 16936-5 [ 1864.131513][T16963] KVM: debugfs: duplicate directory 16963-5 [ 1866.128413][T16976] FAULT_INJECTION: forcing a failure. [ 1866.128413][T16976] name failslab, interval 1, probability 0, space 0, times 0 [ 1866.141520][T16976] CPU: 0 PID: 16976 Comm: syz.3.2800 Not tainted syzkaller #0 [ 1866.149038][T16976] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 1866.159127][T16976] Call Trace: [ 1866.162427][T16976] [ 1866.165378][T16976] dump_stack_lvl+0x18c/0x250 [ 1866.170098][T16976] ? show_regs_print_info+0x20/0x20 [ 1866.175421][T16976] ? load_image+0x420/0x420 [ 1866.179937][T16976] ? __lock_acquire+0x7d80/0x7d80 [ 1866.184980][T16976] ? futex_wait_setup+0x270/0x270 [ 1866.190035][T16976] should_fail_ex+0x394/0x4c0 [ 1866.194757][T16976] should_failslab+0x9/0x20 [ 1866.199264][T16976] slab_pre_alloc_hook+0x59/0x300 [ 1866.204305][T16976] kmem_cache_alloc+0x5a/0x2c0 [ 1866.209106][T16976] ? getname_flags+0xbb/0x500 [ 1866.213786][T16976] getname_flags+0xbb/0x500 [ 1866.218308][T16976] vfs_fstatat+0x111/0x1b0 [ 1866.222734][T16976] __x64_sys_newfstatat+0x149/0x1f0 [ 1866.228042][T16976] ? __ia32_sys_newlstat+0x1e0/0x1e0 [ 1866.233347][T16976] ? lockdep_hardirqs_on+0x98/0x150 [ 1866.238555][T16976] do_syscall_64+0x55/0xb0 [ 1866.242995][T16976] ? clear_bhb_loop+0x40/0x90 [ 1866.247686][T16976] ? clear_bhb_loop+0x40/0x90 [ 1866.252457][T16976] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1866.258367][T16976] RIP: 0033:0x7fc99e39e159 [ 1866.262915][T16976] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1866.282550][T16976] RSP: 002b:00007fc99f24c028 EFLAGS: 00000246 ORIG_RAX: 0000000000000106 [ 1866.290989][T16976] RAX: ffffffffffffffda RBX: 00007fc99e625fa0 RCX: 00007fc99e39e159 [ 1866.298988][T16976] RDX: 0000000000000000 RSI: 0000000000000000 RDI: ffffffffffffff9c [ 1866.306965][T16976] RBP: 00007fc99e43506b R08: 0000000000000000 R09: 0000000000000000 [ 1866.314956][T16976] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000000 [ 1866.322938][T16976] R13: 00007fc99e626038 R14: 00007fc99e625fa0 R15: 00007ffe434d9518 [ 1866.330920][T16976] [ 1868.239139][T16994] loop2: detected capacity change from 0 to 512 [ 1868.359978][T16994] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1868.400392][T16994] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1868.427753][T16994] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2817: Corrupt directory, running e2fsck is recommended [ 1868.453884][T16994] EXT4-fs (loop2): Cannot turn on journaled quota: type 1: error -117 [ 1868.462391][T16994] EXT4-fs error (device loop2): ext4_iget_extra_inode:4752: inode #15: comm syz.2.2817: corrupted in-inode xattr: e_name out of bounds [ 1868.491289][T16994] EXT4-fs error (device loop2): ext4_orphan_get:1413: comm syz.2.2817: couldn't read orphan inode 15 (err -117) [ 1868.514061][T16994] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1868.596323][T16994] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1868.642162][T16994] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1868.683082][T16994] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2817: Corrupt directory, running e2fsck is recommended [ 1868.758392][T16999] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1868.810641][T16999] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1868.843415][T16999] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2817: Corrupt directory, running e2fsck is recommended [ 1868.993570][T16994] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1869.162667][T16994] EXT4-fs warning (device loop2): dx_probe:881: Enable large directory feature to access it [ 1869.689000][T17009] xt_HMARK: spi-set and port-set can't be combined [ 1869.700498][T16996] EXT4-fs error (device loop2): ext4_mb_generate_buddy:1244: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 1869.702909][T16994] EXT4-fs warning (device loop2): dx_probe:966: inode #2: comm syz.2.2817: Corrupt directory, running e2fsck is recommended [ 1869.782994][T17005] EXT4-fs warning (device loop2): dx_probe:878: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 1869.895849][T15472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1871.880888][T17031] KVM: debugfs: duplicate directory 17031-5 [ 1873.833721][T17053] xt_HMARK: spi-set and port-set can't be combined [ 1873.876642][T17053] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1878.014267][T17068] loop3: detected capacity change from 0 to 512 [ 1878.073237][T17068] EXT4-fs (loop3): Unsupported encryption level 190 [ 1880.331323][T17085] lo speed is unknown, defaulting to 1000 [ 1880.363246][T17085] lo speed is unknown, defaulting to 1000 [ 1880.430165][T17085] lo speed is unknown, defaulting to 1000 [ 1880.448357][T17085] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1880.505631][T17085] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 1880.686464][T17085] lo speed is unknown, defaulting to 1000 [ 1880.708153][T17085] lo speed is unknown, defaulting to 1000 [ 1880.720148][T17085] lo speed is unknown, defaulting to 1000 [ 1880.727093][T17092] xt_HMARK: spi-set and port-set can't be combined [ 1880.741907][T17085] lo speed is unknown, defaulting to 1000 [ 1883.551266][T17114] loop3: detected capacity change from 0 to 1024 [ 1885.975370][T17136] xt_HMARK: spi-set and port-set can't be combined [ 1888.123250][T17142] loop3: detected capacity change from 0 to 164 [ 1888.529217][T17144] rock: directory entry would overflow storage [ 1888.535881][T17144] rock: sig=0x4f50, size=4, remaining=3 [ 1888.541513][T17144] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1888.636767][T17143] rock: directory entry would overflow storage [ 1888.643526][T17143] rock: sig=0x4f50, size=4, remaining=3 [ 1888.649178][T17143] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1893.137425][T17179] KVM: debugfs: duplicate directory 17179-5 [ 1893.144407][T17182] loop3: detected capacity change from 0 to 128 [ 1893.358435][T17186] xt_HMARK: spi-set and port-set can't be combined [ 1895.815179][T15474] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1895.830815][T15474] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1895.840371][T15474] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1895.861846][T15474] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1895.923317][T15474] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1895.932478][T15474] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1896.187845][ T3537] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1896.203896][T17202] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2884'. [ 1897.356459][T17199] lo speed is unknown, defaulting to 1000 [ 1897.456202][ T3537] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.631646][ T3537] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1897.821282][ T3537] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1898.022946][T13486] Bluetooth: hci0: command tx timeout [ 1898.096458][ T3537] netdevsim netdevsim5 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1898.118734][ T3537] netdevsim netdevsim5 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1898.133465][T17199] chnl_net:caif_netlink_parms(): no params data found [ 1898.166735][ T3537] netdevsim netdevsim5 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1898.214225][ T3537] netdevsim netdevsim5 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1898.432180][T17228] loop2: detected capacity change from 0 to 1024 [ 1899.681034][T17199] bridge0: port 1(bridge_slave_0) entered blocking state [ 1899.741576][T17199] bridge0: port 1(bridge_slave_0) entered disabled state [ 1899.771071][T17199] bridge_slave_0: entered allmulticast mode [ 1899.782881][T17199] bridge_slave_0: entered promiscuous mode [ 1899.839832][T17258] SET target dimension over the limit! [ 1899.946973][T17199] bridge0: port 2(bridge_slave_1) entered blocking state [ 1900.401167][T13486] Bluetooth: hci0: command tx timeout [ 1900.503811][T17199] bridge0: port 2(bridge_slave_1) entered disabled state [ 1900.515750][T17199] bridge_slave_1: entered allmulticast mode [ 1900.544586][T17199] bridge_slave_1: entered promiscuous mode [ 1901.538837][T17264] Bluetooth: MGMT ver 1.22 [ 1901.745542][T17199] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1901.807724][T17199] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1902.126998][T17199] team0: Port device team_slave_0 added [ 1902.159086][T17199] team0: Port device team_slave_1 added [ 1902.392457][T17199] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1902.418090][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.466851][T17199] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1902.500704][T17283] loop3: detected capacity change from 0 to 2048 [ 1902.543083][T17283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1902.578994][T17199] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1902.588933][T13486] Bluetooth: hci0: command tx timeout [ 1902.606103][T17199] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1902.715157][T17199] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1903.116225][T17199] hsr_slave_0: entered promiscuous mode [ 1903.122977][T17199] hsr_slave_1: entered promiscuous mode [ 1903.297719][T17199] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1903.522021][T17302] SET target dimension over the limit! [ 1903.538731][T17199] Cannot create hsr debugfs directory [ 1904.802879][T13486] Bluetooth: hci0: command tx timeout [ 1905.022859][T17315] xt_HMARK: spi-set and port-set can't be combined [ 1905.075699][T17315] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1907.028160][T17199] netdevsim netdevsim5 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1907.156051][ T3537] hsr_slave_0: left promiscuous mode [ 1907.197543][ T3537] hsr_slave_1: left promiscuous mode [ 1907.204605][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1907.212054][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1907.273710][ T3537] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1907.281181][ T3537] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1907.314132][ T3537] bridge_slave_1: left allmulticast mode [ 1907.319851][ T3537] bridge_slave_1: left promiscuous mode [ 1907.332997][ T3537] bridge0: port 2(bridge_slave_1) entered disabled state [ 1907.342175][ T3537] bridge_slave_0: left allmulticast mode [ 1907.363587][ T3537] bridge_slave_0: left promiscuous mode [ 1907.368438][T17326] loop2: detected capacity change from 0 to 2048 [ 1907.369377][ T3537] bridge0: port 1(bridge_slave_0) entered disabled state [ 1907.433573][T17326] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1907.484044][ T3537] veth1_macvtap: left promiscuous mode [ 1907.489642][ T3537] veth0_macvtap: left promiscuous mode [ 1907.508220][ T3537] veth1_vlan: left promiscuous mode [ 1907.533430][ T3537] veth0_vlan: left promiscuous mode [ 1907.552987][ T5813] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 1907.785261][ T5813] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1907.808240][ T5813] usb 4-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice= 1.00 [ 1907.838973][ T5813] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1907.876219][ T5813] keyspan 4-1:1.0: Keyspan 2 port adapter converter detected [ 1907.902356][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 81 [ 1907.933449][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 1 [ 1907.975051][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 84 [ 1907.992978][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 2 [ 1908.011668][ T5813] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 1908.208039][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 88 [ 1908.400522][ T5813] keyspan 4-1:1.0: found no endpoint descriptor for endpoint 6 [ 1908.578371][ T5813] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 1908.754441][ T8473] usb 4-1: USB disconnect, device number 37 [ 1908.793309][ T8473] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 1908.839166][ T8473] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 1908.867645][ T8473] keyspan 4-1:1.0: device disconnected [ 1909.172578][T17341] SET target dimension over the limit! [ 1910.818765][T17350] xt_HMARK: spi-set and port-set can't be combined [ 1910.874007][T17350] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1913.130208][ T3537] team0 (unregistering): Port device team_slave_1 removed [ 1913.832026][ T3537] team0 (unregistering): Port device team_slave_0 removed [ 1915.210165][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1915.216557][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1915.317579][ T3537] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1915.517038][ T3537] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1915.676539][T17368] SET target dimension over the limit! [ 1916.621572][T17375] KVM: debugfs: duplicate directory 17375-5 [ 1917.840020][T17383] loop3: detected capacity change from 0 to 512 [ 1917.876657][T17383] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1917.947386][T17383] EXT4-fs (loop3): 1 truncate cleaned up [ 1917.994246][T17383] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1918.204951][T17383] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 1918.266590][T17383] overlayfs: failed to set xattr on upper [ 1918.275301][T17383] overlayfs: ...falling back to redirect_dir=nofollow. [ 1918.292117][T17383] overlayfs: ...falling back to index=off. [ 1918.298573][T17383] overlayfs: ...falling back to uuid=null. [ 1918.630912][T15737] EXT4-fs warning (device loop3): ext4_expand_extra_isize_ea:2858: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 1919.005286][ T3537] bond0 (unregistering): Released all slaves [ 1919.020392][T15737] EXT4-fs error (device loop3): mb_free_blocks:1970: group 0, inode 16: block 35:freeing already freed block (bit 34); block bitmap corrupt. [ 1919.131257][T15737] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1919.348873][T17398] loop3: detected capacity change from 0 to 512 [ 1919.358203][T17398] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 1919.423695][T17401] SET target dimension over the limit! [ 1920.201613][T17199] netdevsim netdevsim5 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1920.568980][T17199] netdevsim netdevsim5 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1921.478955][T17199] netdevsim netdevsim5 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1922.573096][T17199] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1922.619707][T17199] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1922.649379][T17199] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1922.687380][T17199] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1922.858634][T17430] loop3: detected capacity change from 0 to 1024 [ 1922.970626][T17199] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1923.007773][T17199] 8021q: adding VLAN 0 to HW filter on device team0 [ 1923.031766][ T1138] bridge0: port 1(bridge_slave_0) entered blocking state [ 1923.038969][ T1138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1923.130581][ T1138] bridge0: port 2(bridge_slave_1) entered blocking state [ 1923.137819][ T1138] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1923.750784][T17199] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1926.042597][T17199] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1926.047579][T17468] loop2: detected capacity change from 0 to 2048 [ 1926.098294][T17468] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1926.616613][T17483] loop3: detected capacity change from 0 to 1024 [ 1926.852669][T17199] veth0_vlan: entered promiscuous mode [ 1926.918746][T17199] veth1_vlan: entered promiscuous mode [ 1927.109482][T17199] veth0_macvtap: entered promiscuous mode [ 1927.353145][T17199] veth1_macvtap: entered promiscuous mode [ 1927.615361][T17199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1927.666427][T17199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1927.730016][T17199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1927.781819][T17199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1927.913603][T17199] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1927.959462][T17199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1928.762819][T17199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1928.797133][T17199] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1928.809726][T17199] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1928.905301][T17199] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1928.956824][T17199] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.981193][T17199] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1928.995029][T17199] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.073608][T17199] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1929.526456][T10686] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.570838][T10686] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1929.693321][ T1138] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1929.701254][ T1138] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1937.205754][T17586] loop2: detected capacity change from 0 to 512 [ 1937.483682][T17586] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1938.718648][T17586] ext4 filesystem being mounted at /131/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1938.864910][T17586] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 3: comm syz.2.2972: path (unknown): bad entry in directory: directory entry overrun - offset=0, inode=2, rec_len=2060, size=2048 fake=1 [ 1938.980538][T17586] EXT4-fs error (device loop2): ext4_readdir:263: inode #2: block 12: comm syz.2.2972: path (unknown): bad entry in directory: rec_len is smaller than minimal - offset=0, inode=5066064, rec_len=1, size=2048 fake=0 [ 1939.225410][T15472] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1940.605464][T17615] loop5: detected capacity change from 0 to 128 [ 1945.708087][T17645] loop3: detected capacity change from 0 to 1024 [ 1946.046067][T17647] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2990'. [ 1946.734060][ T3537] hfsplus: bad catalog file entry [ 1949.255712][T17676] loop3: detected capacity change from 0 to 1024 [ 1950.610092][T17682] netlink: 168 bytes leftover after parsing attributes in process `syz.3.2997'. [ 1951.063054][T15474] Bluetooth: hci3: command 0x0406 tx timeout [ 1951.624321][ T2950] hfsplus: bad catalog file entry [ 1953.316982][T13486] Bluetooth: hci3: command 0x0406 tx timeout [ 1956.127076][ T5813] IPVS: starting estimator thread 0... [ 1956.213145][T17720] IPVS: using max 35 ests per chain, 84000 per kthread [ 1956.964889][T17723] input: syz1 as /devices/virtual/input/input19 [ 1958.783359][ T5854] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 1959.024351][ T5854] usb 4-1: Using ep0 maxpacket: 8 [ 1959.080478][ T5854] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1959.132880][ T5854] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 1959.172881][ T5854] usb 4-1: New USB device found, idVendor=0458, idProduct=5017, bcdDevice= 0.00 [ 1959.198243][ T5854] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1959.249670][ T5854] usb 4-1: config 0 descriptor?? [ 1960.588731][ T5854] kye 0003:0458:5017.0003: tablet report size too small, or kye_tablet_rdesc unexpectedly large [ 1960.647550][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x3 [ 1960.674585][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1960.695094][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.348313][T17729] loop3: detected capacity change from 0 to 1024 [ 1961.432855][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.439621][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.450577][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.457403][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.465978][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.492796][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.499550][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.562903][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.569680][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.624713][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.631486][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.674412][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.681187][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.731377][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.738512][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.784169][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.790938][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.808262][T17753] loop2: detected capacity change from 0 to 164 [ 1961.849457][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.902952][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.909692][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.909953][T17753] RRIP_1991A [ 1961.962851][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1961.969601][ T5854] kye 0003:0458:5017.0003: unknown main item tag 0x0 [ 1962.023334][ T5854] kye 0003:0458:5017.0003: hidraw0: USB HID v0.04 Device [HID 0458:5017] on usb-dummy_hcd.3-1/input0 [ 1962.035391][T17755] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3022'. [ 1962.633536][T17757] rock: directory entry would overflow storage [ 1962.639824][T17757] rock: sig=0x4f50, size=4, remaining=3 [ 1962.645444][T17757] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1962.662680][T17756] rock: directory entry would overflow storage [ 1962.668918][T17756] rock: sig=0x4f50, size=4, remaining=3 [ 1962.674494][T17756] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1962.733071][ T5854] kye 0003:0458:5017.0003: tablet-enabling feature report not found [ 1962.741137][ T5854] kye 0003:0458:5017.0003: tablet enabling failed [ 1962.761778][ T5854] usb 4-1: USB disconnect, device number 38 [ 1962.905057][T17759] fido_id[17759]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1965.696724][T17788] loop3: detected capacity change from 0 to 164 [ 1967.458058][T17794] rock: directory entry would overflow storage [ 1967.464464][T17794] rock: sig=0x4f50, size=4, remaining=3 [ 1967.470001][T17794] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1967.487951][T17793] rock: directory entry would overflow storage [ 1967.494178][T17793] rock: sig=0x4f50, size=4, remaining=3 [ 1967.499710][T17793] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1968.836096][T13486] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1968.863362][T13486] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1968.880754][T13486] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1968.968465][T13486] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1968.984783][T13486] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1968.995527][T13486] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1970.363401][T17807] netlink: 'syz.2.3035': attribute type 21 has an invalid length. [ 1970.371286][T17807] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1970.380472][T17807] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3035'. [ 1970.509284][T17813] xt_HMARK: spi-set and port-set can't be combined [ 1972.223021][T13486] Bluetooth: hci2: command tx timeout [ 1972.341607][T17802] lo speed is unknown, defaulting to 1000 [ 1972.457738][ T3004] netdevsim netdevsim4 eth9: set [0, 0] type 1 family 0 port 8472 - 0 [ 1973.356688][ T3004] netdevsim netdevsim4 eth10: set [0, 0] type 1 family 0 port 8472 - 0 [ 1973.404177][T17822] loop3: detected capacity change from 0 to 164 [ 1973.427869][ T3004] netdevsim netdevsim4 eth11: set [0, 0] type 1 family 0 port 8472 - 0 [ 1973.498334][ T3004] netdevsim netdevsim4 eth12: set [0, 0] type 1 family 0 port 8472 - 0 [ 1973.637074][T17825] rock: directory entry would overflow storage [ 1973.643394][T17825] rock: sig=0x4f50, size=4, remaining=3 [ 1973.648959][T17825] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1973.657109][T17822] rock: directory entry would overflow storage [ 1973.663446][T17822] rock: sig=0x4f50, size=4, remaining=3 [ 1973.668987][T17822] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 1975.233115][T13486] Bluetooth: hci2: command tx timeout [ 1975.528812][T17802] chnl_net:caif_netlink_parms(): no params data found [ 1976.132329][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 1976.138887][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1977.415515][T15474] Bluetooth: hci2: command tx timeout [ 1977.660449][T17802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1977.713544][T17802] bridge0: port 1(bridge_slave_0) entered disabled state [ 1977.720811][T17802] bridge_slave_0: entered allmulticast mode [ 1977.752688][T17802] bridge_slave_0: entered promiscuous mode [ 1977.791255][T17802] bridge0: port 2(bridge_slave_1) entered blocking state [ 1977.818173][T17802] bridge0: port 2(bridge_slave_1) entered disabled state [ 1977.843316][T17802] bridge_slave_1: entered allmulticast mode [ 1977.850610][T17802] bridge_slave_1: entered promiscuous mode [ 1978.076798][T17802] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1978.157535][T17802] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1978.279415][T17802] team0: Port device team_slave_0 added [ 1978.362043][T17802] team0: Port device team_slave_1 added [ 1979.079162][T17802] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1979.102834][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1979.178120][T17802] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1979.214997][T17802] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1979.248772][T17802] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1979.341552][T17802] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1979.407587][T17879] xt_HMARK: spi-set and port-set can't be combined [ 1979.463030][T15474] Bluetooth: hci2: command tx timeout [ 1979.531545][T17879] pci 0000:00:01.0: [8086:7110] type 00 class 0x060100 [ 1983.885759][T17895] input: syz1 as /devices/virtual/input/input20 [ 1983.897086][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1984.053417][ T3004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1984.071470][ T3004] bridge_slave_1: left allmulticast mode [ 1984.077467][ T3004] bridge_slave_1: left promiscuous mode [ 1984.093068][ T3004] bridge0: port 2(bridge_slave_1) entered disabled state [ 1984.142310][ T3004] bridge_slave_0: left allmulticast mode [ 1984.154622][ T3004] bridge_slave_0: left promiscuous mode [ 1984.160441][ T3004] bridge0: port 1(bridge_slave_0) entered disabled state [ 1985.287885][T17900] 9pnet_virtio: no channels available for device syz [ 1987.682869][ T8655] usb 6-1: new full-speed USB device number 13 using dummy_hcd [ 1987.786806][T15474] Bluetooth: hci2: command tx timeout [ 1987.895948][ T8655] usb 6-1: config 0 has an invalid interface number: 41 but max is 0 [ 1987.932828][ T8655] usb 6-1: config 0 has no interface number 0 [ 1987.939612][ T8655] usb 6-1: config 0 interface 41 has no altsetting 0 [ 1987.982033][ T8655] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 1988.004059][ T8655] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1988.012109][ T8655] usb 6-1: Product: syz [ 1988.061817][ T8655] usb 6-1: Manufacturer: syz [ 1988.082852][ T8655] usb 6-1: SerialNumber: syz [ 1988.109278][ T8655] usb 6-1: config 0 descriptor?? [ 1988.121808][ T3004] team0 (unregistering): Port device team_slave_1 removed [ 1988.308566][ T3004] team0 (unregistering): Port device team_slave_0 removed [ 1988.566894][ T3004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1988.926641][ T3004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1989.049097][T17913] SET target dimension over the limit! [ 1989.079426][ T8655] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 1989.396534][ T8655] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to send software reset:ffffffb9 [ 1989.517767][ T8655] CoreChips 6-1:0.41 (unnamed net_device) (uninitialized): Failed to power down PHY : -71 [ 1989.529660][ T8655] CoreChips: probe of 6-1:0.41 failed with error -71 [ 1989.542339][ T8655] usb 6-1: USB disconnect, device number 13 [ 1991.406248][ T3004] bond0 (unregistering): Released all slaves [ 1992.775598][T17802] hsr_slave_0: entered promiscuous mode [ 1992.798443][T17802] hsr_slave_1: entered promiscuous mode [ 1992.813158][T17802] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1992.820766][T17802] Cannot create hsr debugfs directory [ 1995.829006][T17802] netdevsim netdevsim4 eth12 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1996.107009][T17802] netdevsim netdevsim4 eth11 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1996.424925][T17802] netdevsim netdevsim4 eth10 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1996.649498][T17802] netdevsim netdevsim4 eth9 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1997.421826][T17802] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1997.455376][T17802] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1997.511754][T17802] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1997.554380][T17802] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1997.952426][T17970] SET target dimension over the limit! [ 1998.661631][T17802] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1998.741729][T17802] 8021q: adding VLAN 0 to HW filter on device team0 [ 1999.489024][T17975] loop2: detected capacity change from 0 to 1024 [ 1999.556348][T10686] bridge0: port 1(bridge_slave_0) entered blocking state [ 1999.563577][T10686] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1999.595664][T10686] bridge0: port 2(bridge_slave_1) entered blocking state [ 1999.602900][T10686] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1999.636183][T17802] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1999.651277][T17802] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1999.686682][T17980] loop3: detected capacity change from 0 to 164 [ 2000.648422][T17989] rock: directory entry would overflow storage [ 2000.654784][T17989] rock: sig=0x4f50, size=4, remaining=3 [ 2000.660431][T17989] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 2000.689637][T17988] rock: directory entry would overflow storage [ 2000.697906][T17988] rock: sig=0x4f50, size=4, remaining=3 [ 2000.704024][T17988] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 2001.213355][T17997] ip_tables: iptables: counters copy to user failed while replacing table [ 2001.216812][T17802] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 2001.459229][T18005] loop2: detected capacity change from 0 to 512 [ 2001.519434][T18005] FAT-fs (loop2): Directory bread(block 2080) failed [ 2001.539949][T18005] FAT-fs (loop2): Directory bread(block 2081) failed [ 2001.564003][T18005] FAT-fs (loop2): Directory bread(block 2082) failed [ 2001.579671][T18005] FAT-fs (loop2): Directory bread(block 2083) failed [ 2001.596542][T18005] FAT-fs (loop2): Directory bread(block 2084) failed [ 2001.611120][T18005] FAT-fs (loop2): Directory bread(block 2085) failed [ 2001.631160][T18005] FAT-fs (loop2): Directory bread(block 2086) failed [ 2001.658631][T18005] FAT-fs (loop2): Directory bread(block 2087) failed [ 2002.788453][T17802] veth0_vlan: entered promiscuous mode [ 2002.854550][T17802] veth1_vlan: entered promiscuous mode [ 2004.093787][T17802] veth0_macvtap: entered promiscuous mode [ 2004.126041][T17802] veth1_macvtap: entered promiscuous mode [ 2004.190192][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.221141][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.255849][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.277756][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.312810][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 2004.348338][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2004.370096][T17802] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 2005.134582][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.172901][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.202908][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.243822][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.262845][T17802] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 2005.292874][T17802] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 2005.324510][T17802] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 2005.386085][T17802] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.402116][T17802] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.422837][T17802] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.431585][T17802] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 2005.645648][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.683034][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2005.753078][ T78] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 2005.760971][ T78] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 2006.249518][T18042] SET target dimension over the limit! [ 2007.054514][T18043] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3028'. [ 2007.063886][T18043] bridge_slave_1: left allmulticast mode [ 2007.069786][T18043] bridge_slave_1: left promiscuous mode [ 2007.076208][T18043] bridge0: port 2(bridge_slave_1) entered disabled state [ 2007.353522][T18043] bridge_slave_0: left allmulticast mode [ 2007.365262][T18043] bridge_slave_0: left promiscuous mode [ 2007.372172][T18043] bridge0: port 1(bridge_slave_0) entered disabled state [ 2008.671128][T18062] loop3: detected capacity change from 0 to 2048 [ 2008.704468][T18062] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2008.957227][T18068] loop5: detected capacity change from 0 to 2048 [ 2009.043079][T18068] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 2010.337138][T17199] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 2015.996604][T18125] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3080'. [ 2019.164007][T18145] xt_HMARK: spi-set and port-set can't be combined [ 2019.344959][T13486] Bluetooth: hci0: command 0x0406 tx timeout [ 2028.999659][T18191] loop3: detected capacity change from 0 to 2048 [ 2029.034713][T18191] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2031.523148][T18205] loop5: detected capacity change from 0 to 1024 [ 2031.589012][T18203] loop4: detected capacity change from 0 to 32768 [ 2031.600729][T18203] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop4 scanned by syz.4.3107 (18203) [ 2031.621628][T18203] BTRFS info (device loop4): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2031.631990][T18203] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 2031.640907][T18203] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 2031.650905][T18203] BTRFS info (device loop4): use zstd compression, level 3 [ 2031.658205][T18203] BTRFS info (device loop4): force clearing of disk cache [ 2031.665414][T18203] BTRFS info (device loop4): enabling disk space caching [ 2031.672493][T18203] BTRFS info (device loop4): disk space caching is enabled [ 2033.221541][T18203] BTRFS info (device loop4): enabling ssd optimizations [ 2033.228772][T18203] BTRFS info (device loop4): auto enabling async discard [ 2033.241302][T18203] BTRFS info (device loop4): rebuilding free space tree [ 2033.271826][T18203] BTRFS info (device loop4): disabling free space tree [ 2033.280334][T18203] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 2033.290248][T18203] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 2034.197267][T18226] input: syz1 as /devices/virtual/input/input21 [ 2035.752045][T17802] BTRFS info (device loop4): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 2036.130877][T17639] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 12 /dev/loop4 scanned by udevd (17639) [ 2037.816160][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 2037.854219][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 2039.661330][T18266] loop5: detected capacity change from 0 to 1024 [ 2042.915191][T18281] input: syz1 as /devices/virtual/input/input22 [ 2044.091416][T18283] loop5: detected capacity change from 0 to 2048 [ 2044.187115][T18283] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2047.279514][T18368] loop4: detected capacity change from 0 to 128 [ 2047.616193][T18373] loop5: detected capacity change from 0 to 1024 [ 2049.065338][T18376] loop3: detected capacity change from 0 to 2048 [ 2049.268055][T18376] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 2050.897429][T18394] input: syz1 as /devices/virtual/input/input23 [ 2054.335206][T18414] block2mtd: erasesize must be a divisor of device size [ 2054.398060][T18413] ------------[ cut here ]------------ [ 2054.403686][T18413] WARNING: CPU: 0 PID: 18413 at block/bdev.c:643 blkdev_flush_mapping+0xac/0x290 [ 2054.412938][T18413] Modules linked in: [ 2054.416990][T18413] CPU: 0 PID: 18413 Comm: syz.3.3141 Not tainted syzkaller #0 [ 2054.424821][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2054.435227][T18413] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 2054.441144][T18413] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 2054.461302][T18413] RSP: 0018:ffffc9000537fcb8 EFLAGS: 00010293 [ 2054.467575][T18413] RAX: ffffffff8414453c RBX: ffff888148888000 RCX: ffff88802abada00 [ 2054.475661][T18413] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 2054.483734][T18413] RBP: 0000000000000002 R08: ffff88814888803b R09: 1ffff11029111007 [ 2054.491709][T18413] R10: dffffc0000000000 R11: ffffed1029111008 R12: dffffc0000000000 [ 2054.499776][T18413] R13: dffffc0000000000 R14: ffff888148888134 R15: ffff888148888038 [ 2054.507776][T18413] FS: 0000555582a33500(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 2054.516748][T18413] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 2054.523355][T18413] CR2: 000000110c417e5b CR3: 0000000047c1f000 CR4: 00000000003506f0 [ 2054.531350][T18413] Call Trace: [ 2054.534666][T18413] [ 2054.537606][T18413] ? blkdev_put+0x492/0x7a0 [ 2054.542117][T18413] blkdev_put+0x49a/0x7a0 [ 2054.546474][T18413] blkdev_release+0x84/0x90 [ 2054.550980][T18413] ? blkdev_open+0x360/0x360 [ 2054.555813][T18413] __fput+0x221/0x940 [ 2054.559823][T18413] task_work_run+0x1d4/0x260 [ 2054.564515][T18413] ? task_work_cancel+0x220/0x220 [ 2054.569547][T18413] ? exit_to_user_mode_loop+0x3b/0x110 [ 2054.575032][T18413] exit_to_user_mode_loop+0xe6/0x110 [ 2054.580321][T18413] exit_to_user_mode_prepare+0xee/0x180 [ 2054.585916][T18413] syscall_exit_to_user_mode+0x1a/0x50 [ 2054.591413][T18413] do_syscall_64+0x61/0xb0 [ 2054.595870][T18413] ? clear_bhb_loop+0x40/0x90 [ 2054.600558][T18413] ? clear_bhb_loop+0x40/0x90 [ 2054.605277][T18413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2054.611181][T18413] RIP: 0033:0x7fc99e39e159 [ 2054.615658][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2054.635316][T18413] RSP: 002b:00007ffe434d9678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2054.643760][T18413] RAX: 0000000000000000 RBX: 00007fc99e627da0 RCX: 00007fc99e39e159 [ 2054.651732][T18413] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2054.660062][T18413] RBP: 00007fc99e627da0 R08: 00007fc99e626038 R09: 0000000000000000 [ 2054.668126][T18413] R10: 00000000003ffd48 R11: 0000000000000246 R12: 00000000001f5b93 [ 2054.676126][T18413] R13: 00007fc99e625fac R14: 00000000001f58cf R15: 00007ffe434d9780 [ 2054.684132][T18413] [ 2054.687153][T18413] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 2054.694428][T18413] CPU: 0 PID: 18413 Comm: syz.3.3141 Not tainted syzkaller #0 [ 2054.701905][T18413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/16/2026 [ 2054.711963][T18413] Call Trace: [ 2054.715245][T18413] [ 2054.718176][T18413] dump_stack_lvl+0x18c/0x250 [ 2054.722857][T18413] ? show_regs_print_info+0x20/0x20 [ 2054.728076][T18413] ? load_image+0x420/0x420 [ 2054.732583][T18413] panic+0x2ca/0x720 [ 2054.736477][T18413] ? bpf_jit_dump+0xd0/0xd0 [ 2054.740992][T18413] __warn+0x2e0/0x470 [ 2054.744975][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.750261][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.755550][T18413] report_bug+0x2be/0x4f0 [ 2054.759977][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.765273][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.770587][T18413] ? blkdev_flush_mapping+0xae/0x290 [ 2054.775872][T18413] handle_bug+0xcf/0x120 [ 2054.780214][T18413] exc_invalid_op+0x1a/0x50 [ 2054.784737][T18413] asm_exc_invalid_op+0x1a/0x20 [ 2054.789594][T18413] RIP: 0010:blkdev_flush_mapping+0xac/0x290 [ 2054.795485][T18413] Code: 42 80 3c 28 00 74 08 4c 89 f7 e8 4f d2 cb fd 49 8b 3e 48 ba ff ff ff ff ff ff ff 7f 31 f6 e8 4b 57 a1 fd eb 11 e8 14 46 73 fd <0f> 0b 48 85 db 75 9f e8 08 46 73 fd 48 89 1c 24 4c 8d b3 80 00 00 [ 2054.815174][T18413] RSP: 0018:ffffc9000537fcb8 EFLAGS: 00010293 [ 2054.821238][T18413] RAX: ffffffff8414453c RBX: ffff888148888000 RCX: ffff88802abada00 [ 2054.829211][T18413] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 2054.841363][T18413] RBP: 0000000000000002 R08: ffff88814888803b R09: 1ffff11029111007 [ 2054.851100][T18413] R10: dffffc0000000000 R11: ffffed1029111008 R12: dffffc0000000000 [ 2054.859092][T18413] R13: dffffc0000000000 R14: ffff888148888134 R15: ffff888148888038 [ 2054.867425][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.872813][T18413] ? blkdev_flush_mapping+0xac/0x290 [ 2054.878299][T18413] ? blkdev_put+0x492/0x7a0 [ 2054.882808][T18413] blkdev_put+0x49a/0x7a0 [ 2054.887708][T18413] blkdev_release+0x84/0x90 [ 2054.892208][T18413] ? blkdev_open+0x360/0x360 [ 2054.896790][T18413] __fput+0x221/0x940 [ 2054.900790][T18413] task_work_run+0x1d4/0x260 [ 2054.905400][T18413] ? task_work_cancel+0x220/0x220 [ 2054.910429][T18413] ? exit_to_user_mode_loop+0x3b/0x110 [ 2054.916011][T18413] exit_to_user_mode_loop+0xe6/0x110 [ 2054.921308][T18413] exit_to_user_mode_prepare+0xee/0x180 [ 2054.926867][T18413] syscall_exit_to_user_mode+0x1a/0x50 [ 2054.932333][T18413] do_syscall_64+0x61/0xb0 [ 2054.936753][T18413] ? clear_bhb_loop+0x40/0x90 [ 2054.941431][T18413] ? clear_bhb_loop+0x40/0x90 [ 2054.946105][T18413] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 2054.951996][T18413] RIP: 0033:0x7fc99e39e159 [ 2054.956417][T18413] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 2054.976237][T18413] RSP: 002b:00007ffe434d9678 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 2054.984661][T18413] RAX: 0000000000000000 RBX: 00007fc99e627da0 RCX: 00007fc99e39e159 [ 2054.992639][T18413] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 2055.000611][T18413] RBP: 00007fc99e627da0 R08: 00007fc99e626038 R09: 0000000000000000 [ 2055.008577][T18413] R10: 00000000003ffd48 R11: 0000000000000246 R12: 00000000001f5b93 [ 2055.016545][T18413] R13: 00007fc99e625fac R14: 00000000001f58cf R15: 00007ffe434d9780 [ 2055.024525][T18413] [ 2055.027845][T18413] Kernel Offset: disabled [ 2055.032244][T18413] Rebooting in 86400 seconds..