last executing test programs: 2m55.197989555s ago: executing program 0 (id=168): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[], 0x1, 0x1b1, &(0x7f00000003c0)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x81009431, &(0x7f00000001c0)) setsockopt$ALG_SET_KEY(r3, 0x117, 0x7, &(0x7f0000000100)="fbffffff", 0x4) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f0000000400)='./file3\x00', 0x210048, &(0x7f00000003c0)=ANY=[], 0xfd, 0x1f0, &(0x7f0000000080)="$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") read$FUSE(r5, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r5, &(0x7f0000000040)={0x50, 0x0, r6, {0x7, 0x1f, 0x8, 0xffffffffd24b2432, 0x83, 0xffff, 0x0, 0xabe6, 0x0, 0x0, 0x80, 0x8001}}, 0x50) r7 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000408000001800128008000100736974000c00028008000100", @ANYRES32=r8], 0x38}}, 0x0) 2m54.238160065s ago: executing program 0 (id=170): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x8041, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) r1 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000440)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(r0, 0xc0045009, &(0x7f0000000040)=0x2fff) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) 2m51.130150078s ago: executing program 0 (id=179): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000580)={[{@max_batch_time={'max_batch_time', 0x3d, 0x4}}, {@max_batch_time={'max_batch_time', 0x3d, 0x2}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x6a}}, {@block_validity}, {@errors_remount}, {@nombcache}]}, 0x1, 0x44f, &(0x7f0000000640)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000d80)='./file1\x00', 0x143042, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r0, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4, 0x100000003, 0x1}) lsetxattr$trusted_overlay_upper(&(0x7f00000001c0)='./file1\x00', &(0x7f0000000180), &(0x7f00000001c0)=ANY=[], 0x361, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x0) ioctl$TCSETSF(r1, 0x5404, 0x0) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) lsetxattr$security_ima(&(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000380)=@v1={0x2, "98ef2ec5"}, 0x5, 0x1) 2m50.176083042s ago: executing program 3 (id=180): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x3, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x20}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x89ca}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = syz_mount_image$btrfs(&(0x7f0000000100), &(0x7f0000000500)='./file0\x00', 0x810, &(0x7f0000000180)={[{@discard}, {@compress_algo={'compress', 0x3d, 'zstd'}}, {@rescan_uuid_tree}, {@usebackuproot}, {@skip_balance}, {@autodefrag}, {@commit={'commit', 0x3d, 0x9}}, {@acl}]}, 0x3, 0x5122, &(0x7f0000006440)="$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") fsetxattr$trusted_overlay_nlink(r0, &(0x7f00000002c0), 0x0, 0x0, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101142, 0xeaff) bind$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4e22, 0x20000000, @loopback}, 0x1c) write$binfmt_aout(r1, &(0x7f0000000180)=ANY=[], 0x29f) ioctl$FICLONERANGE(r1, 0x4020940d, &(0x7f00000000c0)={{r1}, 0x0, 0x0, 0x100000}) 2m48.49028139s ago: executing program 0 (id=186): syz_mount_image$exfat(&(0x7f0000001500), &(0x7f0000001540)='./file0\x00', 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0035de937e8e1b26ce9bd355819db1a6abda330df4831ffdbbf3dfa77aca3418100187bc8591108841612f023a7939f7fdcc7f4034bf07f88afd63d2af1c39d6da7e423f"], 0x1, 0x14d1, &(0x7f00000015c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0xd0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) creat(0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x19, 0x0, 0x0) r1 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r1, &(0x7f0000001fc0)=""/184, 0xb8) 2m48.352874722s ago: executing program 3 (id=189): socket$unix(0x1, 0x5, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f00020000000905050200de7e001009058b1e20"], 0x0) close(0x3) syz_usb_control_io(r0, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000000080)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_open_dev$char_usb(0xc, 0xb4, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)) 2m47.158867009s ago: executing program 0 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) syz_emit_ethernet(0x0, 0x0, 0x0) write$tun(r0, &(0x7f0000000300)={@val={0x0, 0xe64e}, @void, @eth={@remote, @multicast, @val={@void}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x1, 0x5, 0x54, 0x67, 0x0, 0x0, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, {{0x4e24, 0x4e23, 0x41424344, 0x41424344, 0x1, 0x0, 0x10, 0x80, 0xfde9, 0x0, 0xc80, {[@mss={0x2, 0x4, 0xf5}, @sack_perm={0x4, 0x2}, @exp_fastopen={0xfe, 0x13, 0xf989, "d08fd5f854bb2cf0425e5fb443a717"}, @mptcp=@synack={0x1e, 0x10, 0xd, 0x2, 0x2, 0x6, 0x9}]}}}}}}}}, 0x6a) 2m44.76616613s ago: executing program 0 (id=198): clock_nanosleep(0x2, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m44.681380458s ago: executing program 3 (id=200): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000000)={{0x0, 0x989680}, {r1, r2+10000000}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80000) splice(r4, 0x0, r6, 0x0, 0x38f9, 0x0) fcntl$setstatus(r5, 0x4, 0x42c00) write(r3, &(0x7f0000000040), 0xffffff4a) 2m43.988680172s ago: executing program 32 (id=198): clock_nanosleep(0x2, 0x1, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x10, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) 2m43.566913355s ago: executing program 3 (id=202): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x42}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x4, 0xfffb}, {}, {0x6, 0xffff}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x80) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r3, {0xc, 0x3}, {0x0, 0xfff1}, {0x0, 0xdc3635b346d16fb8}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 2m42.203806044s ago: executing program 3 (id=206): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m41.210014247s ago: executing program 3 (id=215): close(0xffffffffffffffff) unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}, 0x1, 0x566, &(0x7f0000000540)="$eJzs3M9uG8cZAPBZmbJVFXUDBI0dxYeN04MLNAxJ1zKEAAHY1VLahOISu6vAPhVBLQVCpbRIUqDxzRe3BfoSaW99gp76RkGPPaZYLuk4tkjLfxIaze8HSDPkfjvzzYrYD6QwDAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAiJLtTqcbhWE22r8Vz5dsF/neguOz8f71rWbBvCFE9U9YWwuXm6cuv/rN4Z/Vv66GS82jS2GtbtbC3R+/9sq7r7ZWZucvSOh7sDpN9vjg08WBUfg6+r6S+m7snnapW/FOOsrKPNvr76RxVubx1uZm553dQRkPsmFa3i6rdC9OWqFf5UV8LflF3N3auh6n7dv5/mhnuz9MZ0/efLvX6WzG77fHab8o89E777fLZDcbDrPRziSmPlzH3KxfiB9kVXzhwbW//qTcD4+OD7pnCeo9KajX6fW63V6vu3lj68bNTqf12BOdR4THIpb9omXZXtCdG57frP4DAAAA/7+iyWfs9fv/1cnn8FEYRF83lp0aAAAA8IJM/vN/6R9R/f4/hHA5RINsmHaWnRYAAADwAv3liXvsyvGF6N//CUWxGt0b3/p5dNKv4/on55rzzj06YjVoRReng0yazdb0UZJeiV5vgl6fRX81bQ6flEf0FAlszEkg/C1sNDEbd5r2zuxIM8v6IBum7SQfvtsN/f7FlSq9Vf3xk6M/hcny/zrauxiFw6Pjg/Zvf398Z5LLvXqUeyfTDRSP7aNYkMvnD/Y9PrLiL5uhVutcoum86828nYfXv9KcvvIUc94PbzQxb6w37fq3179Wz9ltz1v9evSTyWa651z5/XClibly7a26eevaKVn0Tsvi/HTwyW69h7N4pmtxhiyuL7gW4fDoQgjhTFn8aF4WAMtyOK8KPaj/j9bd1jPca7+p7u99h9X9fniziXlzY3JjbW2cckfvtKOw4I4+q7H3zj9rdftnuNrEXJ0Fn1pj3/vpZN7wymzepqpOiv+Xc+cth72o/kOd+/zkD+G1z764+/bRyUcfH3x88Emvd32z86tO50YvrE6WMW0WZArAD1dafBWtV3+OiiIb/6a7tdXtV7tpXOTJB3GRbe+kcTaq0iLZ7Y920nhc5FWe5MO682G2nZZxuT8e50UVD/IiHudldmvyzS/x9KtfyjT8clRlSTkepv0yjZN8VPWTKt7OyiQe7/96mJW7aTE5uRynSTbIkn6V5aO4le//PUnbcVym6UOB2XY6qrJBVndH8bjI9vrF7fjDfLi/l8bbaZkU2bjKmwFnc2WjQV7s9avsXGgv+2IDwEvisy/u/u6j4+ODT8/Y+e90c+DTnPX4rOeXsVQAYGpRlQYAAAAAAAAAAAAAAF4OT7v/7wV2VqcpLGd2nbN1wtpLkcZyOivPPU7rJVjF3M7sJnBqzPLuSQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAwz/8CAAD//3bhnLY=") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, &(0x7f0000000040)=""/225, 0xe1) 2m33.830289171s ago: executing program 4 (id=248): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x3, 0xd}, {0x81ff}, {0x3, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40004) 2m32.932199721s ago: executing program 4 (id=253): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_open_dev$loop(&(0x7f0000000240), 0x41, 0x1c0862) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_freeze_timeout', 0x82802, 0xf) ioctl$LOOP_CONFIGURE(r1, 0x4c0a, &(0x7f0000000040)={r2, 0x1000, {0x0, 0x0, 0x0, 0x6, 0x4000000000001001, 0x0, 0x0, 0x8, 0xc, "faf98317e5a1149989fc8dbe53ea6acc96e3a2503dc3bd3fe37d58128bbad0099cebdc25f5ab60c9e6d680f985881a8a0f3500000000000000000e00", "32d8cc26f7061a74df2cfc72c89f3d9e234b30c50997d3bcf409ff2176ff7bfe55cd4a5d83cd4a5249d3ffe70c7f3f800b2f1c6aa54cc50a1fcaed33ba1fa79a", "675237601a8ca5b07dcc141802c4dae4162e43ac61b7ad3300", [0x9, 0x8000000000000000]}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) r3 = syz_open_dev$usbmon(&(0x7f0000000240), 0x8, 0x0) ioctl$MON_IOCT_RING_SIZE(r3, 0x9204, 0x8c397e) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[], 0x44}}, 0x80) 2m29.89891024s ago: executing program 4 (id=265): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000200), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x3, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'wlan1\x00', 0x0}) ioctl(r2, 0x8b18, &(0x7f0000000040)) 2m29.740450288s ago: executing program 4 (id=266): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) link(&(0x7f0000001240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000bc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') rename(&(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000f40)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') creat(&(0x7f0000000380)='./bus\x00', 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7f, 0x8005, 0x0, 0x2, 0x19, 0xd, "ef35bf413db93807000000ae6ddd2900000029c2eeee09e737110f5bcb7639c2eb4b78c6df705642031afab4af000055a3f6a00400", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000c700e6d602000000000000080000000001", [0x1000, 0x1]}) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) 2m29.043439261s ago: executing program 4 (id=272): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000062d14406d0470084761000000010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 2m27.138330777s ago: executing program 4 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) unlink(&(0x7f0000000140)='./file0/file1\x00') creat(&(0x7f0000000080)='./file1\x00', 0x182) unlink(&(0x7f0000000340)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m26.200308847s ago: executing program 33 (id=283): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) mknodat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x21c0, 0x103) syz_mount_image$vfat(&(0x7f0000000300), &(0x7f0000000280)='./bus\x00', 0x3c9c9b, 0x0, 0x0, 0x0, &(0x7f0000000140)) mount$overlay(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000100)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) unlink(&(0x7f0000000140)='./file0/file1\x00') creat(&(0x7f0000000080)='./file1\x00', 0x182) unlink(&(0x7f0000000340)='./file1\x00') mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}, {@nfs_export_on}]}) 2m26.122364655s ago: executing program 34 (id=215): close(0xffffffffffffffff) unshare(0x400) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = gettid() timer_create(0x1, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000000)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_mount_image$iso9660(&(0x7f0000000140), &(0x7f00000000c0)='./file0\x00', 0x8010, &(0x7f0000000000)={[{@iocharset={'iocharset', 0x3d, 'ascii'}}]}, 0x1, 0x566, &(0x7f0000000540)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) getdents64(r1, &(0x7f0000000040)=""/225, 0xe1) 1m22.437906014s ago: executing program 8 (id=471): socket(0x400000000010, 0x3, 0x0) syz_open_dev$video(&(0x7f0000000000), 0x8, 0x80) syz_open_dev$vim2m(&(0x7f0000000000), 0x8000000000, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)) openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) syz_clone(0x8021000, 0x0, 0x0, &(0x7f0000000100), 0x0, 0x0) openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) openat$audio1(0xffffffffffffff9c, &(0x7f0000000080), 0x129202, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48240) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, 0x0) 1m20.04863305s ago: executing program 8 (id=479): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000008c0), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, 0x0, 0x4) readlink(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_TABLE(r3, 0x29, 0xcf, 0x0, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x60, 0x9, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0x40}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x38, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_PROTO={0x5, 0x7, 0xff}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xe0004000}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP2={0xc, 0x14, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) 1m15.618303954s ago: executing program 5 (id=488): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x29, 0x5, 0x0) r3 = syz_io_uring_setup(0x90c, &(0x7f0000000200)={0x0, 0x5885, 0x0, 0x0, 0xfd}, &(0x7f0000000740)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x40, 0x0, r2, 0x0, 0x0, 0x0, 0x10}) io_uring_enter(r3, 0x3516, 0x0, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x1e, 0x4, 0x0) 1m13.075232954s ago: executing program 8 (id=492): prlimit64(0x0, 0xe, &(0x7f0000000280)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) sched_setaffinity(0x0, 0xfffffffffffffe02, &(0x7f00000002c0)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f00000003c0)="93378e", 0x3) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r2 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r2, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) readv(r2, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 1m7.80468125s ago: executing program 8 (id=497): r0 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000005580)=""/102392, 0x18ff8) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="5c00000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c0002800500010000000000080008400000000814000580080001"], 0x5c}, 0x1, 0x0, 0x0, 0x20008800}, 0x0) 1m6.352388701s ago: executing program 8 (id=499): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f0000000700)={0x1c, &(0x7f0000000580)=ANY=[@ANYBLOB="7dbcf8"], 0x0, 0x0, 0x0, 0x0, 0x0}) 1m4.918842742s ago: executing program 5 (id=503): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="05031600d3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x801, 0x4, 0x7, 0xe}) socket$nl_route(0x10, 0x3, 0x0) setfsgid(0xee00) r2 = syz_clone(0x80000000, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r3) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x800000, 0x0) syz_open_procfs(r2, &(0x7f0000000040)='fd/3\x00') r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) ioctl$KDSKBMETA(r4, 0x4b3d, 0x0) 1m1.885947417s ago: executing program 5 (id=508): setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000000), 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000a80), 0x12) fsopen(0x0, 0x0) 1m1.584395893s ago: executing program 8 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 1m0.580120036s ago: executing program 5 (id=511): ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(0xffffffffffffffff, 0x40045542, &(0x7f0000000400)=0x800) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, &(0x7f00000000c0)=0x3, 0x4) r0 = syz_io_uring_setup(0x239, &(0x7f0000000500)={0x0, 0x0, 0x3, 0x0, 0x142}, &(0x7f0000000000), &(0x7f0000000100)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) unshare(0x2c020400) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x5885, 0x800, 0x1000002, 0xffeffc03, 0x0, r0}, &(0x7f00000005c0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_MKDIRAT={0x25, 0x8, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)='./file0\x00', 0x104, 0x0, 0x1}) io_uring_enter(r2, 0x351e, 0x483, 0x0, 0x0, 0x0) 59.912708673s ago: executing program 5 (id=514): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) fcntl$setlease(0xffffffffffffffff, 0x400, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mknod$loop(&(0x7f0000000180)='./file0\x00', 0x0, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) mount(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000280)='cifs\x00', 0x0, &(0x7f00000002c0)='cache=nonw') syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) 57.754707892s ago: executing program 5 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 45.445824433s ago: executing program 35 (id=510): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x1, 0x3}, {}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) 42.21433873s ago: executing program 36 (id=517): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0x1, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000004c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r3, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$kcm(0x11, 0x3, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r5, &(0x7f0000000280)={&(0x7f0000000380)=@xdp={0x2c, 0xdd86, r7, 0x3e}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x5) 28.795773117s ago: executing program 1 (id=570): openat$comedi(0xffffffffffffff9c, 0x0, 0x101000, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x3, 0x9, 0x41, @ipv4={'\x00', '\xff\xff', @empty}, @loopback, 0x40, 0x7800, 0xfff, 0xc82}}) mkdir(0x0, 0xfffffffffffffffe) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) getpid() socketpair$unix(0x1, 0x2, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001480)=ANY=[@ANYBLOB="4800000010001fff27bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="00c200002398040028001280090001007665746800000000"], 0x48}}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000000)={0x24, @short={0x2, 0x1, 0xaaa3}}, 0x14) r2 = landlock_create_ruleset(&(0x7f0000000040)={0x2, 0x3, 0x3}, 0x18, 0x0) landlock_restrict_self(r2, 0x0) landlock_restrict_self(r2, 0x9) landlock_restrict_self(r2, 0x0) 24.930925655s ago: executing program 1 (id=577): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="adcd1a9a3fc36e961ed00fe41b0cd695", 0x20) r1 = accept4$alg(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f00000021c0)=[{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)="a92e81d0991808e3", 0x8}], 0x1, &(0x7f0000001040)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x880}], 0x1, 0x80001) recvmmsg(r1, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000002c0)=""/232, 0xe8}], 0x1}, 0x2}, {{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000001080)=""/4096, 0x1000}], 0x1}, 0x8}], 0x2, 0x40000142, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_usb_connect(0x3, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0xb2, 0xfc, 0x5e, 0x10, 0x46d, 0xc281, 0xc208, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0xc0, 0x0, [{{0x9, 0x4, 0xbf, 0x2, 0x2, 0x84, 0x28, 0x32, 0x0, [], [{{0x9, 0x5, 0xb, 0x10, 0x40, 0x5, 0x5, 0x8}}, {{0x9, 0x5, 0x4, 0x8, 0x40, 0x68, 0x0, 0x3}}]}}]}}]}}, 0x0) bind$bt_hci(r3, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) syz_open_dev$I2C(&(0x7f0000000000), 0x0, 0x0) write$bt_hci(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="0e0001000200"], 0x8) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x30, 0x0, 0x8, 0x5, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x6003}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x44000}, 0x4000000) r4 = syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000040)='./file0\x00', 0x0, &(0x7f0000000240)={[{@nodiscard}, {@noflush_merge}, {@four_active_logs}, {@alloc_mode_reuse}, {@nodiscard}, {@disable_roll_forward}, {@usrjquota={'usrjquota', 0x3d, '--'}}, {@noflush_merge}, {@noextent_cache}, {@grpjquota={'grpjquota', 0x3d, 'user_xattr'}}, {@data_flush}, {@adaptive_mode}, {@jqfmt_vfsold}, {@noinline_dentry}]}, 0x1, 0x5505, &(0x7f0000002480)="$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") syz_mount_image$msdos(&(0x7f0000000180), &(0x7f0000000000)='.\x00', 0x18424bc, &(0x7f00000003c0)=ANY=[], 0x0, 0x0, &(0x7f0000000000)) ioctl$XFS_IOC_FSGROWFSLOG(r4, 0x4008586f, &(0x7f0000000080)={0xc7fc, 0x7}) 19.829443677s ago: executing program 1 (id=585): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) mq_open(&(0x7f0000000280)='eth0\x00', 0x42, 0x197, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) openat$rdma_cm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) landlock_restrict_self(0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file0/file0\x00', 0x1c0) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x4, @multicast}, 0x10) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x40000000000018c, 0x2, 0x0) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 18.174392088s ago: executing program 1 (id=588): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x8000102) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) setitimer(0x0, 0x0, 0x0) bpf$ITER_CREATE(0xb, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x20) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000400)=ANY=[], 0x20) openat$ttynull(0xffffffffffffff9c, 0x0, 0x54b802, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x271e, 0x0, &(0x7f0000000040)) r2 = syz_open_procfs(0x0, 0x0) preadv(r2, 0x0, 0x0, 0x8f, 0x3b16) 18.125501874s ago: executing program 6 (id=589): openat$sysfs(0xffffff9c, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, 0x0, 0x40440, 0x0) r2 = socket$inet6(0xa, 0x80003, 0xff) setsockopt$inet6_int(r2, 0x29, 0x16, &(0x7f0000fcb000), 0x4) socket(0x10, 0x80002, 0x4) 17.266181931s ago: executing program 2 (id=591): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) r2 = openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) read$FUSE(r2, 0x0, 0x0) r3 = epoll_create1(0x80000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@file={0x0, './bus\x00'}, 0x6e) sendmmsg$unix(r5, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r3, 0x0) poll(&(0x7f00000000c0), 0x0, 0x8000007) 17.257340868s ago: executing program 1 (id=592): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) 16.027312875s ago: executing program 1 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 15.399990278s ago: executing program 6 (id=595): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x20, 0x16, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x48}, 0x1, 0x0, 0x0, 0x20040841}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x47ad7f1b73aa39f) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000280)={'syzkaller0\x00', 0x7101}) r1 = memfd_create(&(0x7f00000025c0)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1cs1F59\xcdR\xc1\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9b\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa\xe7\xd6\xa3', 0x6) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r1, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_IKEY={0x8, 0x4, 0x2}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x81}]}}}]}, 0x44}}, 0x0) 14.234160294s ago: executing program 6 (id=598): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x100000000005) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x1008, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x77e03000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f0000000200)={0x1, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0xfffd, @empty, 0x10000}}}, 0x108) r5 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') read$msr(r5, &(0x7f0000032680)=""/102390, 0x18ff6) 12.246738528s ago: executing program 6 (id=601): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_RECVMSG={0xa, 0x34, 0x3, 0xffffffffffffffff, 0x0, &(0x7f00000010c0)={0x0, 0x0, 0x0}, 0x0, 0x40000000}) socket(0x2d, 0x80003, 0xb) r1 = syz_io_uring_setup(0x487, &(0x7f0000000240)={0x0, 0x59c4, 0x800, 0x1000, 0x5cc}, &(0x7f0000000300)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_BUFFERS(r1, 0x0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000200)=[{0x30, 0x4, 0x0, 0x2}]}, 0x8) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_EPOLL_CTL=@del={0x1d, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x1}) io_uring_enter(r1, 0x749f, 0x4, 0x0, 0x0, 0xfffffffffffffef5) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040903"], 0x6) 10.134498376s ago: executing program 2 (id=604): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) syz_open_dev$sndpcmc(&(0x7f00000000c0), 0x1, 0x1cb8c0) r0 = getpid() syz_pidfd_open(r0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80202, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141102) r2 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r2, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r2, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) accept4(r2, 0x0, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x80081, 0x0) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f00000001c0)={0xa00, 0x0, 0x100000000, 0xfffffffffffffffd, 0x0, 0x0, 0x1000001000, 0x49}, 0x0, &(0x7f00000002c0)={0x3ff, 0x7, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000005}, 0x0, 0x0) 7.812119747s ago: executing program 2 (id=606): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) r6 = openat$cgroup_subtree(r5, &(0x7f0000000100), 0x2, 0x0) write$cgroup_subtree(r6, 0x0, 0x5) setsockopt$inet6_udp_int(r0, 0x11, 0x67, 0x0, 0x0) 7.666219045s ago: executing program 7 (id=607): setsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) futex(&(0x7f0000000000)=0x1, 0x5, 0x20001, 0x0, &(0x7f0000000100)=0x4, 0xc3000000) mount$bpf(0x0, &(0x7f0000000100)='.\x00', 0x0, 0x2c04402, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000340)={0xa, 0x4e22, 0x7, @empty, 0x1}, 0x1c) listen(r2, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r2, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, 0x0, 0x0) 6.556170433s ago: executing program 2 (id=608): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) sendmsg(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x802, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r2) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x2c, r3, 0x1, 0x10, 0x0, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @private=0xa010100}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x200000000000000) 5.830380058s ago: executing program 2 (id=609): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) r0 = syz_open_dev$usbfs(&(0x7f0000000180), 0xb, 0x103381) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) syz_open_dev$sg(&(0x7f00000003c0), 0x0, 0x5) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r2, 0xffffffffffffffff, 0x0) syz_io_uring_setup(0x3ef0, 0x0, &(0x7f0000000280), 0x0) 5.803252353s ago: executing program 7 (id=610): syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f000000ae80), 0x0, 0x0, 0x0) sendmsg$AUDIT_USER(0xffffffffffffffff, 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x10) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000002140)="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", 0x2000, &(0x7f0000000880)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x5, {0x5, 0x2, 0x7, 0x1ff, 0x0, 0x0, {0x43, 0x3, 0x6, 0x2ffff, 0x1000, 0x80000000000000ff, 0x3, 0x0, 0x120, 0x2000, 0x2, 0x0, 0x0, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x2, 0x14c0348, 0x40, 0x1, 0xfffffff1, 0x0, 0x0, 0x0, 0x80, 0x7fffffff}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) ioctl$TCSETSF2(r2, 0x402c542d, &(0x7f0000000080)={0x8001, 0x1, 0x3a8000, 0x1, 0x5, "c5da8205ed8c029f78a9030057cd38d3e06635", 0x1, 0x1ff}) 5.467421028s ago: executing program 7 (id=611): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300), 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) socket$inet(0x10, 0x3, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r3, &(0x7f0000000280)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000040)='dctcp', 0x5) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) r4 = socket(0x2b, 0x1, 0x1) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) 3.704716388s ago: executing program 7 (id=612): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) r0 = syz_open_dev$usbfs(&(0x7f0000000000), 0xb, 0x418301) ioctl$USBDEVFS_GETDRIVER(r0, 0x41045508, &(0x7f0000000580)={0x6, "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"}) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$inet(0x2, 0x1, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$IOMMU_TEST_OP_MD_CHECK_MAP(r4, 0x3ba0, &(0x7f0000000440)={0x48, 0x3, 0x0, 0x0, 0x7, 0x5, &(0x7f0000000100)="882d545426"}) 1.879732545s ago: executing program 7 (id=613): socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)) msgget$private(0x0, 0xb27766e99bf42011) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000140)=0xc) eventfd2(0x5, 0x80800) mkdir(0x0, 0x22) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xa, 0xb9, &(0x7f0000000140)=""/185, 0x41100, 0x2b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0xfe1f, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) r4 = socket$key(0xf, 0x3, 0x2) setsockopt$sock_int(r4, 0x1, 0x4b, &(0x7f0000000040)=0xfd87, 0x4) 1.627554127s ago: executing program 2 (id=614): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) bind$tipc(r1, &(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x2000002, 0xfffffffe}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x42, 0x4, 0x2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xa0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfe}}}, 0x10, 0x0}, 0x0) 1.503997411s ago: executing program 6 (id=615): mprotect(&(0x7f00001bb000/0x2000)=nil, 0x2000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x204, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/182, 0xb6}], 0x1}, 0x0, 0x40000103}) sendto(r6, &(0x7f0000001680)="9b", 0x1, 0x1c015, 0x0, 0x0) io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0) r8 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x127680, 0x0) preadv2(r8, 0x0, 0x0, 0x0, 0x0, 0x0) 42.44713ms ago: executing program 37 (id=593): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 736.354µs ago: executing program 6 (id=617): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) setuid(r4) io_uring_setup(0x1b7b, 0x0) r5 = openat$apparmor_thread_current(0xffffff9c, &(0x7f0000000000), 0x2, 0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) write$apparmor_current(r5, &(0x7f00000003c0)=ANY=[@ANYBLOB='permprofile && '], 0xff) 0s ago: executing program 7 (id=618): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x39, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d00"], 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) listen(0xffffffffffffffff, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000380)={0x0, 0x0, 0x80, 0x0, 0x4000}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000440)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x9}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x800, 0xffffffff, 0xbfe00000}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r5, 0x47f6, 0x0, 0x2, 0x0, 0x300) kernel console output (not intermixed with test programs): 4.305683][ T5816] debugfs: 'hsr0' already exists in 'hsr' [ 84.311425][ T5816] Cannot create hsr debugfs directory [ 84.463271][ T52] Bluetooth: hci0: command tx timeout [ 84.469370][ T5136] Bluetooth: hci2: command tx timeout [ 84.543327][ T52] Bluetooth: hci3: command tx timeout [ 84.543874][ T5832] Bluetooth: hci5: command tx timeout [ 84.548761][ T52] Bluetooth: hci1: command tx timeout [ 84.560381][ T5136] Bluetooth: hci4: command tx timeout [ 84.922704][ T5818] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.955878][ T5818] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.967855][ T5818] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.987787][ T5818] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.034311][ T5819] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.046080][ T5819] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.059470][ T5819] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.088362][ T5819] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.155879][ T5821] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.170231][ T5821] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.186848][ T5821] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.203213][ T5821] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.324257][ T5830] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.338733][ T5830] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.350924][ T5830] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.375935][ T5830] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.433708][ T5818] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.506449][ T5816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.538325][ T5816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.548956][ T5816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.560017][ T5816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.611095][ T5818] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.626499][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.679915][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.687430][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.728764][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.735945][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.769845][ T5817] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 85.804163][ T5817] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 85.834702][ T5817] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 85.846416][ T5817] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 85.864560][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.911396][ T5821] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.929849][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.937048][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.983034][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.990234][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.066495][ T29] cfg80211: failed to load regulatory.db [ 86.083552][ T5821] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.111758][ T5816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.157592][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.221318][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.228553][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.252299][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.259584][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.277968][ T5816] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.327804][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.334996][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.349988][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.386262][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.393497][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.474675][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.481866][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.492663][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.499870][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.543432][ T5136] Bluetooth: hci2: command tx timeout [ 86.548877][ T5136] Bluetooth: hci0: command tx timeout [ 86.624944][ T5136] Bluetooth: hci4: command tx timeout [ 86.624966][ T52] Bluetooth: hci1: command tx timeout [ 86.630370][ T5136] Bluetooth: hci5: command tx timeout [ 86.638077][ T5832] Bluetooth: hci3: command tx timeout [ 86.651187][ T5817] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.667801][ T5818] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.779510][ T5817] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.843559][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.850743][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.941916][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.968514][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.975776][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.281160][ T5821] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.298829][ T5819] veth0_vlan: entered promiscuous mode [ 87.349338][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.365965][ T5819] veth1_vlan: entered promiscuous mode [ 87.448169][ T5816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.522580][ T5821] veth0_vlan: entered promiscuous mode [ 87.552231][ T5821] veth1_vlan: entered promiscuous mode [ 87.585204][ T5819] veth0_macvtap: entered promiscuous mode [ 87.640967][ T5819] veth1_macvtap: entered promiscuous mode [ 87.673894][ T5830] veth0_vlan: entered promiscuous mode [ 87.688687][ T5830] veth1_vlan: entered promiscuous mode [ 87.731014][ T5817] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.755285][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.769073][ T5818] veth0_vlan: entered promiscuous mode [ 87.785971][ T5821] veth0_macvtap: entered promiscuous mode [ 87.801098][ T5816] veth0_vlan: entered promiscuous mode [ 87.822317][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.842268][ T5816] veth1_vlan: entered promiscuous mode [ 87.866194][ T5821] veth1_macvtap: entered promiscuous mode [ 87.915474][ T5830] veth0_macvtap: entered promiscuous mode [ 87.940688][ T1034] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.952826][ T1034] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.977567][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.992535][ T1034] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.002343][ T1034] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.028932][ T5818] veth1_vlan: entered promiscuous mode [ 88.038945][ T5830] veth1_macvtap: entered promiscuous mode [ 88.065947][ T5821] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.128105][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.141937][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.176545][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.185875][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.199443][ T5816] veth0_macvtap: entered promiscuous mode [ 88.234410][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.257536][ T5816] veth1_macvtap: entered promiscuous mode [ 88.267084][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.277809][ T5818] veth0_macvtap: entered promiscuous mode [ 88.288965][ T37] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.299616][ T5818] veth1_macvtap: entered promiscuous mode [ 88.306630][ T37] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.361307][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.371031][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.406075][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.415150][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.439726][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.449615][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.458375][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.481627][ T5817] veth0_vlan: entered promiscuous mode [ 88.492780][ T5818] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.514153][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.570360][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.590449][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.608212][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.620565][ T5816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.623357][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.632323][ T52] Bluetooth: hci2: command tx timeout [ 88.640959][ T5832] Bluetooth: hci0: command tx timeout [ 88.642818][ T5819] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.670866][ T5817] veth1_vlan: entered promiscuous mode [ 88.703794][ T52] Bluetooth: hci5: command tx timeout [ 88.709241][ T52] Bluetooth: hci4: command tx timeout [ 88.714733][ T5832] Bluetooth: hci1: command tx timeout [ 88.720154][ T5841] Bluetooth: hci3: command tx timeout [ 88.750611][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.766946][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.786473][ T59] Bluetooth: hci6: Frame reassembly failed (-84) [ 88.798923][ T5966] Bluetooth: received HCILL_WAKE_UP_ACK in state 2 [ 88.835321][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.850770][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.863726][ T12] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.874293][ T12] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.922397][ T12] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.952260][ T12] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.994014][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.001890][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.037649][ T5817] veth0_macvtap: entered promiscuous mode [ 89.084955][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.092820][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.100651][ T5817] veth1_macvtap: entered promiscuous mode [ 89.148565][ T31] audit: type=1326 audit(1771941351.213:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5967 comm="syz.0.1" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f2c9179c629 code=0x0 [ 89.210257][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.230316][ T165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.243030][ T165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.259204][ T5817] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.293083][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.301083][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.375972][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.376545][ T165] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.393209][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.397310][ T165] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.421390][ T165] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.441899][ T165] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.490162][ T165] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.515762][ T165] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.729163][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.762988][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.915723][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.926664][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.013859][ T29] hid-generic 0005:0006:5508.0001: hidraw0: BLUETOOTH HID vc3.36 Device [syz0] on aa:aa:aa:aa:aa:aa [ 90.095913][ T24] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 90.301067][ T24] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 90.340735][ T24] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 90.370187][ T5989] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 90.399564][ T24] usb 2-1: New USB device found, idVendor=08b7, idProduct=8000, bcdDevice= 0.00 [ 90.417245][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 90.426623][ T5989] overlayfs: failed to set xattr on upper [ 90.438774][ T5990] loop4: detected capacity change from 0 to 4096 [ 90.448286][ T5989] overlayfs: ...falling back to redirect_dir=nofollow. [ 90.456449][ T24] usb 2-1: SerialNumber: syz [ 90.499553][ T5989] overlayfs: ...falling back to index=off. [ 90.534502][ T5989] overlayfs: ...falling back to uuid=null. [ 90.566902][ T5990] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 90.725487][ T5990] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 90.751120][ T24] usb 2-1: 0:2 : does not exist [ 90.783440][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 90.952108][ T5818] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 90.989241][ T24] usb 2-1: USB disconnect, device number 2 [ 91.085721][ T6003] syz.0.10 uses obsolete (PF_INET,SOCK_PACKET) [ 91.169805][ T5997] udevd[5997]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.461646][ T5994] loop5: detected capacity change from 0 to 40427 [ 91.579874][ T5994] F2FS-fs: heap/no_heap options were deprecated [ 91.683527][ T5994] F2FS-fs (loop5): build fault injection rate: 19 [ 91.720531][ T5994] F2FS-fs (loop5): build fault injection type: 0x77e8c [ 91.775090][ T5994] F2FS-fs (loop5): invalid crc value [ 91.822522][ T5994] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_ra_meta_pages+0x21c/0xd60 [ 91.896153][ T5974] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 91.954452][ T5994] F2FS-fs (loop5): inject invalid blkaddr in f2fs_is_valid_blkaddr of f2fs_submit_page_bio+0x18f/0xaa0 [ 91.984622][ C0] F2FS-fs (loop5): inject read IO error in f2fs_read_end_io of blk_update_request+0x57e/0xe60 [ 92.044379][ T5824] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 92.072149][ T5974] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 92.107462][ T5974] usb 2-1: config 0 interface 0 has no altsetting 0 [ 92.155932][ T5974] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 92.181380][ T5974] usb 2-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 92.214397][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 92.220549][ T5974] usb 2-1: Product: syz [ 92.220594][ T5974] usb 2-1: Manufacturer: syz [ 92.220612][ T5974] usb 2-1: SerialNumber: syz [ 92.247040][ T5994] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 92.249175][ T6006] loop3: detected capacity change from 0 to 32768 [ 92.260836][ T5974] usb 2-1: config 0 descriptor?? [ 92.285559][ T5974] usb 2-1: selecting invalid altsetting 0 [ 92.293782][ T5824] usb 1-1: config index 0 descriptor too short (expected 74, got 45) [ 92.301434][ T5994] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 92.312157][ T5824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 1536, setting to 1024 [ 92.355307][ T6006] (syz.3.13,6006,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.376333][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 92.397101][ T5994] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0 [ 92.411444][ T5824] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 30768, setting to 1024 [ 92.443726][ T6006] (syz.3.13,6006,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 92.447237][ T5994] F2FS-fs (loop5): inject dquot initialize in f2fs_dquot_initialize of f2fs_new_inode+0x525/0xff0 [ 92.471390][ T5824] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 92.534886][ T5824] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 92.579059][ T5994] F2FS-fs (loop5): inject lock_op in f2fs_trylock_op of f2fs_do_write_data_page+0xd04/0x16f0 [ 92.582208][ T6006] JBD2: Ignoring recovery information on journal [ 92.603912][ T5994] syz.5.6: attempt to access beyond end of device [ 92.603912][ T5994] loop5: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 92.620926][ T5898] usb 2-1: USB disconnect, device number 3 [ 92.653079][ T5824] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 92.662193][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 92.751524][ T6018] loop4: detected capacity change from 0 to 32768 [ 92.771309][ T6018] ======================================================= [ 92.771309][ T6018] WARNING: The mand mount option has been deprecated and [ 92.771309][ T6018] and is ignored by this kernel. Remove the mand [ 92.771309][ T6018] option from the mount to silence this warning. [ 92.771309][ T6018] ======================================================= [ 92.867465][ T5817] syz-executor: attempt to access beyond end of device [ 92.867465][ T5817] loop5: rw=2049, sector=45104, nr_sectors = 16 limit=40427 [ 92.889303][ T5817] CPU: 0 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 92.889340][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 92.889355][ T5817] Call Trace: [ 92.889364][ T5817] [ 92.889374][ T5817] dump_stack_lvl+0xe8/0x150 [ 92.889417][ T5817] f2fs_handle_critical_error+0x37c/0x540 [ 92.889464][ T5817] f2fs_write_end_io+0xcdb/0xff0 [ 92.889493][ T5817] ? __submit_merged_bio+0x256/0x700 [ 92.889535][ T5817] __submit_merged_bio+0x256/0x700 [ 92.889566][ T5817] __submit_merged_write_cond+0x3c9/0x4e0 [ 92.889615][ T5817] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 92.889673][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.889712][ T5817] f2fs_write_data_pages+0x2975/0x35e0 [ 92.889786][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 92.889861][ T5817] ? lock_release+0x4b/0x3d0 [ 92.889890][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.889918][ T5817] ? lock_release+0x4b/0x3d0 [ 92.889946][ T5817] ? arch_stack_walk+0xe3/0x150 [ 92.889984][ T5817] ? unwind_next_frame+0xa5/0x23c0 [ 92.890020][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890048][ T5817] ? __bfs+0x153/0x290 [ 92.890078][ T5817] ? __pfx_hlock_conflict+0x10/0x10 [ 92.890133][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890162][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890190][ T5817] ? __lock_acquire+0x146e/0x2cf0 [ 92.890225][ T5817] ? is_bpf_text_address+0x292/0x2b0 [ 92.890250][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890297][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 92.890328][ T5817] do_writepages+0x32e/0x550 [ 92.890363][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890394][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890426][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890455][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 92.890485][ T5817] filemap_fdatawrite+0x1e9/0x2f0 [ 92.890521][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890552][ T5817] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 92.890627][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890658][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890692][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 92.890722][ T5817] f2fs_sync_dirty_inodes+0x30e/0x860 [ 92.890774][ T5817] f2fs_write_checkpoint+0x9df/0x26a0 [ 92.890842][ T5817] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 92.890871][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.890959][ T5817] kill_f2fs_super+0x314/0x720 [ 92.890996][ T5817] ? __pfx_kill_f2fs_super+0x10/0x10 [ 92.891039][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.891067][ T5817] ? lockdep_hardirqs_on+0x7a/0x110 [ 92.891104][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 92.891147][ T5817] deactivate_locked_super+0xbc/0x130 [ 92.891187][ T5817] cleanup_mnt+0x437/0x4d0 [ 92.891209][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 92.891247][ T5817] task_work_run+0x1d9/0x270 [ 92.891277][ T5817] ? __pfx_task_work_run+0x10/0x10 [ 92.891316][ T5817] exit_to_user_mode_loop+0xed/0x480 [ 92.891344][ T5817] ? rcu_is_watching+0x15/0xb0 [ 92.891384][ T5817] do_syscall_64+0x32d/0xf80 [ 92.891419][ T5817] ? trace_irq_disable+0x3b/0x150 [ 92.891454][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.891485][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 92.891509][ T5817] RIP: 0033:0x7f5b1799d897 [ 92.891531][ T5817] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 92.891550][ T5817] RSP: 002b:00007fff9355dc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 92.891575][ T5817] RAX: 0000000000000000 RBX: 00007f5b17a31ef0 RCX: 00007f5b1799d897 [ 92.891592][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9355dd50 [ 92.891607][ T5817] RBP: 00007fff9355dd50 R08: 00007fff9355ed50 R09: 00000000ffffffff [ 92.891624][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9355ede0 [ 92.891639][ T5817] R13: 00007f5b17a31ef0 R14: 0000000000016a35 R15: 00007fff9355ee20 [ 92.891676][ T5817] [ 92.893167][ T6006] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 92.902837][ T5817] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 93.253712][ T6018] JBD2: Ignoring recovery information on journal [ 93.339201][ T5824] usb 1-1: GET_CAPABILITIES returned 0 [ 93.340284][ T6018] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 93.347802][ T5824] usbtmc 1-1:16.0: can't read capabilities [ 93.366230][ T5817] CPU: 1 UID: 0 PID: 5817 Comm: syz-executor Not tainted syzkaller #0 PREEMPT(full) [ 93.366259][ T5817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 93.366272][ T5817] Call Trace: [ 93.366281][ T5817] [ 93.366290][ T5817] dump_stack_lvl+0xe8/0x150 [ 93.366328][ T5817] f2fs_handle_critical_error+0x37c/0x540 [ 93.366376][ T5817] f2fs_write_end_io+0xcdb/0xff0 [ 93.366423][ T5817] __submit_merged_bio+0x256/0x700 [ 93.366452][ T5817] __submit_merged_write_cond+0x3c9/0x4e0 [ 93.366496][ T5817] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 93.366546][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.366583][ T5817] f2fs_write_data_pages+0x2975/0x35e0 [ 93.366650][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 93.366722][ T5817] ? lock_release+0x4b/0x3d0 [ 93.366750][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.366778][ T5817] ? lock_release+0x4b/0x3d0 [ 93.366804][ T5817] ? arch_stack_walk+0xe3/0x150 [ 93.366842][ T5817] ? unwind_next_frame+0xa5/0x23c0 [ 93.366878][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.366905][ T5817] ? __bfs+0x153/0x290 [ 93.366932][ T5817] ? __pfx_hlock_conflict+0x10/0x10 [ 93.366986][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367020][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367048][ T5817] ? __lock_acquire+0x146e/0x2cf0 [ 93.367084][ T5817] ? is_bpf_text_address+0x292/0x2b0 [ 93.367108][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367152][ T5817] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 93.367182][ T5817] do_writepages+0x32e/0x550 [ 93.367215][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367243][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367273][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367300][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 93.367331][ T5817] filemap_fdatawrite+0x1e9/0x2f0 [ 93.367366][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367399][ T5817] ? __pfx_filemap_fdatawrite+0x10/0x10 [ 93.367469][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367498][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367529][ T5817] ? do_raw_spin_unlock+0xf5/0x210 [ 93.367557][ T5817] f2fs_sync_dirty_inodes+0x30e/0x860 [ 93.367603][ T5817] f2fs_write_checkpoint+0x9df/0x26a0 [ 93.367666][ T5817] ? __pfx_f2fs_write_checkpoint+0x10/0x10 [ 93.367693][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367780][ T5817] kill_f2fs_super+0x314/0x720 [ 93.367817][ T5817] ? __pfx_kill_f2fs_super+0x10/0x10 [ 93.367861][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367886][ T5817] ? lockdep_hardirqs_on+0x7a/0x110 [ 93.367919][ T5817] ? srso_alias_return_thunk+0x5/0xfbef5 [ 93.367957][ T5817] deactivate_locked_super+0xbc/0x130 [ 93.367996][ T5817] cleanup_mnt+0x437/0x4d0 [ 93.368025][ T5817] ? _raw_spin_unlock_irq+0x23/0x50 [ 93.368064][ T5817] task_work_run+0x1d9/0x270 [ 93.368094][ T5817] ? __pfx_task_work_run+0x10/0x10 [ 93.368133][ T5817] exit_to_user_mode_loop+0xed/0x480 [ 93.368161][ T5817] ? rcu_is_watching+0x15/0xb0 [ 93.368201][ T5817] do_syscall_64+0x32d/0xf80 [ 93.368238][ T5817] ? trace_irq_disable+0x3b/0x150 [ 93.368273][ T5817] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.368303][ T5817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 93.368328][ T5817] RIP: 0033:0x7f5b1799d897 [ 93.368351][ T5817] Code: a2 c7 05 5c ee 24 00 00 00 00 00 eb 96 e8 e1 12 00 00 90 31 f6 e9 09 00 00 00 66 0f 1f 84 00 00 00 00 00 b8 a6 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 c7 c2 e8 ff ff ff f7 d8 64 89 02 b8 [ 93.368370][ T5817] RSP: 002b:00007fff9355dc98 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 93.368395][ T5817] RAX: 0000000000000000 RBX: 00007f5b17a31ef0 RCX: 00007f5b1799d897 [ 93.368411][ T5817] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007fff9355dd50 [ 93.368426][ T5817] RBP: 00007fff9355dd50 R08: 00007fff9355ed50 R09: 00000000ffffffff [ 93.368443][ T5817] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fff9355ede0 [ 93.368458][ T5817] R13: 00007f5b17a31ef0 R14: 0000000000016a35 R15: 00007fff9355ee20 [ 93.368496][ T5817] [ 93.368521][ T5817] F2FS-fs (loop5): Stopped filesystem due to reason: 3 [ 93.733271][ T6039] Illegal XDP return value 4294967262 on prog (id 2) dev syz_tun, expect packet loss! [ 93.735029][ C0] usbtmc 1-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 93.826010][ T6014] usbtmc 1-1:16.0: Unable to send data, error -71 [ 93.848859][ T5819] ocfs2: Unmounting device (7,3) on (node local) [ 93.866866][ T24] usb 1-1: USB disconnect, device number 2 [ 93.882018][ T5818] ocfs2: Unmounting device (7,4) on (node local) [ 94.650443][ T6045] loop3: detected capacity change from 0 to 4096 [ 94.693137][ T6045] ntfs3(loop3): Different NTFS sector size (4096) and media sector size (512). [ 94.738033][ T6052] loop0: detected capacity change from 0 to 1024 [ 94.819556][ T5899] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 94.989181][ T6045] ntfs3(loop3): ino=1a, mi_enum_attr [ 95.007093][ T6045] ntfs3(loop3): Mark volume as dirty due to NTFS errors [ 95.015821][ T6052] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 95.036756][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 95.059752][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 95.078426][ T5899] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 64 [ 95.100661][ T6045] ntfs3(loop3): ino=1a, mi_enum_attr [ 95.101329][ T5899] usb 5-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 95.115824][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.142844][ T6052] EXT4-fs error (device loop0): ext4_mb_mark_diskspace_used:4222: comm syz.0.27: Allocating blocks 385-513 which overlap fs metadata [ 95.157188][ T6045] ntfs3(loop3): Failed to initialize $Extend/$Reparse. [ 95.169272][ T6049] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 95.192789][ T5899] hub 5-1:1.0: bad descriptor, ignoring hub [ 95.211434][ T5899] hub 5-1:1.0: probe with driver hub failed with error -5 [ 95.240166][ T12] EXT4-fs (loop0): pa ffff88807815e570: logic 16, phys. 129, len 24 [ 95.248561][ T12] EXT4-fs error (device loop0): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 8 [ 95.274968][ T5899] cdc_wdm 5-1:1.0: skipping garbage [ 95.280475][ T5899] cdc_wdm 5-1:1.0: skipping garbage [ 95.324483][ T5899] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 95.330467][ T5899] cdc_wdm 5-1:1.0: Unknown control protocol [ 95.416808][ T6062] netlink: 104 bytes leftover after parsing attributes in process `syz.1.28'. [ 95.488200][ T5899] usb 5-1: USB disconnect, device number 2 [ 95.574242][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 95.647496][ T6041] loop2: detected capacity change from 0 to 32768 [ 95.737806][ T6041] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 95.883547][ T6041] XFS (loop2): Ending clean mount [ 95.942034][ T6041] XFS (loop2): Quotacheck needed: Please wait. [ 95.996970][ T5899] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 96.046256][ T6041] XFS (loop2): Quotacheck: Done. [ 96.173080][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 96.181548][ T5899] usb 2-1: config 0 has an invalid interface number: 240 but max is 0 [ 96.232551][ T5899] usb 2-1: config 0 has no interface number 0 [ 96.246802][ T5830] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 96.264622][ T6087] netlink: 12 bytes leftover after parsing attributes in process `syz.5.35'. [ 96.270864][ T5899] usb 2-1: New USB device found, idVendor=041e, idProduct=4018, bcdDevice=ed.b4 [ 96.303661][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 96.330605][ T5899] usb 2-1: Product: syz [ 96.344512][ T5899] usb 2-1: Manufacturer: syz [ 96.349159][ T5899] usb 2-1: SerialNumber: syz [ 96.417820][ T5899] usb 2-1: config 0 descriptor?? [ 96.455782][ T5899] gspca_main: spca508-2.14.0 probing 041e:4018 [ 96.519968][ T6092] warning: `syz.5.38' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 96.663096][ T5899] gspca_spca508: reg_read err -32 [ 96.703279][ T5899] gspca_spca508: reg_read err -32 [ 96.723110][ T5899] gspca_spca508: reg_read err -32 [ 96.754655][ T5899] gspca_spca508: reg_read err -32 [ 96.844654][ T6081] loop0: detected capacity change from 0 to 32768 [ 96.942876][ T6081] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.31 (6081) [ 96.989433][ T5899] gspca_spca508: reg write: error -71 [ 97.044659][ T5899] spca508 2-1:0.240: probe with driver spca508 failed with error -71 [ 97.119252][ T5899] usb 2-1: USB disconnect, device number 4 [ 97.196164][ T6081] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.284256][ T6081] BTRFS info (device loop0): using crc32c checksum algorithm [ 97.516163][ T6081] BTRFS info (device loop0): allowing degraded mounts [ 97.577994][ T6081] BTRFS info (device loop0): enabling ssd optimizations [ 97.623054][ T6081] BTRFS info (device loop0): turning on async discard [ 97.640918][ T6081] BTRFS info (device loop0): enabling free space tree [ 97.683042][ T6081] BTRFS info (device loop0): enabling auto defrag [ 97.798939][ T31] audit: type=1800 audit(1771941359.863:3): pid=6081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.31" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 97.926880][ T6135] Zero length message leads to an empty skb [ 97.963926][ T5899] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 97.973971][ T24] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 98.009357][ T6137] capability: warning: `syz.3.46' uses deprecated v2 capabilities in a way that may be insecure [ 98.038618][ T6137] sg_read: process 23 (syz.3.46) changed security contexts after opening file descriptor, this is not allowed. [ 98.133396][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 98.159212][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 98.165672][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 98.178204][ T24] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 98.207857][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 98.256008][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.308567][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.326316][ T24] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 98.347307][ T5821] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 98.351927][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 98.374572][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 98.402267][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.433207][ T24] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 98.496854][ T24] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 98.582735][ T24] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 98.612322][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 98.702631][ T5899] usb 5-1: usb_control_msg returned -32 [ 98.743128][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 98.953738][ T24] usb 2-1: usb_control_msg returned -32 [ 98.982996][ T24] usbtmc 2-1:16.0: can't read capabilities [ 99.424548][ T792] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 99.613128][ T792] usb 3-1: Using ep0 maxpacket: 8 [ 99.625735][ T792] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 99.646091][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 99.675175][ T792] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 99.685469][ T792] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 99.713019][ T792] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 99.722116][ T792] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.753085][ T6158] usbtmc 5-1:16.0: usb_control_msg returned -32 [ 99.761588][ T24] usb 5-1: USB disconnect, device number 3 [ 99.799104][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.816438][ T6160] bridge_slave_1: left allmulticast mode [ 99.823217][ T6160] bridge_slave_1: left promiscuous mode [ 99.830298][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.879984][ T6160] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 100.034914][ T792] usb 3-1: GET_CAPABILITIES returned 0 [ 100.042776][ T792] usbtmc 3-1:16.0: can't read capabilities [ 100.131769][ T6168] loop0: detected capacity change from 0 to 256 [ 100.179155][ T6168] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3322664b, utbl_chksum : 0xe619d30d) [ 100.267280][ T792] usb 3-1: USB disconnect, device number 2 [ 100.301929][ T6168] exFAT-fs (loop0): valid_size(150994954) is greater than size(10) [ 100.368145][ T31] audit: type=1800 audit(1771941362.433:4): pid=6168 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.58" name="file1" dev="loop0" ino=1048610 res=0 errno=0 [ 101.010685][ T24] usb 2-1: USB disconnect, device number 5 [ 101.362569][ T6164] loop5: detected capacity change from 0 to 32768 [ 101.417860][ T6164] XFS (loop5): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.475938][ T24] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 101.485654][ T792] IPVS: starting estimator thread 0... [ 101.570797][ T6164] XFS (loop5): Ending clean mount [ 101.614394][ T6192] IPVS: using max 25 ests per chain, 60000 per kthread [ 101.615768][ T6164] XFS (loop5): Quotacheck needed: Please wait. [ 101.644470][ T24] usb 1-1: Using ep0 maxpacket: 16 [ 101.691259][ T24] usb 1-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 101.712226][ T6164] XFS (loop5): Quotacheck: Done. [ 101.753289][ T24] usb 1-1: config 0 interface 0 has no altsetting 0 [ 101.787581][ T24] usb 1-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 101.829600][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 101.869424][ T24] usb 1-1: config 0 descriptor?? [ 101.889406][ T6203] netlink: 8 bytes leftover after parsing attributes in process `syz.1.68'. [ 101.927471][ T6203] netlink: 16 bytes leftover after parsing attributes in process `syz.1.68'. [ 101.950989][ T5817] XFS (loop5): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 101.979604][ T6205] loop3: detected capacity change from 0 to 1024 [ 101.989901][ T6205] EXT4-fs: Ignoring removed oldalloc option [ 101.996408][ T6205] EXT4-fs: Ignoring removed bh option [ 102.036587][ T6205] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 102.279098][ T6205] EXT4-fs error (device loop3): ext4_mb_mark_diskspace_used:4222: comm syz.3.69: Allocating blocks 481-513 which overlap fs metadata [ 102.322124][ T6204] EXT4-fs (loop3): pa ffff8880370d7cb0: logic 128, phys. 289, len 14 [ 102.330961][ T6204] EXT4-fs error (device loop3): ext4_mb_release_inode_pa:5465: group 0, free 0, pa_free 2 [ 102.375225][ T24] nzxt-smart2 0003:1E71:2009.0002: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.0-1/input0 [ 102.499931][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 102.625592][ T6219] loop1: detected capacity change from 0 to 128 [ 102.691481][ T6219] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 102.733713][ T24] usb 1-1: USB disconnect, device number 3 [ 102.757141][ T6219] ext4 filesystem being mounted at /12/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 102.900316][ T5816] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 103.184520][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 103.420555][ T6240] loop0: detected capacity change from 0 to 1024 [ 103.443928][ T6240] EXT4-fs: Ignoring removed mblk_io_submit option [ 103.470525][ T6217] loop4: detected capacity change from 0 to 32768 [ 103.477654][ T5899] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 103.514790][ T6217] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.74 (6217) [ 103.551959][ T6240] EXT4-fs (loop0): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 103.594124][ T6240] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 103.625779][ T6217] BTRFS info (device loop4): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 103.645048][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 103.667220][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 103.680334][ T6240] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: comm syz.0.83: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.693638][ T6217] BTRFS info (device loop4): using sha256 checksum algorithm [ 103.704371][ T5899] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 103.722333][ T5899] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 103.731697][ T6240] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 117 [ 103.747968][ T6250] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 103.761811][ T6240] EXT4-fs (loop0): This should not happen!! Data will be lost [ 103.761811][ T6240] [ 103.771864][ T5899] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 103.771897][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 103.795060][ T5974] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 103.796221][ T5899] usb 4-1: config 0 descriptor?? [ 103.818644][ T6252] EXT4-fs error (device loop0): ext4_map_blocks:776: inode #15: comm syz.0.83: lblock 0 mapped to illegal pblock 0 (length 1) [ 103.924162][ T6217] BTRFS info (device loop4): rebuilding free space tree [ 103.971769][ T5974] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 103.981722][ T6252] EXT4-fs error (device loop0): ext4_map_blocks:818: inode #15: block 3: comm syz.0.83: lblock 3 mapped to illegal pblock 3 (length 3) [ 104.021334][ T5974] usb 3-1: config 0 has no interface number 0 [ 104.047037][ T5974] usb 3-1: New USB device found, idVendor=05a9, idProduct=8065, bcdDevice=41.96 [ 104.066923][ T6217] BTRFS info (device loop4): disabling free space tree [ 104.086686][ T5974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 104.103073][ T6217] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 104.115258][ T6252] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 104.146492][ T5974] usb 3-1: config 0 descriptor?? [ 104.151740][ T6217] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 104.153624][ T6252] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.153624][ T6252] [ 104.166307][ T5974] gspca_main: ov534_9-2.14.0 probing 05a9:8065 [ 104.210232][ T6217] BTRFS info (device loop4): setting nodatasum [ 104.233254][ T6217] BTRFS info (device loop4): setting nodatacow [ 104.259934][ T6217] BTRFS info (device loop4): turning off barriers [ 104.283025][ T6217] BTRFS info (device loop4): force clearing of disk cache [ 104.326939][ T5899] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 104.419777][ T165] EXT4-fs error (device loop0): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 104.479823][ T6236] loop5: detected capacity change from 0 to 32768 [ 104.487841][ T165] EXT4-fs (loop0): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 28 [ 104.538924][ T6236] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 (7:5) scanned by syz.5.81 (6236) [ 104.539813][ T165] EXT4-fs (loop0): This should not happen!! Data will be lost [ 104.539813][ T165] [ 104.613770][ T5818] BTRFS info (device loop4): last unmount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 104.635427][ T165] EXT4-fs (loop0): Total free blocks count 0 [ 104.641495][ T165] EXT4-fs (loop0): Free/Dirty block details [ 104.658616][ T6236] BTRFS info (device loop5): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 104.667868][ T165] EXT4-fs (loop0): free_blocks=0 [ 104.674119][ T6236] BTRFS info (device loop5): using blake2b checksum algorithm [ 104.885312][ T6236] BTRFS info (device loop5): enabling ssd optimizations [ 104.892329][ T6236] BTRFS info (device loop5): turning on async discard [ 104.920667][ T6236] BTRFS info (device loop5): enabling free space tree [ 104.934044][ T6266] loop1: detected capacity change from 0 to 32768 [ 104.934466][ T6286] loop0: detected capacity change from 0 to 128 [ 105.024454][ T6286] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 105.057655][ T6266] XFS (loop1): DAX unsupported by block device. Turning off DAX. [ 105.101434][ T6286] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 105.215062][ T6266] XFS (loop1): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 105.387070][ T5974] gspca_ov534_9: reg_w failed -71 [ 105.430197][ T6266] XFS (loop1): Ending clean mount [ 105.439554][ T5817] BTRFS info (device loop5): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 105.763047][ T5974] gspca_ov534_9: Unknown sensor 0000 [ 105.763149][ T5974] ov534_9 3-1:0.111: probe with driver ov534_9 failed with error -22 [ 105.895428][ T5816] XFS (loop1): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 106.019623][ T5974] usb 3-1: USB disconnect, device number 3 [ 107.136131][ T6322] loop2: detected capacity change from 0 to 4096 [ 107.473976][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 107.582562][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.591488][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 107.883352][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 107.980352][ T24] usb 4-1: USB disconnect, device number 2 [ 108.088257][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 108.096791][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 108.293032][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 109.220939][ T6334] loop2: detected capacity change from 0 to 32768 [ 109.302408][ T6334] JBD2: Ignoring recovery information on journal [ 109.310261][ T6334] jbd2_journal_bmap: journal block not found at offset 32 on loop2-75 [ 109.320191][ T6334] JBD2: bad block at offset 32 [ 109.364187][ T6334] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 109.386015][ T6334] OCFS2: ERROR (device loop2): int __ocfs2_find_path(struct ocfs2_caching_info *, struct ocfs2_extent_list *, u32, path_insert_t *, void *): Owner 65 has invalid tree depth 312 in extent list [ 109.407862][ T6334] On-disk corruption discovered. Please run fsck.ocfs2 once the filesystem is unmounted. [ 109.417769][ T6334] OCFS2: File system is now read-only. [ 109.424939][ T6334] (syz.2.103,6334,1):ocfs2_find_leaf:1949 ERROR: status = -30 [ 109.432420][ T6334] (syz.2.103,6334,1):ocfs2_get_clusters_nocache:421 ERROR: status = -30 [ 109.440988][ T6334] (syz.2.103,6334,1):ocfs2_get_clusters:634 ERROR: status = -30 [ 109.448756][ T6334] (syz.2.103,6334,1):ocfs2_extent_map_get_blocks:681 ERROR: status = -30 [ 109.457294][ T6334] (syz.2.103,6334,1):ocfs2_read_virt_blocks:1005 ERROR: status = -30 [ 109.465717][ T6334] (syz.2.103,6334,1):ocfs2_read_dir_block:524 ERROR: status = -30 [ 109.473620][ T6334] (syz.2.103,6334,1):ocfs2_find_dir_space_el:3539 ERROR: status = -5 [ 109.481706][ T6334] (syz.2.103,6334,1):ocfs2_prepare_dir_for_insert:4335 ERROR: status = -5 [ 109.490268][ T6334] (syz.2.103,6334,1):ocfs2_mknod:302 ERROR: status = -5 [ 109.497302][ T6334] (syz.2.103,6334,1):ocfs2_mknod:506 ERROR: status = -5 [ 109.504388][ T6334] (syz.2.103,6334,1):ocfs2_create:679 ERROR: status = -5 [ 109.677658][ T5830] ocfs2: Unmounting device (7,2) on (node local) [ 109.694563][ T5824] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 109.893048][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 109.913906][ T5824] usb 6-1: New USB device found, idVendor=06be, idProduct=a232, bcdDevice=33.f3 [ 109.952958][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.977008][ T5824] usb 6-1: Product: syz [ 109.992239][ T5824] usb 6-1: Manufacturer: syz [ 110.012602][ T5824] usb 6-1: SerialNumber: syz [ 110.045493][ T5824] usb 6-1: config 0 descriptor?? [ 110.173140][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.183060][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 110.261474][ T6338] loop3: detected capacity change from 0 to 32768 [ 110.323319][ T6338] BTRFS: device fsid 3d39d0ba-bdae-447e-827b-b091e1a68885 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.101 (6338) [ 110.391024][ T6338] BTRFS info (device loop3): first mount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 110.431774][ T6338] BTRFS info (device loop3): using crc32c checksum algorithm [ 110.468061][ T5841] Bluetooth: hci5: ISO packet too small [ 110.487614][ T5824] dvb-usb: found a 'AME DTV-5100 USB2.0 DVB-T' in warm state. [ 110.516216][ T5824] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 110.584854][ T5824] dvbdev: DVB: registering new adapter (AME DTV-5100 USB2.0 DVB-T) [ 110.638787][ T5824] usb 6-1: media controller created [ 110.707615][ T5824] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 110.727047][ T6338] BTRFS info (device loop3): setting nodatasum [ 110.775486][ T6338] BTRFS info (device loop3): setting nodatacow [ 110.805033][ T5824] dvb-usb: no frontend was attached by 'AME DTV-5100 USB2.0 DVB-T' [ 110.822209][ T5824] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully initialized and connected. [ 110.822554][ T6338] BTRFS info (device loop3): enabling ssd optimizations [ 110.895649][ T6338] BTRFS info (device loop3): turning on flush-on-commit [ 110.902645][ T6338] BTRFS info (device loop3): turning on async discard [ 110.947549][ T6338] BTRFS info (device loop3): enabling free space tree [ 111.062798][ T5899] usb 6-1: USB disconnect, device number 2 [ 111.180444][ T31] audit: type=1800 audit(1771941373.243:5): pid=6338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.101" name="bus" dev="loop3" ino=263 res=0 errno=0 [ 111.182455][ T5899] dvb-usb: AME DTV-5100 USB2.0 DVB-T successfully deinitialized and disconnected. [ 111.320362][ T6377] loop4: detected capacity change from 0 to 4096 [ 111.437194][ T5819] BTRFS info (device loop3): last unmount of filesystem 3d39d0ba-bdae-447e-827b-b091e1a68885 [ 111.783280][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 111.790955][ T6393] loop0: detected capacity change from 0 to 65 [ 111.868291][ T6393] bfs: Unknown parameter '' [ 112.600398][ T5899] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 112.927242][ T5899] usb 4-1: Using ep0 maxpacket: 16 [ 112.991345][ T5899] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 113.052429][ T5899] usb 4-1: config 0 interface 0 has no altsetting 0 [ 113.083798][ T5899] usb 4-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 113.120584][ T6406] netlink: 4 bytes leftover after parsing attributes in process `syz.4.122'. [ 113.147845][ T5899] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 113.168709][ T6406] veth0_macvtap: entered allmulticast mode [ 113.197697][ T5899] usb 4-1: config 0 descriptor?? [ 113.663440][ T5899] nzxt-smart2 0003:1E71:2009.0004: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.3-1/input0 [ 114.141456][ T5898] usb 4-1: USB disconnect, device number 3 [ 114.255813][ T6411] loop5: detected capacity change from 0 to 32768 [ 114.305568][ T6411] XFS (loop5): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 114.362174][ T6416] loop4: detected capacity change from 0 to 32768 [ 114.487934][ T6411] XFS (loop5): Ending clean mount [ 114.506435][ T6416] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 114.531630][ T6411] XFS (loop5): Quotacheck needed: Please wait. [ 114.630029][ T6411] XFS (loop5): Quotacheck: Done. [ 114.794430][ T6416] XFS (loop4): Ending clean mount [ 114.824759][ T6416] XFS (loop4): Quotacheck needed: Please wait. [ 114.992320][ T6416] XFS (loop4): Quotacheck: Done. [ 115.057774][ T5817] XFS (loop5): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 115.270683][ T5818] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 116.984593][ T6470] loop3: detected capacity change from 0 to 512 [ 117.161268][ T6478] loop5: detected capacity change from 0 to 16 [ 117.214588][ T6478] erofs (device loop5): mounted with root inode @ nid 36. [ 117.885512][ T6470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 118.021755][ T6470] ext4 filesystem being mounted at /24/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 118.101540][ T31] audit: type=1800 audit(1771941380.163:6): pid=6470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.137" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 118.194734][ T6485] netlink: 4 bytes leftover after parsing attributes in process `syz.5.138'. [ 118.217493][ T6486] loop0: detected capacity change from 0 to 1024 [ 118.303693][ T5819] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 118.386357][ T6486] hfsplus: can't free extent: start 0, count 5 [ 118.421157][ T6486] hfsplus: can't free extent: start 131, count 2 [ 118.548583][ T83] hfsplus: b-tree write err: -5, ino 8 [ 119.278238][ T6494] loop5: detected capacity change from 0 to 256 [ 119.651264][ T6494] FAT-fs (loop5): Directory bread(block 64) failed [ 119.667735][ T6494] FAT-fs (loop5): Directory bread(block 65) failed [ 119.676936][ T6494] FAT-fs (loop5): Directory bread(block 66) failed [ 119.683775][ T6494] FAT-fs (loop5): Directory bread(block 67) failed [ 119.690446][ T6494] FAT-fs (loop5): Directory bread(block 68) failed [ 119.697389][ T6494] FAT-fs (loop5): Directory bread(block 69) failed [ 119.704827][ T6494] FAT-fs (loop5): Directory bread(block 70) failed [ 119.711432][ T6494] FAT-fs (loop5): Directory bread(block 71) failed [ 119.718526][ T6494] FAT-fs (loop5): Directory bread(block 72) failed [ 119.739809][ T6494] FAT-fs (loop5): Directory bread(block 73) failed [ 119.749402][ T6467] loop1: detected capacity change from 0 to 32768 [ 119.826001][ T6467] read_mapping_page failed! [ 119.855880][ T6467] jfs_mount: Failed to read AGGREGATE_I [ 119.874363][ T6467] Mount JFS Failure: -5 [ 119.887991][ T6467] jfs_mount failed w/return code = -5 [ 120.520061][ T6519] loop1: detected capacity change from 0 to 16 [ 120.744411][ T6519] erofs (device loop1): mounted with root inode @ nid 36. [ 121.830066][ T6537] ntfs3(nbd3): try to read out of volume at offset 0x0 [ 123.101715][ T792] usb 3-1: new full-speed USB device number 4 using dummy_hcd [ 123.320231][ T792] usb 3-1: config 0 has an invalid interface number: 87 but max is 0 [ 123.343105][ T792] usb 3-1: config 0 has no interface number 0 [ 123.370823][ T792] usb 3-1: config 0 interface 87 has no altsetting 0 [ 123.405641][ T792] usb 3-1: New USB device found, idVendor=0424, idProduct=cf18, bcdDevice=7d.82 [ 123.419029][ T792] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.465022][ T792] usb 3-1: Product: syz [ 123.489465][ T792] usb 3-1: Manufacturer: syz [ 123.512955][ T792] usb 3-1: SerialNumber: syz [ 123.584311][ T792] usb 3-1: config 0 descriptor?? [ 123.737847][ T6559] netlink: 'syz.0.164': attribute type 11 has an invalid length. [ 123.793101][ T6559] netlink: 36 bytes leftover after parsing attributes in process `syz.0.164'. [ 123.892588][ T792] usb 3-1: USB disconnect, device number 4 [ 124.144269][ T6570] loop0: detected capacity change from 0 to 16 [ 124.159508][ T6570] erofs (device loop0): mounted with root inode @ nid 36. [ 125.183643][ T5899] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 125.352771][ T6584] loop3: detected capacity change from 0 to 128 [ 125.444403][ T5899] usb 5-1: Using ep0 maxpacket: 8 [ 125.913296][ T5899] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 125.970613][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 126.023164][ T5899] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 126.068737][ T5899] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 126.205241][ T5899] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 126.260317][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 126.363091][ T5898] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 126.513597][ T5899] usb 5-1: GET_CAPABILITIES returned 0 [ 126.541899][ T5899] usbtmc 5-1:16.0: can't read capabilities [ 126.548150][ T5898] usb 4-1: Using ep0 maxpacket: 32 [ 126.565218][ T5898] usb 4-1: config 0 has an invalid interface number: 119 but max is 0 [ 126.600062][ T5898] usb 4-1: config 0 has no interface number 0 [ 126.636383][ T5898] usb 4-1: config 0 interface 119 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 126.677939][ T5898] usb 4-1: config 0 interface 119 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 126.717629][ T5898] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has an invalid bInterval 102, changing to 7 [ 126.735458][ T5899] usb 5-1: USB disconnect, device number 4 [ 126.784765][ T5898] usb 4-1: config 0 interface 119 altsetting 0 endpoint 0x83 has invalid maxpacket 24738, setting to 1024 [ 126.831818][ T5898] usb 4-1: config 0 interface 119 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 126.880950][ T5898] usb 4-1: New USB device found, idVendor=05ac, idProduct=0292, bcdDevice=88.73 [ 126.902810][ T5898] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 126.923764][ T5898] usb 4-1: Product: syz [ 126.931880][ T5898] usb 4-1: Manufacturer: syz [ 126.947141][ T5898] usb 4-1: SerialNumber: syz [ 126.978794][ T5898] usb 4-1: config 0 descriptor?? [ 127.011804][ T5898] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.119/input/input6 [ 127.400018][ T24] usb 4-1: USB disconnect, device number 4 [ 128.817331][ T6597] loop5: detected capacity change from 0 to 131072 [ 128.840790][ T6597] F2FS-fs (loop5): Test dummy encryption mode enabled [ 128.864654][ T6597] F2FS-fs (loop5): invalid crc value [ 128.966476][ T6597] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 128.995669][ T6597] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 129.070515][ T6604] loop0: detected capacity change from 0 to 512 [ 129.143739][ T6599] 0xfffffffffffffffd-0x00000001fff9 : "" [ 129.190428][ T6604] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 129.201287][ T6597] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 129.223489][ T6599] mtd: partition "" is out of reach -- disabled [ 129.520110][ T6607] loop3: detected capacity change from 0 to 32768 [ 129.528122][ T6607] btrfs: Deprecated parameter 'usebackuproot' [ 129.534400][ T6607] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 129.545564][ T6599] ftl_cs: FTL header not found. [ 129.553044][ T6607] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.180 (6607) [ 129.615061][ T6607] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 129.625253][ T6607] BTRFS info (device loop3): using crc32c checksum algorithm [ 129.653105][ T6604] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 129.985033][ T83] BTRFS warning (device loop3): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 130.011022][ T6604] EXT4-fs warning (device loop0): ext4_expand_extra_isize_ea:2858: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 130.042169][ T6604] EXT4-fs (loop0): 1 truncate cleaned up [ 130.086064][ T6607] BTRFS error (device loop3): failed to load root extent [ 130.093515][ T6607] BTRFS warning (device loop3): try to load backup roots slot 1 [ 130.101531][ T37] BTRFS warning (device loop3): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 130.177711][ T6604] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 130.257160][ T6607] BTRFS warning (device loop3): couldn't read tree root [ 130.264241][ T6607] BTRFS warning (device loop3): try to load backup roots slot 2 [ 130.272376][ T37] BTRFS error (device loop3): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 130.343056][ T6607] BTRFS warning (device loop3): couldn't read tree root [ 130.350111][ T6607] BTRFS warning (device loop3): try to load backup roots slot 3 [ 130.378003][ T6607] BTRFS info (device loop3): rebuilding free space tree [ 130.401512][ T6607] BTRFS info (device loop3): checking UUID tree [ 130.409988][ T6607] BTRFS info (device loop3): enabling ssd optimizations [ 130.419051][ T6607] BTRFS info (device loop3): turning on sync discard [ 130.425969][ T6607] BTRFS info (device loop3): enabling free space tree [ 130.432758][ T6607] BTRFS info (device loop3): force clearing of disk cache [ 130.439964][ T6607] BTRFS info (device loop3): enabling auto defrag [ 130.446855][ T6607] BTRFS info (device loop3): trying to use backup root at mount time [ 130.455401][ T6607] BTRFS info (device loop3): use zstd compression, level 3 [ 130.651275][ T5821] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 130.929882][ T6640] loop0: detected capacity change from 0 to 256 [ 130.947796][ T5819] BTRFS info (device loop3): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 131.720788][ C1] I/O error, dev loop0, sector 160 op 0x0:(READ) flags 0x880700 phys_seg 1 prio class 2 [ 131.738973][ T6640] loop0: detected capacity change from 256 to 0 [ 132.167575][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.183028][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.260460][ T6656] loop4: detected capacity change from 0 to 1024 [ 132.294113][ T6647] syzkaller1: entered promiscuous mode [ 132.323084][ T24] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 132.342059][ T6647] syzkaller1: entered allmulticast mode [ 132.397611][ T6656] hfsplus: request for non-existent node 65536 in B*Tree [ 132.437746][ T6656] hfsplus: request for non-existent node 65536 in B*Tree [ 132.483357][ T6656] hfsplus: failed to load root directory [ 132.493686][ T6155] Buffer I/O error on dev loop0, logical block 0, lost sync page write [ 132.520896][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 132.569574][ T24] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 132.618190][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 132.680536][ T24] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 132.743024][ T24] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 132.791411][ T24] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 132.822983][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 133.119973][ T24] usb 4-1: GET_CAPABILITIES returned 0 [ 133.163142][ T24] usbtmc 4-1:16.0: can't read capabilities [ 133.346405][ T24] usb 4-1: USB disconnect, device number 5 [ 134.881929][ T6397] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.903091][ T5930] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 135.089366][ T5930] usb 5-1: Using ep0 maxpacket: 16 [ 135.105254][ T6397] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.126430][ T5930] usb 5-1: config 0 interface 0 has no altsetting 0 [ 135.140914][ T5930] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 135.181508][ T5930] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.227896][ T5930] usb 5-1: config 0 descriptor?? [ 135.393582][ T6397] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.661580][ T5930] hid (null): unknown global tag 0xd [ 135.689698][ T5930] hid (null): invalid report_size 51610 [ 135.714551][ T5930] hid (null): report_id 0 is invalid [ 135.749730][ T5930] hid (null): invalid report_size 22398 [ 135.772145][ T6397] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.784145][ T5930] hid (null): unknown global tag 0x83 [ 135.794533][ T5930] hid (null): unknown global tag 0xe [ 135.813615][ T5930] hid (null): unknown global tag 0xd [ 135.829338][ T5930] hid (null): unknown global tag 0xe [ 135.839438][ T5930] hid (null): unknown global tag 0x57 [ 135.845772][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 135.866125][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 135.874504][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 135.884690][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 135.893057][ T5930] hid (null): unknown global tag 0xd [ 135.899791][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 135.941619][ T5930] usb 5-1: USB disconnect, device number 5 [ 137.006452][ T6709] loop3: detected capacity change from 0 to 8 [ 137.187231][ T6397] bridge_slave_0: left allmulticast mode [ 137.203228][ T6397] bridge_slave_0: left promiscuous mode [ 137.212195][ T6716] process 'syz.3.206' launched './file2' with NULL argv: empty string added [ 137.223910][ T6397] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.506267][ T6722] fuse: Bad value for 'fd' [ 137.732240][ T6397] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.747326][ T6397] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.761619][ T6397] bond0 (unregistering): (slave bridge_slave_1): Releasing backup interface [ 137.776555][ T6397] bond0 (unregistering): Released all slaves [ 137.818267][ T6713] syzkaller1: entered promiscuous mode [ 137.825047][ T6713] syzkaller1: entered allmulticast mode [ 137.993203][ T52] Bluetooth: hci4: command tx timeout [ 138.104451][ T6730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.214'. [ 138.299881][ T6733] loop4: detected capacity change from 0 to 1024 [ 138.407648][ T6733] hfsplus: bad catalog folder entry [ 138.414854][ T6737] fuse: Bad value for 'fd' [ 138.434848][ T6733] hfsplus: invalid catalog entry type [ 138.556630][ T136] hfsplus: b-tree write err: -5, ino 3 [ 138.817377][ T6397] hsr_slave_0: left promiscuous mode [ 138.938168][ T6397] hsr_slave_1: left promiscuous mode [ 138.953696][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.979220][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 139.123082][ T6746] loop4: detected capacity change from 0 to 32768 [ 139.153814][ T6746] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop4 (7:4) scanned by syz.4.221 (6746) [ 139.175271][ T6739] rtc_cmos 00:00: Alarms can be up to one day in the future [ 139.213115][ T6746] BTRFS info (device loop4): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 139.224687][ T6746] BTRFS info (device loop4): using sha256 checksum algorithm [ 139.248416][ T6397] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 139.279977][ T6397] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 139.352185][ T6397] veth1_macvtap: left promiscuous mode [ 139.370348][ T6746] BTRFS info (device loop4): enabling ssd optimizations [ 139.377684][ T6746] BTRFS info (device loop4): turning on async discard [ 139.384577][ T6746] BTRFS info (device loop4): enabling free space tree [ 139.403596][ T6397] veth0_macvtap: left promiscuous mode [ 139.409846][ T6397] veth1_vlan: left promiscuous mode [ 139.415676][ T6397] veth0_vlan: left promiscuous mode [ 139.872113][ T6746] BTRFS info (device loop4): balance: start -d -m [ 139.893988][ T6746] BTRFS info (device loop4): relocating block group 6881280 flags data|metadata [ 139.958243][ T6746] BTRFS info (device loop4): relocating block group 5242880 flags data|metadata [ 140.064926][ T52] Bluetooth: hci4: command tx timeout [ 140.084833][ T6746] BTRFS info (device loop4): found 10 extents, stage: move data extents [ 140.129637][ T6746] BTRFS info (device loop4): balance: canceled [ 140.281031][ T5818] BTRFS info (device loop4): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 140.796683][ T52] Bluetooth: hci0: unexpected cc 0x042d length: 1 < 7 [ 140.811268][ T6397] team0 (unregistering): Port device team_slave_1 removed [ 140.921360][ T6397] team0 (unregistering): Port device team_slave_0 removed [ 141.382863][ T6792] syzkaller0: entered promiscuous mode [ 141.451292][ T6792] syzkaller0: entered allmulticast mode [ 141.600225][ T6687] chnl_net:caif_netlink_parms(): no params data found [ 141.658564][ T6817] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 142.144594][ T52] Bluetooth: hci4: command tx timeout [ 142.221601][ T6687] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.263267][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.280998][ T6687] bridge_slave_0: entered allmulticast mode [ 142.333548][ T6687] bridge_slave_0: entered promiscuous mode [ 142.354132][ T6687] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.371610][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.424156][ T6687] bridge_slave_1: entered allmulticast mode [ 142.450809][ T6687] bridge_slave_1: entered promiscuous mode [ 142.594690][ T6687] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.656083][ T6687] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.752801][ T6834] netlink: 'syz.5.240': attribute type 10 has an invalid length. [ 142.806014][ T6834] bridge0: port 2(bridge_slave_1) entered disabled state [ 142.813880][ T6834] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.940868][ T6834] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.948126][ T6834] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.955727][ T6834] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.963038][ T6834] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.092123][ T6834] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 143.123310][ T6687] team0: Port device team_slave_0 added [ 143.150426][ T6827] loop1: detected capacity change from 0 to 32768 [ 143.174370][ T6827] btrfs: Deprecated parameter 'usebackuproot' [ 143.180474][ T6827] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 143.250449][ T6687] team0: Port device team_slave_1 added [ 143.258041][ T6827] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.238 (6827) [ 143.332292][ T6827] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 143.358234][ T6827] BTRFS info (device loop1): using crc32c checksum algorithm [ 143.529970][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.541907][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.568614][ T6687] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 143.598307][ T6687] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 143.605440][ T6687] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 143.637530][ T6687] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 143.642746][ T6827] BTRFS info (device loop1): rebuilding free space tree [ 143.709759][ T6827] BTRFS info (device loop1): enabling ssd optimizations [ 143.733370][ T6827] BTRFS info (device loop1): enabling free space tree [ 143.757422][ T6827] BTRFS info (device loop1): force clearing of disk cache [ 143.775120][ T6827] BTRFS info (device loop1): trying to use backup root at mount time [ 143.796921][ T6827] BTRFS info (device loop1): max_inline set to 0 [ 144.094072][ T5816] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 144.155066][ T6873] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 144.262330][ T52] Bluetooth: hci4: command tx timeout [ 144.940387][ T6879] fuse: Bad value for 'fd' [ 144.992353][ T52] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 145.003736][ T52] Bluetooth: hci0: Injecting HCI hardware error event [ 145.014524][ T52] Bluetooth: hci0: hardware error 0x00 [ 145.224994][ T6687] hsr_slave_0: entered promiscuous mode [ 145.231936][ T6687] hsr_slave_1: entered promiscuous mode [ 145.402990][ T6687] debugfs: 'hsr0' already exists in 'hsr' [ 145.408757][ T6687] Cannot create hsr debugfs directory [ 146.314976][ T6913] loop5: detected capacity change from 0 to 7 [ 146.340906][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.381555][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.413961][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.453526][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.497020][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.545293][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.583039][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.620372][ T6687] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 146.633982][ T6913] ldm_validate_partition_table(): Disk read failed. [ 146.640593][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.660385][ T6687] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 146.698010][ T6687] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 146.736302][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.749338][ T6687] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 146.820974][ T6913] Buffer I/O error on dev loop5, logical block 0, async page read [ 146.839197][ T6913] Dev loop5: unable to read RDB block 0 [ 146.868183][ T6913] loop5: unable to read partition table [ 146.958134][ T6913] loop5: partition table beyond EOD, truncated [ 147.027213][ T6913] loop_reread_partitions: partition scan of loop5 (Sj̖P=ý?}X %`ր5) failed (rc=-5) [ 147.126418][ T6687] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.195730][ T6687] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.215785][ T37] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.222971][ T37] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.268182][ T37] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.275375][ T37] bridge0: port 2(bridge_slave_1) entered forwarding state [ 147.283160][ T6940] loop2: detected capacity change from 0 to 128 [ 147.346864][ T52] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 147.484059][ T31] audit: type=1800 audit(1771941409.553:7): pid=6940 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.257" name="bus" dev="loop2" ino=1048613 res=0 errno=0 [ 147.568458][ T6940] syz.2.257: attempt to access beyond end of device [ 147.568458][ T6940] loop2: rw=2049, sector=753, nr_sectors = 8 limit=128 [ 147.788758][ T37] kworker/u8:2: attempt to access beyond end of device [ 147.788758][ T37] loop2: rw=1, sector=761, nr_sectors = 280 limit=128 [ 147.867235][ T6687] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.927943][ T6959] loop1: detected capacity change from 0 to 164 [ 148.177211][ T6962] rock: directory entry would overflow storage [ 148.183886][ T6962] rock: sig=0x4f50, size=4, remaining=3 [ 148.189524][ T6962] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 148.878996][ T6970] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 149.357817][ T6987] netlink: 72 bytes leftover after parsing attributes in process `syz.2.264'. [ 149.461845][ T6687] veth0_vlan: entered promiscuous mode [ 149.500010][ T6990] loop4: detected capacity change from 0 to 128 [ 149.516345][ T6687] veth1_vlan: entered promiscuous mode [ 149.597997][ T6990] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 149.665273][ T6990] ext4 filesystem being mounted at /49/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 149.696923][ T6687] veth0_macvtap: entered promiscuous mode [ 149.770251][ T6687] veth1_macvtap: entered promiscuous mode [ 149.862124][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 149.921374][ T6687] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.023472][ T1034] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.038873][ T7004] loop1: detected capacity change from 0 to 256 [ 150.043360][ T1034] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.099251][ T1034] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.113753][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 150.170460][ T1034] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.184088][ T7004] FAT-fs (loop1): Directory bread(block 64) failed [ 150.203572][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 150.212606][ T7004] FAT-fs (loop1): Directory bread(block 65) failed [ 150.253799][ T5818] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 150.285688][ T7004] FAT-fs (loop1): Directory bread(block 66) failed [ 150.292299][ T7004] FAT-fs (loop1): Directory bread(block 67) failed [ 150.305091][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 150.366231][ T7004] FAT-fs (loop1): Directory bread(block 68) failed [ 150.371043][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 150.406026][ T7004] FAT-fs (loop1): Directory bread(block 69) failed [ 150.413975][ T7011] fuse: Bad value for 'fd' [ 150.431874][ T5818] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 150.443077][ T7004] FAT-fs (loop1): Directory bread(block 70) failed [ 150.473016][ T7004] FAT-fs (loop1): Directory bread(block 71) failed [ 150.474192][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 150.493062][ T7004] FAT-fs (loop1): Directory bread(block 72) failed [ 150.501682][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 8192 [ 150.512972][ T7004] FAT-fs (loop1): Directory bread(block 73) failed [ 150.528192][ T7014] netlink: 16 bytes leftover after parsing attributes in process `syz.2.274'. [ 150.537131][ T1034] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.547169][ T5818] EXT4-fs error (device loop4): ext4_empty_dir:3107: inode #11: block 1: comm syz-executor: Directory block failed checksum [ 150.555259][ T1034] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 150.565690][ T5818] EXT4-fs error (device loop4): ext4_readdir:225: inode #11: comm syz-executor: path (unknown): directory fails checksum at offset 1024 [ 150.666551][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 150.696499][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.627382][ T7037] sctp: [Deprecated]: syz.2.279 (pid 7037) Use of int in max_burst socket option. [ 151.627382][ T7037] Use struct sctp_assoc_value instead [ 151.793213][ T5818] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 151.884935][ T7042] mmap: syz.5.280 (7042) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 152.477025][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.732756][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.866019][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.071287][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.428927][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 153.442256][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 153.456697][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 153.465992][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 153.473797][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 153.599773][ T52] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 153.617614][ T52] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 153.630148][ T52] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 153.647500][ T52] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 153.688478][ T52] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.053259][ T7059] chnl_net:caif_netlink_parms(): no params data found [ 155.475131][ T13] bridge_slave_1: left allmulticast mode [ 155.480812][ T13] bridge_slave_1: left promiscuous mode [ 155.503040][ T5841] Bluetooth: hci0: command tx timeout [ 155.520586][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.551802][ T13] bridge_slave_0: left allmulticast mode [ 156.289491][ T5841] Bluetooth: hci6: command tx timeout [ 156.304139][ T13] bridge_slave_0: left promiscuous mode [ 156.309958][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.534637][ T7109] fuse: Bad value for 'fd' [ 158.206568][ T5841] Bluetooth: hci0: command tx timeout [ 158.385377][ T52] Bluetooth: hci6: command tx timeout [ 158.393802][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.457399][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.485018][ T13] bond0 (unregistering): Released all slaves [ 158.735585][ T7127] binder: BINDER_SET_CONTEXT_MGR already set [ 158.742140][ T7127] binder: 7126:7127 ioctl 4018620d 200000004a80 returned -16 [ 158.800948][ T7065] chnl_net:caif_netlink_parms(): no params data found [ 159.359611][ T7059] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.379810][ T7059] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.392123][ T7142] binder: 7141:7142 unknown command 0 [ 159.417928][ T7142] binder: 7141:7142 ioctl c0306201 2000000001c0 returned -22 [ 159.423874][ T7059] bridge_slave_0: entered allmulticast mode [ 159.448817][ T7145] binder: 7141:7145 ioctl c0306201 200000000240 returned -14 [ 159.470093][ T7059] bridge_slave_0: entered promiscuous mode [ 159.654294][ T13] hsr_slave_0: left promiscuous mode [ 159.697788][ T13] hsr_slave_1: left promiscuous mode [ 160.086593][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.103824][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.134156][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.147645][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.240316][ T52] Bluetooth: hci0: command tx timeout [ 160.253993][ T13] veth1_macvtap: left promiscuous mode [ 160.295862][ T13] veth1_vlan: left promiscuous mode [ 160.329909][ T13] veth0_vlan: left promiscuous mode [ 160.463031][ T52] Bluetooth: hci6: command tx timeout [ 161.189781][ T13] team0 (unregistering): Port device team_slave_1 removed [ 161.299245][ T13] team0 (unregistering): Port device team_slave_0 removed [ 161.804207][ T7157] loop6: detected capacity change from 0 to 32768 [ 161.851970][ T7157] XFS (loop6): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 161.875374][ T7059] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.908218][ T7059] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.948121][ T7059] bridge_slave_1: entered allmulticast mode [ 161.978570][ T7059] bridge_slave_1: entered promiscuous mode [ 162.098708][ T7157] XFS (loop6): Ending clean mount [ 162.302335][ T7065] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.310302][ T7065] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.319902][ T7157] overlayfs: missing 'lowerdir' [ 162.326843][ T7065] bridge_slave_0: entered allmulticast mode [ 162.326931][ T52] Bluetooth: hci0: command tx timeout [ 162.335401][ T7065] bridge_slave_0: entered promiscuous mode [ 162.348219][ T7065] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.356214][ T7065] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.399908][ T31] audit: type=1804 audit(1771941424.433:8): pid=7157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.319" name="/newroot/10/file0/file0/bus" dev="loop6" ino=9291 res=1 errno=0 [ 163.664614][ T52] Bluetooth: hci6: command tx timeout [ 163.681486][ T7065] bridge_slave_1: entered allmulticast mode [ 163.704662][ T7065] bridge_slave_1: entered promiscuous mode [ 163.724887][ T7059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.843694][ T7059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.941416][ T7199] XFS (loop6): User initiated shutdown received. [ 164.049858][ T7065] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.059255][ T7199] XFS (loop6): Metadata I/O Error (0x4) detected at xfs_fs_goingdown+0x105/0x150 (fs/xfs/xfs_fsops.c:469). Shutting down filesystem. [ 164.127749][ T7199] XFS (loop6): Please unmount the filesystem and rectify the problem(s) [ 164.165066][ T7065] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.924421][ T6687] XFS (loop6): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 165.150091][ T7059] team0: Port device team_slave_0 added [ 165.166488][ T7059] team0: Port device team_slave_1 added [ 165.186859][ T7065] team0: Port device team_slave_0 added [ 165.693442][ T7065] team0: Port device team_slave_1 added [ 165.814518][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.831788][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 165.909902][ T7059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.062091][ T7059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.096586][ T7059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.193228][ T7059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.278643][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.293026][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.379705][ T7065] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.393454][ T7065] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.400428][ T7065] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 166.462931][ T7065] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.493070][ T5824] usb 7-1: new low-speed USB device number 2 using dummy_hcd [ 166.659650][ T5824] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 166.669442][ T5824] usb 7-1: config 0 has no interface number 0 [ 166.706774][ T5824] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 166.743528][ T5824] usb 7-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 166.760171][ T7059] hsr_slave_0: entered promiscuous mode [ 166.773037][ T5824] usb 7-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 166.785704][ T5824] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 166.800441][ T7059] hsr_slave_1: entered promiscuous mode [ 166.829882][ T5824] usb 7-1: config 0 descriptor?? [ 166.846335][ T7229] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 166.874833][ T5824] iowarrior 7-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 167.047151][ T7065] hsr_slave_0: entered promiscuous mode [ 167.077402][ T7065] hsr_slave_1: entered promiscuous mode [ 167.104263][ T7065] debugfs: 'hsr0' already exists in 'hsr' [ 167.130141][ T7065] Cannot create hsr debugfs directory [ 167.198695][ T5899] usb 7-1: USB disconnect, device number 2 [ 167.590717][ T7254] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 167.603108][ T7254] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 167.629344][ T7254] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 167.636440][ T7254] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 167.651515][ T7254] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 167.659293][ T7254] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 167.698310][ T7254] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 167.713553][ T7254] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 167.760454][ T7254] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 167.785207][ T7254] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 167.821746][ T7254] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 167.849054][ T7254] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 167.976556][ T7254] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 167.997194][ T7254] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 168.531651][ T7065] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 168.560755][ T7065] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 168.669105][ T7065] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 168.787747][ T7065] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 169.423268][ T7271] loop2: detected capacity change from 0 to 4096 [ 169.566222][ T7283] NILFS (loop2): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 169.583357][ T7059] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.765120][ T7059] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.911056][ T7059] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.942726][ T7059] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 170.389683][ T7065] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.476338][ T7065] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.534458][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.541674][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.597469][ T7059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.632797][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.639969][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.720477][ T7059] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.793391][ T136] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.800600][ T136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.879525][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.886704][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.299654][ T7345] faux_driver vkms: [drm] Unknown color mode 253; guessing buffer size. [ 172.389889][ T7065] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.557859][ T7059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.997231][ T7368] loop1: detected capacity change from 0 to 128 [ 173.190209][ T7368] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 173.323605][ T7377] fuse: Bad value for 'fd' [ 173.328308][ T7368] ext4 filesystem being mounted at /62/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 173.630740][ T7368] fscrypt: loop1: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 174.541800][ T7059] veth0_vlan: entered promiscuous mode [ 174.562948][ T7389] netlink: 28 bytes leftover after parsing attributes in process `syz.5.360'. [ 174.690986][ T7059] veth1_vlan: entered promiscuous mode [ 174.988657][ T7059] veth0_macvtap: entered promiscuous mode [ 175.016935][ T7059] veth1_macvtap: entered promiscuous mode [ 175.121472][ T7065] veth0_vlan: entered promiscuous mode [ 175.150638][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.169333][ T5816] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 175.209277][ T7059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.242437][ T7065] veth1_vlan: entered promiscuous mode [ 175.289016][ T12] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.353905][ T12] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.492958][ T6964] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.543409][ T6964] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.238315][ T7065] veth0_macvtap: entered promiscuous mode [ 177.286925][ T7065] veth1_macvtap: entered promiscuous mode [ 177.352061][ T6964] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.398434][ T6964] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.517026][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.576234][ T6964] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.588097][ T7065] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 177.604416][ T6964] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.614778][ T7414] netlink: 'syz.1.366': attribute type 10 has an invalid length. [ 177.842221][ T7414] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 177.934425][ T6964] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.953809][ T6964] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.052038][ T7417] bridge_slave_0: left allmulticast mode [ 178.133268][ T7417] bridge_slave_0: left promiscuous mode [ 178.139095][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.223497][ T5899] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 178.340010][ T7417] bridge_slave_1: left allmulticast mode [ 178.365352][ T7417] bridge_slave_1: left promiscuous mode [ 178.371180][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.527977][ T5899] usb 7-1: not running at top speed; connect to a high speed hub [ 179.539329][ T5899] usb 7-1: config 0 interface 0 has no altsetting 0 [ 179.548710][ T5899] usb 7-1: New USB device found, idVendor=05ac, idProduct=0272, bcdDevice=2b.5c [ 179.558173][ T5899] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.044527][ T5899] usb 7-1: Product: syz [ 180.063697][ T5899] usb 7-1: Manufacturer: syz [ 180.068337][ T5899] usb 7-1: SerialNumber: syz [ 180.103679][ T5899] usb 7-1: config 0 descriptor?? [ 180.124758][ T7417] bond0: (slave bond_slave_0): Releasing backup interface [ 180.150376][ T7417] bond0: (slave bond_slave_1): Releasing backup interface [ 180.208145][ T7417] team0: Port device team_slave_0 removed [ 180.463233][ T7417] team0: Port device team_slave_1 removed [ 180.569749][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.688279][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.829146][ T7417] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.911500][ T7417] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 181.155821][ T7417] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 181.230227][ T1034] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.239452][ T7439] fuse: Bad value for 'fd' [ 181.263742][ T6964] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.299332][ T5899] input: bcm5974 as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.0/input/input7 [ 181.386805][ T5170] bcm5974 7-1:0.0: could not read from device [ 181.462633][ T5170] bcm5974 7-1:0.0: could not read from device [ 181.469539][ T5899] usb 7-1: USB disconnect, device number 3 [ 181.696885][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.748155][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.903903][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.939366][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 multicast mode [ 184.535247][ T792] libceph: connect (1)[c::]:6789 error -101 [ 184.543507][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 184.827487][ T792] libceph: connect (1)[c::]:6789 error -101 [ 184.894250][ T792] libceph: mon0 (1)[c::]:6789 connect error [ 184.952774][ T7494] ceph: No mds server is up or the cluster is laggy [ 187.513843][ T7535] loop7: detected capacity change from 0 to 40427 [ 187.533983][ T7535] F2FS-fs (loop7): invalid crc value [ 187.603068][ T7535] F2FS-fs (loop7): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 187.613120][ T7535] F2FS-fs (loop7): Start checkpoint disabled! [ 187.626498][ T7535] F2FS-fs (loop7): f2fs_disable_checkpoint() finish, err:0 [ 187.645417][ T7535] F2FS-fs (loop7): Mounted with checkpoint version = 48b305e6 [ 187.990246][ T7539] syz.7.387: attempt to access beyond end of device [ 187.990246][ T7539] loop7: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 188.015057][ T7539] syz.7.387: attempt to access beyond end of device [ 188.015057][ T7539] loop7: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 188.034323][ T7539] syz.7.387: attempt to access beyond end of device [ 188.034323][ T7539] loop7: rw=2049, sector=45112, nr_sectors = 8 limit=40427 [ 188.051541][ T7539] syz.7.387: attempt to access beyond end of device [ 188.051541][ T7539] loop7: rw=2049, sector=45120, nr_sectors = 8 limit=40427 [ 188.076712][ T7539] syz.7.387: attempt to access beyond end of device [ 188.076712][ T7539] loop7: rw=2049, sector=45128, nr_sectors = 8 limit=40427 [ 188.095538][ T7539] syz.7.387: attempt to access beyond end of device [ 188.095538][ T7539] loop7: rw=2049, sector=45136, nr_sectors = 8 limit=40427 [ 188.114524][ T7539] syz.7.387: attempt to access beyond end of device [ 188.114524][ T7539] loop7: rw=2049, sector=45144, nr_sectors = 8 limit=40427 [ 188.132490][ T7539] syz.7.387: attempt to access beyond end of device [ 188.132490][ T7539] loop7: rw=2049, sector=45152, nr_sectors = 8 limit=40427 [ 188.151461][ T7539] syz.7.387: attempt to access beyond end of device [ 188.151461][ T7539] loop7: rw=2049, sector=45160, nr_sectors = 8 limit=40427 [ 188.170631][ T7539] syz.7.387: attempt to access beyond end of device [ 188.170631][ T7539] loop7: rw=2049, sector=45168, nr_sectors = 8 limit=40427 [ 188.483039][ T31] audit: type=1800 audit(1771941450.023:9): pid=7539 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.387" name="file1" dev="loop7" ino=10 res=0 errno=0 [ 188.566514][ T1034] CPU: 1 UID: 0 PID: 1034 Comm: kworker/u8:8 Not tainted syzkaller #0 PREEMPT(full) [ 188.566549][ T1034] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 188.566565][ T1034] Workqueue: writeback wb_workfn (flush-7:7) [ 188.566603][ T1034] Call Trace: [ 188.566613][ T1034] [ 188.566623][ T1034] dump_stack_lvl+0xe8/0x150 [ 188.566662][ T1034] f2fs_handle_critical_error+0x37c/0x540 [ 188.566715][ T1034] f2fs_write_end_io+0xcdb/0xff0 [ 188.566772][ T1034] __submit_merged_bio+0x256/0x700 [ 188.566809][ T1034] __submit_merged_write_cond+0x3c9/0x4e0 [ 188.566863][ T1034] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 188.566924][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.566973][ T1034] f2fs_write_data_pages+0x2975/0x35e0 [ 188.567002][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.567031][ T1034] ? lock_release+0x4b/0x3d0 [ 188.567114][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.567166][ T1034] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 188.567248][ T1034] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 188.567304][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.567361][ T1034] ? __pfx_f2fs_inode_chksum_set+0x10/0x10 [ 188.567402][ T1034] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 188.567434][ T1034] do_writepages+0x32e/0x550 [ 188.567480][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.567509][ T1034] ? reacquire_held_locks+0x104/0x190 [ 188.567546][ T1034] ? writeback_sb_inodes+0x43d/0x19a0 [ 188.567587][ T1034] __writeback_single_inode+0x133/0x11a0 [ 188.567623][ T1034] ? do_raw_spin_unlock+0xf5/0x210 [ 188.567656][ T1034] writeback_sb_inodes+0x944/0x19a0 [ 188.567696][ T1034] ? ret_from_fork_asm+0x1a/0x30 [ 188.567747][ T1034] ? __lock_acquire+0x6b5/0x2cf0 [ 188.567788][ T1034] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 188.567818][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.567900][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.567929][ T1034] ? rcu_is_watching+0x15/0xb0 [ 188.567972][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568014][ T1034] wb_writeback+0x456/0xb70 [ 188.568050][ T1034] ? queue_io+0x221/0x4a0 [ 188.568094][ T1034] ? __pfx_wb_writeback+0x10/0x10 [ 188.568123][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.568174][ T1034] wb_workfn+0x414/0xf50 [ 188.568205][ T1034] ? look_up_lock_class+0x57/0x110 [ 188.568263][ T1034] ? __pfx_wb_workfn+0x10/0x10 [ 188.568293][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568323][ T1034] ? do_raw_spin_lock+0x12b/0x2f0 [ 188.568353][ T1034] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 188.568379][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568418][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568452][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568483][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568517][ T1034] ? process_scheduled_works+0xa25/0x1830 [ 188.568550][ T1034] ? process_scheduled_works+0xa25/0x1830 [ 188.568586][ T1034] process_scheduled_works+0xb02/0x1830 [ 188.568661][ T1034] ? __pfx_process_scheduled_works+0x10/0x10 [ 188.568704][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568733][ T1034] ? assign_work+0x3d5/0x5e0 [ 188.568774][ T1034] worker_thread+0xa50/0xfc0 [ 188.568811][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568862][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.568905][ T1034] kthread+0x388/0x470 [ 188.568931][ T1034] ? __pfx_worker_thread+0x10/0x10 [ 188.568963][ T1034] ? __pfx_kthread+0x10/0x10 [ 188.568997][ T1034] ret_from_fork+0x51e/0xb90 [ 188.569036][ T1034] ? __pfx_ret_from_fork+0x10/0x10 [ 188.569066][ T1034] ? srso_alias_return_thunk+0x5/0xfbef5 [ 188.569095][ T1034] ? __switch_to+0xc7d/0x1450 [ 188.569131][ T1034] ? __pfx_kthread+0x10/0x10 [ 188.569159][ T1034] ret_from_fork_asm+0x1a/0x30 [ 188.569221][ T1034] [ 188.569231][ T1034] F2FS-fs (loop7): Stopped filesystem due to reason: 3 [ 189.181798][ T7546] fuse: Bad value for 'fd' [ 193.553784][ T7600] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.616891][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.626867][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.866705][ T7613] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 193.976956][ T7617] netlink: 12 bytes leftover after parsing attributes in process `syz.5.406'. [ 194.167372][ T7622] input: syz0 as /devices/virtual/input/input8 [ 194.607325][ T7621] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 194.621365][ T7621] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 194.991465][ T7624] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 196.072629][ T7642] syzkaller0: entered promiscuous mode [ 196.115320][ T7642] syzkaller0: entered allmulticast mode [ 196.136514][ T7673] loop2: detected capacity change from 0 to 16 [ 196.188617][ T7673] erofs (device loop2): mounted with root inode @ nid 36. [ 200.952985][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 201.269194][ T7710] tipc: Enabling of bearer rejected, failed to enable media [ 201.319851][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 202.123073][ T5899] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 202.471041][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 202.749722][ T7679] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 202.805168][ T5899] usb 7-1: Using ep0 maxpacket: 16 [ 203.154837][ T5899] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 203.162277][ T7679] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 203.414890][ T5899] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.291639][ T5899] usb 7-1: config 0 descriptor?? [ 205.320311][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.019829][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.056659][ T7742] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 206.059354][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.103470][ T5899] usb 7-1: can't set config #0, error -71 [ 206.133347][ T5899] usb 7-1: USB disconnect, device number 4 [ 206.138436][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.184865][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.244513][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.303619][ T7679] wlan1 speed is unknown, defaulting to 1000 [ 206.332690][ T7751] netlink: 'syz.7.435': attribute type 1 has an invalid length. [ 206.785208][ T7764] loop6: detected capacity change from 0 to 16 [ 206.813753][ T7764] erofs (device loop6): mounted with root inode @ nid 36. [ 207.016295][ T7768] syzkaller0: entered promiscuous mode [ 207.021789][ T7768] syzkaller0: entered allmulticast mode [ 209.224707][ T7784] loop8: detected capacity change from 0 to 256 [ 209.275017][ T7784] exfat: Deprecated parameter 'utf8' [ 209.305245][ T7784] exfat: Deprecated parameter 'namecase' [ 209.310898][ T7784] exfat: Deprecated parameter 'utf8' [ 209.573200][ T7784] exFAT-fs (loop8): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 209.707796][ T7795] loop1: detected capacity change from 0 to 64 [ 211.059278][ T7784] exFAT-fs (loop8): start_clu is invalid cluster(0x0) [ 211.068944][ T7807] loop5: detected capacity change from 0 to 7 [ 211.077772][ T7807] loop5: [POWERTEC] p1 p2 p3 p4 p5 p6 [ 211.233340][ T7807] loop5: p1 start 771753728 is beyond EOD, truncated [ 211.373083][ T7807] loop5: p2 start 1818846767 is beyond EOD, truncated [ 211.403098][ T7807] loop5: p3 start 1764718181 is beyond EOD, truncated [ 211.411060][ T7807] loop5: p4 size 2863267840 extends beyond EOD, truncated [ 211.494941][ T7807] loop5: p5 start 1009845767 is beyond EOD, truncated [ 211.524552][ T7807] loop5: p6 start 3875569436 is beyond EOD, truncated [ 211.984524][ T6026] udevd[6026]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 213.338527][ T7827] loop1: detected capacity change from 0 to 8 [ 213.461697][ T7827] MTD: Attempt to mount non-MTD device "/dev/loop1" [ 213.505158][ T5997] udevd[5997]: incorrect cramfs checksum on /dev/loop1 [ 213.712190][ T7836] cramfs: Error -3 while decompressing! [ 213.718094][ T7836] cramfs: ffffffff9a3a5bf8(16)->ffff88803f20f000(4096) [ 213.729010][ T7836] cramfs: Error -3 while decompressing! [ 213.734702][ T7836] cramfs: ffffffff9a3a5bf8(16)->ffff88803f20f000(4096) [ 213.754102][ T31] audit: type=1800 audit(1771941475.813:10): pid=7836 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.458" name="file0" dev="loop1" ino=244 res=0 errno=0 [ 214.172884][ T6026] udevd[6026]: incorrect cramfs checksum on /dev/loop1 [ 216.191857][ T7864] loop6: detected capacity change from 0 to 1024 [ 216.716238][ T165] hfsplus: bad catalog file entry [ 216.737540][ T165] hfsplus: b-tree write err: -5, ino 3 [ 218.181267][ T7848] wlan1 speed is unknown, defaulting to 1000 [ 219.471591][ T7899] netlink: 64 bytes leftover after parsing attributes in process `syz.5.477'. [ 219.839888][ T7914] loop1: detected capacity change from 0 to 1024 [ 219.886242][ T7914] Quota error (device loop1): v2_read_file_info: Number of blocks too big for quota file size (6144 > 256). [ 219.899878][ T7914] EXT4-fs warning (device loop1): ext4_enable_quotas:7236: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 219.923096][ T7914] EXT4-fs (loop1): mount failed [ 223.362616][ T5974] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 223.580058][ T5974] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 223.644175][ T5974] usb 7-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 223.704525][ T5974] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 223.891564][ T5974] usb 7-1: config 0 descriptor?? [ 228.784563][ T7957] loop2: detected capacity change from 0 to 1024 [ 229.442685][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 229.451430][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 229.510913][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 229.907693][ C1] raw-gadget.0 gadget.6: ignoring, device is not running [ 229.915056][ T5974] usbhid 7-1:0.0: can't add hid device: -32 [ 229.921114][ T5974] usbhid 7-1:0.0: probe with driver usbhid failed with error -32 [ 229.946677][ T7957] hfsplus: failed to load catalog file [ 229.996927][ T6004] usb 7-1: USB disconnect, device number 5 [ 230.221115][ T7972] loop1: detected capacity change from 0 to 512 [ 232.067983][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.497'. [ 232.077116][ T7984] netlink: 8 bytes leftover after parsing attributes in process `syz.8.497'. [ 233.154793][ T6004] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 234.047179][ T6004] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 234.058330][ T6004] usb 9-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 234.067430][ T6004] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 234.226076][ T6004] usb 9-1: config 0 descriptor?? [ 234.347924][ T6004] pwc: Askey VC010 type 2 USB webcam detected. [ 234.693036][ T6004] pwc: recv_control_msg error -32 req 02 val 2b00 [ 234.743415][ T6004] pwc: recv_control_msg error -32 req 02 val 2700 [ 234.771964][ T6004] pwc: recv_control_msg error -32 req 02 val 2c00 [ 234.801710][ T6004] pwc: recv_control_msg error -32 req 04 val 1000 [ 234.845347][ T6004] pwc: recv_control_msg error -32 req 04 val 1300 [ 234.875917][ T6004] pwc: recv_control_msg error -32 req 04 val 1400 [ 234.907973][ T6004] pwc: recv_control_msg error -32 req 02 val 2000 [ 234.943098][ T6004] pwc: recv_control_msg error -32 req 02 val 2100 [ 234.981797][ T6004] pwc: recv_control_msg error -32 req 04 val 1500 [ 235.018228][ T6004] pwc: recv_control_msg error -32 req 02 val 2500 [ 235.071079][ T6004] pwc: recv_control_msg error -32 req 02 val 2400 [ 237.430248][ T6004] pwc: recv_control_msg error -71 req 02 val 2900 [ 237.437553][ T6004] pwc: recv_control_msg error -71 req 02 val 2800 [ 237.463516][ T6004] pwc: recv_control_msg error -71 req 04 val 1100 [ 237.521923][ T6004] pwc: recv_control_msg error -71 req 04 val 1200 [ 237.838880][ T6004] pwc: Registered as video103. [ 237.846748][ T6004] input: PWC snapshot button as /devices/platform/dummy_hcd.8/usb9/9-1/input/input9 [ 237.862140][ T6004] usb 9-1: USB disconnect, device number 2 [ 239.095560][ T8078] loop1: detected capacity change from 0 to 64 [ 239.105880][ T8069] syzkaller0: entered promiscuous mode [ 239.111372][ T8069] syzkaller0: entered allmulticast mode [ 240.212789][ T8089] bad cache= option: nonw [ 240.212789][ T8089] [ 240.219537][ T8089] CIFS: VFS: bad cache= option: nonw [ 247.776015][ T8151] loop7: detected capacity change from 0 to 128 [ 248.215526][ T8151] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 248.224633][ T8151] FAT-fs (loop7): Filesystem has been set read-only [ 249.149807][ T8151] FAT-fs (loop7): error, fat_free: invalid cluster chain (i_pos 54) [ 250.524029][ T8167] fuse: Bad value for 'fd' [ 250.763488][ T8165] loop1: detected capacity change from 0 to 164 [ 254.321776][ T5974] IPVS: starting estimator thread 0... [ 254.423068][ T8193] IPVS: using max 26 ests per chain, 62400 per kthread [ 254.797090][ T5841] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 254.808514][ T5841] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 254.818414][ T5841] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 254.830088][ T5841] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 254.841908][ T5841] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.027893][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.040921][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.773752][ T8208] loop6: detected capacity change from 0 to 128 [ 256.953132][ T5841] Bluetooth: hci7: command tx timeout [ 257.272945][ T8219] FAT-fs (loop6): error, corrupted directory (invalid entries) [ 257.280756][ T8219] FAT-fs (loop6): Filesystem has been set read-only [ 257.679292][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.688183][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.697553][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.705726][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.723334][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 258.116222][ T8216] loop1: detected capacity change from 0 to 32768 [ 258.142421][ T8216] XFS (loop1): Mounting V5 Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 258.342640][ T8216] XFS (loop1): Starting recovery (logdev: internal) [ 258.420089][ T8216] XFS (loop1): Ending recovery (logdev: internal) [ 258.938250][ T8220] wlan1 speed is unknown, defaulting to 1000 [ 259.027654][ T5841] Bluetooth: hci7: command tx timeout [ 259.107656][ T8200] wlan1 speed is unknown, defaulting to 1000 [ 259.389251][ T8238] loop2: detected capacity change from 0 to 764 [ 260.098697][ T5841] Bluetooth: hci8: command tx timeout [ 260.138756][ T8238] iso9660: Bad value for 'gid' [ 260.240781][ T8238] iso9660: Bad value for 'gid' [ 260.258195][ T5816] XFS (loop1): Unmounting Filesystem 9f91832a-3b79-45c3-9d6d-ed0bc7357fe4 [ 261.457137][ T5841] Bluetooth: hci7: command tx timeout [ 261.705756][ T8246] netlink: 88 bytes leftover after parsing attributes in process `syz.7.551'. [ 261.714889][ T8246] netlink: 48 bytes leftover after parsing attributes in process `syz.7.551'. [ 262.172965][ T5841] Bluetooth: hci8: command tx timeout [ 263.505749][ T5841] Bluetooth: hci7: command tx timeout [ 263.682564][ T8220] chnl_net:caif_netlink_parms(): no params data found [ 264.231779][ T5841] Bluetooth: hci8: command tx timeout [ 265.715337][ T8106] syz_tun (unregistering): left allmulticast mode [ 266.305018][ T5841] Bluetooth: hci8: command tx timeout [ 266.437225][ T8307] veth1_macvtap: entered allmulticast mode [ 266.729412][ T8314] loop1: detected capacity change from 0 to 32768 [ 266.737680][ T8314] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop1 (7:1) scanned by syz.1.563 (8314) [ 266.754623][ T8314] BTRFS info (device loop1): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 266.764748][ T8314] BTRFS info (device loop1): using crc32c checksum algorithm [ 266.772139][ T8314] BTRFS warning (device loop1): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 266.960765][ T8314] BTRFS info (device loop1): rebuilding free space tree [ 267.002215][ T8314] BTRFS info (device loop1): disabling free space tree [ 267.009281][ T8314] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 267.020818][ T8314] BTRFS info (device loop1): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 267.054768][ T8314] BTRFS info (device loop1): enabling ssd optimizations [ 267.061726][ T8314] BTRFS info (device loop1): turning on async discard [ 267.068649][ T8314] BTRFS info (device loop1): enabling disk space caching [ 267.075710][ T8314] BTRFS info (device loop1): force clearing of disk cache [ 267.082809][ T8314] BTRFS info (device loop1): use zstd compression, level 3 [ 270.150771][ T8200] chnl_net:caif_netlink_parms(): no params data found [ 270.584834][ T5816] BTRFS info (device loop1): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 271.036509][ T8357] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 271.050566][ T8220] bridge0: port 1(bridge_slave_0) entered blocking state [ 271.060731][ T8220] bridge0: port 1(bridge_slave_0) entered disabled state [ 271.069193][ T8220] bridge_slave_0: entered allmulticast mode [ 271.261306][ T8220] bridge_slave_0: entered promiscuous mode [ 271.270953][ T8220] bridge0: port 2(bridge_slave_1) entered blocking state [ 271.333113][ T8220] bridge0: port 2(bridge_slave_1) entered disabled state [ 271.363408][ T8220] bridge_slave_1: entered allmulticast mode [ 271.438334][ T8220] bridge_slave_1: entered promiscuous mode [ 272.348512][ T8374] netlink: 24 bytes leftover after parsing attributes in process `syz.1.570'. [ 274.109099][ T8220] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.122987][ T5999] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 274.155871][ T8220] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.303463][ T5999] usb 3-1: Using ep0 maxpacket: 16 [ 274.384024][ T5999] usb 3-1: config 252 has an invalid interface number: 213 but max is 0 [ 274.422824][ T5999] usb 3-1: config 252 has no interface number 0 [ 274.442598][ T5999] usb 3-1: config 252 interface 213 has no altsetting 0 [ 274.471788][ T5999] usb 3-1: New USB device found, idVendor=0458, idProduct=7005, bcdDevice=6d.16 [ 274.499971][ T5999] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.509489][ T5999] usb 3-1: Product: syz [ 274.524788][ T8200] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.526078][ T5999] usb 3-1: Manufacturer: syz [ 274.532116][ T8200] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.536774][ T5999] usb 3-1: SerialNumber: syz [ 274.544829][ T8200] bridge_slave_0: entered allmulticast mode [ 275.354361][ T8200] bridge_slave_0: entered promiscuous mode [ 275.448004][ T5999] gspca_main: sn9c2028-2.14.0 probing 0458:7005 [ 275.456776][ T8220] team0: Port device team_slave_0 added [ 275.482471][ T8220] team0: Port device team_slave_1 added [ 275.493109][ T792] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 275.683408][ T792] usb 2-1: Using ep0 maxpacket: 16 [ 275.789036][ T5999] gspca_sn9c2028: read1 error -71 [ 275.794681][ T5999] gspca_sn9c2028: read1 error -71 [ 275.799009][ T792] usb 2-1: config 0 has an invalid interface number: 191 but max is 0 [ 275.802161][ T5999] gspca_sn9c2028: read1 error -71 [ 275.836766][ T5999] sn9c2028 3-1:252.213: probe with driver sn9c2028 failed with error -71 [ 276.460485][ T792] usb 2-1: config 0 has no interface number 0 [ 276.570694][ T5999] usb 3-1: USB disconnect, device number 6 [ 276.579850][ T792] usb 2-1: config 0 interface 191 has no altsetting 0 [ 276.599308][ T8200] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.607237][ T8200] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.614533][ T8200] bridge_slave_1: entered allmulticast mode [ 276.641981][ T8200] bridge_slave_1: entered promiscuous mode [ 276.663085][ T792] usb 2-1: New USB device found, idVendor=046d, idProduct=c281, bcdDevice=c2.08 [ 276.672127][ T792] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 276.725758][ T792] usb 2-1: Product: syz [ 276.729953][ T792] usb 2-1: Manufacturer: syz [ 276.755589][ T792] usb 2-1: SerialNumber: syz [ 276.949777][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.956962][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 277.714831][ T8220] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.775073][ T792] usb 2-1: config 0 descriptor?? [ 279.245641][ T792] usb 2-1: can't set config #0, error -71 [ 279.251601][ T8200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 279.277948][ T792] usb 2-1: USB disconnect, device number 6 [ 279.299342][ T8220] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 279.323361][ T8220] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 279.401842][ T8220] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.421414][ T8200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 279.791989][ T8200] team0: Port device team_slave_0 added [ 279.809976][ T8220] hsr_slave_0: entered promiscuous mode [ 279.819378][ T8220] hsr_slave_1: entered promiscuous mode [ 279.826515][ T8220] debugfs: 'hsr0' already exists in 'hsr' [ 279.832261][ T8220] Cannot create hsr debugfs directory [ 280.824666][ T8200] team0: Port device team_slave_1 added [ 281.166105][ T8435] syz.1.588 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 281.550108][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.584824][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.837561][ T8200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.857341][ T8200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.866503][ T8200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 281.967611][ T8200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.217751][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.590'. [ 282.227072][ T8438] netlink: 28 bytes leftover after parsing attributes in process `syz.7.590'. [ 283.730820][ T8453] netlink: 76 bytes leftover after parsing attributes in process `syz.1.593'. [ 283.817756][ T8200] hsr_slave_0: entered promiscuous mode [ 283.838817][ T8200] hsr_slave_1: entered promiscuous mode [ 283.866227][ T8200] debugfs: 'hsr0' already exists in 'hsr' [ 283.911454][ T8200] Cannot create hsr debugfs directory [ 293.464266][ T8507] fuse: Bad value for 'fd' [ 301.063008][ T32] INFO: task syz-executor:5819 blocked for more than 144 seconds. [ 301.070860][ T32] Not tainted syzkaller #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 301.113815][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 301.141055][ T32] task:syz-executor state:D stack:22144 pid:5819 tgid:5819 ppid:1 task_flags:0x400140 flags:0x00080002 [ 301.179473][ T32] Call Trace: [ 301.183364][ T52] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 301.212967][ T32] [ 301.217002][ T32] __schedule+0x1585/0x5340 [ 301.221545][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.233172][ T52] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 301.241283][ T52] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 301.257589][ T32] ? __lock_acquire+0x146e/0x2cf0 [ 301.263671][ T52] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 301.271837][ T32] ? __pfx___schedule+0x10/0x10 [ 301.276753][ T32] ? schedule+0x90/0x360 [ 301.281311][ T32] schedule+0x164/0x360 [ 301.285523][ T32] io_schedule+0x7f/0xd0 [ 301.285679][ T52] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 301.297301][ T32] folio_wait_bit_common+0x6d8/0xbc0 [ 301.302639][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 301.308715][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 301.314625][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.321912][ T32] ? __filemap_get_folio_mpol+0x81/0xb00 [ 301.327613][ T32] __filemap_get_folio_mpol+0x13e/0xb00 [ 301.333258][ T32] truncate_inode_pages_range+0x48b/0xe30 [ 301.339688][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.345741][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.351409][ T32] ? stack_depot_save_flags+0x33/0x810 [ 301.360680][ T32] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 301.403949][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.409613][ T32] ? __lock_acquire+0x6b5/0x2cf0 [ 301.473047][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.504190][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.509849][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 301.522888][ T32] evict+0x631/0xb10 [ 301.527046][ T32] ? __pfx_evict+0x10/0x10 [ 301.542957][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.548624][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 301.554335][ T32] evict_inodes+0x75a/0x7f0 [ 301.558844][ T32] ? __pfx_evict_inodes+0x10/0x10 [ 301.603033][ T32] generic_shutdown_super+0xaa/0x2d0 [ 301.608367][ T32] kill_block_super+0x44/0x90 [ 301.643843][ T32] deactivate_locked_super+0xbc/0x130 [ 301.649287][ T32] cleanup_mnt+0x437/0x4d0 [ 301.664068][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 301.669300][ T32] task_work_run+0x1d9/0x270 [ 301.693015][ T32] ? __pfx_task_work_run+0x10/0x10 [ 301.698152][ T32] exit_to_user_mode_loop+0xed/0x480 [ 301.713325][ T32] ? rcu_is_watching+0x15/0xb0 [ 301.718122][ T32] do_syscall_64+0x32d/0xf80 [ 301.722722][ T32] ? trace_irq_disable+0x3b/0x150 [ 301.732680][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.757921][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.764742][ T32] RIP: 0033:0x7fa4f759d897 [ 301.769159][ T32] RSP: 002b:00007ffc064c4048 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 301.792975][ T32] RAX: 0000000000000000 RBX: 00007fa4f7631ef0 RCX: 00007fa4f759d897 [ 301.800966][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffc064c4100 [ 301.815788][ T32] RBP: 00007ffc064c4100 R08: 00007ffc064c5100 R09: 00000000ffffffff [ 301.824031][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffc064c5190 [ 301.836633][ T32] R13: 00007fa4f7631ef0 R14: 0000000000021a5c R15: 00007ffc064c51d0 [ 301.845108][ T32] [ 301.870690][ T32] [ 301.870690][ T32] Showing all locks held in the system: [ 301.907448][ T32] 1 lock held by khungtaskd/32: [ 301.912296][ T32] #0: ffffffff8e7602e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 301.925751][ T32] 2 locks held by getty/5575: [ 301.961731][ T32] #0: ffff888036b380a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 301.992967][ T32] #1: ffffc9000331e2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 302.012938][ T32] 1 lock held by syz-executor/5819: [ 302.018138][ T32] #0: ffff8880522740e0 (&type->s_umount_key#90){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 302.064343][ T32] 1 lock held by syz-executor/6687: [ 302.069549][ T32] 3 locks held by kworker/u8:14/8048: [ 302.092982][ T32] #0: ffff88813fe44148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 302.123009][ T32] #1: ffffc90003887c40 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 302.161636][ T32] #2: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 302.182044][ T32] 3 locks held by kworker/u8:17/8054: [ 302.240369][ T32] #0: ffff888031dc8948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 302.262936][ T32] #1: ffffc900037c7c40 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 302.302965][ T32] #2: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_verify_work+0x19/0x30 [ 302.312523][ T32] 2 locks held by syz-executor/8200: [ 302.373067][ T32] #0: ffffffff8f409888 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 302.398324][ T32] #1: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 302.413237][ T32] 2 locks held by syz-executor/8220: [ 302.418530][ T32] #0: ffffffff9011bec8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 302.468366][ T32] #1: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8a1/0x1be0 [ 302.479139][ T32] 1 lock held by syz.6.589/8442: [ 302.522936][ T32] 2 locks held by syz.1.593/8447: [ 302.527957][ T32] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 302.579440][ T32] #1: ffffffff8e766578 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2d0/0x770 [ 302.622942][ T32] 1 lock held by syz.2.591/8478: [ 302.627877][ T32] 1 lock held by syz.2.614/8531: [ 302.632820][ T32] 1 lock held by syz.7.618/8539: [ 302.643389][ T32] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 302.662940][ T32] 1 lock held by syz-executor/8545: [ 302.668138][ T32] #0: ffffffff8fbcc348 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x404/0x1ad0 [ 302.709142][ T32] [ 302.711471][ T32] ============================================= [ 302.711471][ T32] [ 302.732952][ T32] NMI backtrace for cpu 1 [ 302.732971][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 302.732997][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.733012][ T32] Call Trace: [ 302.733021][ T32] [ 302.733031][ T32] dump_stack_lvl+0xe8/0x150 [ 302.733071][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 302.733102][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 302.733139][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 302.733175][ T32] sys_info+0x135/0x170 [ 302.733201][ T32] watchdog+0xfd9/0x1030 [ 302.733248][ T32] ? watchdog+0x21a/0x1030 [ 302.733296][ T32] kthread+0x388/0x470 [ 302.733323][ T32] ? __pfx_watchdog+0x10/0x10 [ 302.733358][ T32] ? __pfx_kthread+0x10/0x10 [ 302.733384][ T32] ret_from_fork+0x51e/0xb90 [ 302.733421][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 302.733452][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 302.733483][ T32] ? __switch_to+0xc7d/0x1450 [ 302.733517][ T32] ? __pfx_kthread+0x10/0x10 [ 302.733542][ T32] ret_from_fork_asm+0x1a/0x30 [ 302.733601][ T32] [ 302.733610][ T32] Sending NMI from CPU 1 to CPUs 0: [ 302.849653][ C0] NMI backtrace for cpu 0 [ 302.849673][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 302.849701][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 302.849717][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 302.849762][ C0] Code: 8e 6d 02 e9 8e 22 63 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 43 3d 1c 00 fb f4 67 22 63 f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 302.849784][ C0] RSP: 0018:ffffffff8e407dc0 EFLAGS: 00000246 [ 302.849807][ C0] RAX: 00000000007ec539 RBX: ffffffff819a80ad RCX: 0000000080000001 [ 302.849826][ C0] RDX: 0000000000000001 RSI: ffffffff8def225c RDI: ffffffff8c27a880 [ 302.849844][ C0] RBP: ffffffff8e407eb0 R08: ffff8880b863395b R09: 1ffff110170c672b [ 302.849865][ C0] R10: dffffc0000000000 R11: ffffed10170c672c R12: ffffffff90117db0 [ 302.849885][ C0] R13: 1ffffffff1c929d8 R14: 0000000000000000 R15: 0000000000000000 [ 302.849906][ C0] FS: 0000000000000000(0000) GS:ffff888125467000(0000) knlGS:0000000000000000 [ 302.849927][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 302.849946][ C0] CR2: 00007f6cbf145000 CR3: 0000000078d73000 CR4: 0000000000350ef0 [ 302.849966][ C0] Call Trace: [ 302.849975][ C0] [ 302.849985][ C0] default_idle+0x9/0x20 [ 302.850011][ C0] default_idle_call+0x72/0xb0 [ 302.850039][ C0] do_idle+0x1bd/0x500 [ 302.850083][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 302.850116][ C0] ? lockdep_hardirqs_on+0x7a/0x110 [ 302.850161][ C0] ? __pfx_do_idle+0x10/0x10 [ 302.850206][ C0] cpu_startup_entry+0x43/0x60 [ 302.850245][ C0] rest_init+0x2de/0x300 [ 302.850277][ C0] start_kernel+0x385/0x3d0 [ 302.850316][ C0] x86_64_start_reservations+0x24/0x30 [ 302.850342][ C0] x86_64_start_kernel+0x143/0x1c0 [ 302.850368][ C0] common_startup_64+0x13e/0x147 [ 302.850405][ C0] [ 303.287287][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 303.294175][ T32] CPU: 1 UID: 0 PID: 32 Comm: khungtaskd Not tainted syzkaller #0 PREEMPT(full) [ 303.303279][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 303.313319][ T32] Call Trace: [ 303.316579][ T32] [ 303.319499][ T32] vpanic+0x56c/0xa60 [ 303.323494][ T32] ? __pfx___schedule+0x10/0x10 [ 303.328369][ T32] ? __pfx_vpanic+0x10/0x10 [ 303.332867][ T32] ? __pfx_console_unlock+0x10/0x10 [ 303.338072][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.343704][ T32] panic+0xc5/0xd0 [ 303.347420][ T32] ? __pfx_panic+0x10/0x10 [ 303.351829][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.357452][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 303.362820][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.368440][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 303.374592][ T32] watchdog+0x1023/0x1030 [ 303.378928][ T32] ? watchdog+0x21a/0x1030 [ 303.383356][ T32] kthread+0x388/0x470 [ 303.387421][ T32] ? __pfx_watchdog+0x10/0x10 [ 303.392094][ T32] ? __pfx_kthread+0x10/0x10 [ 303.396846][ T32] ret_from_fork+0x51e/0xb90 [ 303.401436][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 303.406541][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.412166][ T32] ? __switch_to+0xc7d/0x1450 [ 303.416858][ T32] ? __pfx_kthread+0x10/0x10 [ 303.421441][ T32] ret_from_fork_asm+0x1a/0x30 [ 303.426219][ T32] [ 303.429512][ T32] Kernel Offset: disabled [ 303.433829][ T32] Rebooting in 86400 seconds..