last executing test programs: 3m44.328128697s ago: executing program 1 (id=120): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0xcc, &(0x7f0000000000)={{0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x809}, {0xa, 0x8, 0x0, @empty}, 0x2, {[0x0, 0x1, 0xfffffffe, 0x0, 0xffffffff, 0x8]}}, 0x5c) setsockopt$MRT6_ADD_MFC_PROXY(r0, 0x29, 0xd2, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') getdents(r1, 0x0, 0x48) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r3, 0xc4c85512, &(0x7f0000000280)={{0x6, 0x9}, 0x0, [0x0, 0x2, 0x40000000000, 0xfffffffffffffffe, 0xffffffefffffffff, 0x0, 0x4, 0x0, 0x1000200000000000, 0x4, 0x0, 0x0, 0xfffffeffbfffffff, 0x0, 0x0, 0x0, 0x3, 0x2, 0x3, 0x0, 0x0, 0x4000004, 0x0, 0x6, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100200000, 0x9, 0x6, 0x0, 0xfffffffffffffffe, 0x0, 0x9, 0x0, 0x10000, 0x1000, 0x0, 0x2, 0x0, 0x1, 0x8, 0x0, 0x0, 0x0, 0x4, 0x7fff, 0x101, 0x7, 0xfffc, 0x7785, 0x0, 0x4000000000000004, 0x4, 0x8, 0x7, 0xfffffffffffffffe, 0x1, 0x0, 0x3, 0x0, 0x80000002000, 0x8000000, 0x4, 0x0, 0xfffffffffffffffe, 0x0, 0x400, 0x0, 0xfffffffffffffffe, 0x0, 0xb, 0x0, 0x80000000000000, 0x0, 0xfffffffffffffffe, 0x2, 0x10001, 0xfffffffffffffffe, 0x0, 0x1, 0x0, 0x3, 0x0, 0x10000000000, 0xffffffffff7ffffd, 0xfffffffffffffffd, 0x0, 0x4, 0x0, 0x100, 0x0, 0xfffffffffffffffc, 0x0, 0x3, 0x0, 0x5, 0x100000000000, 0xffffffffffffffff, 0x3, 0x200007, 0x0, 0x7, 0xc0c3, 0x0, 0x0, 0x80000003, 0x0, 0x0, 0x0, 0x3, 0x2, 0x6, 0x0, 0x1, 0x6, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, 0x80]}) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0x24, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x7, 0xa}, {0x6, 0xf}}}, 0x24}}, 0x0) 3m44.186943823s ago: executing program 1 (id=122): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) write(r0, &(0x7f0000000340)="18000000010003", 0x7) 3m43.952521528s ago: executing program 1 (id=123): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_sctp_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x9, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, 0x0) mmap$binder(&(0x7f000023d000/0x2000)=nil, 0x2000, 0x1, 0x11, 0xffffffffffffffff, 0x6) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, &(0x7f00000000c0)={'fl512\x00', [0x4fa7, 0x105, 0x2, 0x10000421, 0x2000001, 0xcc7, 0x7ffffffe, 0x5c952398, 0x5, 0x3ff, 0x2, 0x300, 0x1, 0x1, 0x9, 0x0, 0x40400, 0x8, 0x48f3, 0x1ff, 0x80000089, 0xa, 0x1400000, 0x20001e54, 0xffffeadb, 0x3, 0x3d, 0x8, 0x4, 0x7ffffff, 0x485b]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x1, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, 0x0, 0x0) 3m42.853950201s ago: executing program 1 (id=125): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$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") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 3m41.418841385s ago: executing program 1 (id=130): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, 0x0, 0x0) connect$inet(r1, 0x0, 0x0) sendmmsg$inet(r1, 0x0, 0x0, 0x4000000) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, 0x0, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r2, 0x890b, &(0x7f00000007c0)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x6, @bcast, @bpq0, 0x5, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default]}) 3m37.961006638s ago: executing program 1 (id=135): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 3m37.226491288s ago: executing program 32 (id=135): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000005880)={0x0, 0x0, &(0x7f0000005840)={&(0x7f0000000000)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x1090}, 0x40080) 1m32.878920545s ago: executing program 3 (id=503): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, &(0x7f00000008c0)=0x2, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) 1m31.88479771s ago: executing program 3 (id=507): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x541b, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r3, 0x0, 0x0) r4 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r4, 0xffffffffffffffff, 0x0) 1m30.225205898s ago: executing program 3 (id=516): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[@ANYBLOB="1700000007000000c25e00000500000000200000", @ANYRES32, @ANYBLOB="0200"/15, @ANYRES32=r0, @ANYRES32, @ANYBLOB="01000000050000000100000000000000000000000000000000000000c2"], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca", 0x89}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e", 0x22}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"373ab6e870bf64ef25ad87deef94c3b7350df627ea76a6efbd6c33a19e5dde0b3718dac0c2b8e833beb9e0347000fc7332c43a3128856f23df4628fb1e54b1745094c19bc88c190192f58dda884b3296f7cd6373842bff61047e0697c9af6e9f62b88fd21621b527902efdae6efd3516c7e5a36f4aaa12cd1b3ac0686db46783f45fe6aa2515ab6996b4807b0d9575a9061a775ef515a40b97c34035e8e412b9200000001000000062a07ab97f50ff5deb8a5978611317016887694245b363252230bbe17ed0f591f935d8e4ae7563eeff2fdfad8a775f0a4b15f63f5c4851df9aef747ace240cec55ce1659c08d38714245835e15291c4973ade3b2006d8870a1d739eb8e7a284e23f660b2061e31a70627be4acb16ecbe8a4edde1c5397c761a2fe0690f5d580ebf35b8640441ddf47d1f67a5e2d892f14a4f88412ce3cc8ec4d0580729c8638502410837253d6ac316ee9c6a24eb5d83463ff9bdf81f31c12b04adec97fe1377d2f29067e5f6f48cc123f2c4c02afe60d224c7d974a63c1aa9b110d2187f18de3753b57c630eab26238e8201501a007da99f1d07f76c4da113859ab55792049a15c5d83051f41ae951912eb81154f2398a729b6d6c51d6850bddcd4b35b24996e4ec707d1a744dff58ea5030fcd6b46a468ac029f86be30c7c3d5708e3871fed2e63b9c3ad265350e87e9fc44696eadeecc1ff67e30b64be27f480180d26218d031380149bcc31bd712063e9c09ed5329a530800000025d79eb9d4491d82d2b7a3d7d0cf9286396fcb8c2ccf1655b3ba420c36c3fb88d788308e947cc15e0957a98a843911c954c2a2feccd60d0000da8330cd1de951bcd767cf211a241c882b8d5e608fc0e796afead2a7b05018b4ae6c034c4c4997868343a5d064838dd0aca0d21b429665a0a1b4fd17cd34e711cee01d2348dc5871cca7ab4e4924f6f4bc29e7dbfae6788549e600000000271cd7ddfabd45803a6d1145734a82b2b9a6a87c8e118629840a027fd3f8e5a6a5dccee1a480d6cd0402a64db2263b1a9de61848b1eb31b51189f4caa2fdf0c3a38275386522137fe573ec27693a337c324952480c9ae476a694010aa22095c6d8bfceb5e024cbc21d6c1d1b17fae63dc627a948c4eca7dfa3f8a5e628531472e00ed28f2d2b7fcf03b5ba1975fcc010482a08c7800b3c87587a9fea37402ffafcc9cabc16a123164765d10dafe323ce33f197af8a3cf57332dbbee3f263a16cb565b61690b5804341630437ad2277be4ff82d1aa32c15b0cf99c88c7bca0ecf47a3be490bf6079f19acdf9a71f636fff612167c849b5c149cb32d8dd98d2aa8bb0606a1214fc1f0da04476cd8c3c056ec88eefca4d331ecbd5416c356466202cb97ddfc320b7594d5ab2e9102d549ffa72300"}) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r2, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r5, 0xae80, 0x0) 1m28.427442282s ago: executing program 3 (id=520): syz_mount_image$ext4(&(0x7f0000000080)='ext3\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f00000004c0)={[{@noload}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@bh}, {@noload}, {@data_err_ignore}, {@usrjquota}]}, 0xff, 0x44d, &(0x7f0000000900)="$eJzs3MtvG8UfAPDvrp30/Ut+UB4tLQQKouKRNOnzwKUIJA4gIcGhiFNI0qrUbaAJEq0qKBzKEVXijjgi8RdwggsCTkhc4Y4qVaiXFiQko13vpsa107hx6rb+fKRNZrzjzHx3d+zZGTsBDKyx7EcSsTkifouIkUb2vwXGGr+uXTk389eVczNJ1Otv/Jnk5a5eOTdTFi2ft6mRqdeL/Lo29V54O2K6Vps7XeQnFk++N7Fw5uzzx09OH5s7Nndq6tChfXt3Dh+Y2t+TOLO4rm7/aH7HtlfeuvjazJGL7/z0TdbezcX+5jh6ZaxxdNt6qteV9dmWpnRS7WND6EolIrLTNZT3/5GoxIalfSPx8qd9bRywpur1er3d+3PhfB24hyXR7xYA/VG+0Wf3v+V2m4Yed4TLhyPeP9iI/1qxNfZUIy3KDLXc3/bSWEQcOf/3l9kWazQPAQDQ7LvDEfFcu/FfGg82lftfsYYyGhH/j4j7IuL+iNgaEQ9E5GUfioiHu6y/dYXkxvFPeumWAluhbPz3QrG2tTT++6eex18YrRS5LXn8Q8nR47W5PcUx2R1D67L85DJ1fP/Sr5932tc8/su2rP5yLNiQXqq2TNDNTi9OrzLsJZc/idhebYk/l0S5jJNExLaI2N7VX75+h3H8ma93dCp18/iX0YN1pvpXEU83zv/5aIm/lHRcn5w8eGBq/8T6qM3tmSivihv9/MuF1zvVv6r4eyA7/xtbr//cUvyjyfqIhTNnT+TrtQvd13Hh98863tPc6vU/nLyZp4eLxz6cXlw8PRkxnLx64+NT159b5svyWfy7d7WLP81f48oj8UhEZBfxzoh4NCIeK9r+eEQ8ERG7lon/xxeffLf7+JeZle+hLP7Zm53/aD7/3ScqJ374tvv4S9n535endhePrOT1b6UNXM2xAwAAgLtFmn8GPknHl9JpOj7e+Az/1tiY1uYXFp89Ov/BqdnGZ+VHYygtZ7pGmuZDJ4u54TI/1ZLfW8wbf1HZkOfHZ+Zrs/0OHgbcpg79P/NHpd+tA9ac72vB4NL/YXDp/zC49H8YXPo/DK52/f/jPrQDuP28/8Pg0v9hcOn/MLj0fxhIHb8bn67qK/8S93wi0u6fVY07pPF3U6K64n9mcYuJdW139fuVCQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoDf+DQAA//9X4u4v") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000100)='/sys/kernel/debug/binder/stats\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000900)={{}, &(0x7f0000000880), &(0x7f00000008c0)}, 0x20) writev(0xffffffffffffffff, &(0x7f0000000300)=[{0x0}], 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) mount$overlay(0x0, &(0x7f0000000580)='./file0\x00', &(0x7f0000000b80), 0x4008, &(0x7f00000001c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) 1m26.555945958s ago: executing program 3 (id=534): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000009c0)={0xffffffffffffffff, 0xffffffffffffffff}) pwrite64(r0, &(0x7f00000006c0)="49de92a82bde78fb2f28969f3be6f8882273e3a86df96631c5824b796389a3e6316bf472b8e3d3ca007ff3413b8ae24eeae251006c87816508ea66afbee653b70c30", 0x42, 0x200) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000100)={'wlan1\x00', @random="0a0000000100"}) 1m22.763586096s ago: executing program 3 (id=532): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 1m22.42435172s ago: executing program 33 (id=532): r0 = socket(0x200000000000011, 0x4000000000080002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$rfkill(0xffffffffffffff9c, 0x0, 0x40900, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f0000001100)={0x11, 0x3, r3, 0x1, 0x0, 0x6, @multicast}, 0x14) r4 = dup2(r0, r0) sendmmsg$unix(r4, &(0x7f0000008380), 0x400000000000174, 0x4008890) 11.686609687s ago: executing program 4 (id=789): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) close(r5) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_type(r6, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r7, &(0x7f0000000280), 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 10.653573376s ago: executing program 4 (id=793): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffffffffe, 0x4031, 0xffffffffffffffff, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000080)='2', 0x1}], 0x1) 9.053506515s ago: executing program 2 (id=796): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 8.807067887s ago: executing program 5 (id=798): socket(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000440)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key(&(0x7f0000000000)='rxrpc\x00', &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) 8.723959793s ago: executing program 2 (id=799): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000480)=ANY=[], 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'geneve1\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0xd, &(0x7f0000000380)=@req={0xfffff741, 0x10, 0xa96, 0x2}, 0x10) unshare(0x20060400) r4 = socket$packet(0x11, 0x2, 0x300) fsync(r4) r5 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x6) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x108) mkdirat(r6, 0x0, 0x181) openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) prctl$PR_MCE_KILL(0x21, 0x1, 0x1) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_ECN={0x8, 0x6, 0x1}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x51}, 0x0) 8.280064375s ago: executing program 5 (id=800): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101) mount$fuse(0x0, 0x0, 0x0, 0x2b18094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) chdir(&(0x7f0000000140)='./file1\x00') r0 = open(&(0x7f0000000000)='.\x00', 0x0, 0x12d) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={0xffffffffffffffff, &(0x7f0000000180)='2', 0x0, 0x2}, 0x20) ioctl$AUTOFS_IOC_PROTOSUBVER(r0, 0x40049366, &(0x7f0000000180)) 8.092115633s ago: executing program 5 (id=802): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6e60, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 6.964285482s ago: executing program 5 (id=804): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) 6.764288441s ago: executing program 6 (id=805): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) r0 = socket$inet(0x2b, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r1, 0x400000000000003a, 0x1, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) splice(r0, 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0) 6.639636114s ago: executing program 0 (id=806): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x193) msgsnd(r3, &(0x7f0000000080)=ANY=[], 0x8, 0x0) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/168) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 5.569447937s ago: executing program 0 (id=807): ioctl$KVM_GET_EMULATED_CPUID(0xffffffffffffffff, 0xc008ae09, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone3(&(0x7f00000005c0)={0x280a00300, 0x0, 0x0, 0x0, {0x14}, 0x0, 0x0, 0x0, 0x0, 0x0, {r0}}, 0x58) 5.47032783s ago: executing program 4 (id=808): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="0f198d5aa5caa1c55b84b414797cbdd4e8c576a921a070fc828060506683fd1106a961ac55b5b8ea3342ca7de5559ca2c14e05e42aed8ba14b2c78cb540f71a817d80fbf1945a046ebda494a8048a106a4d49d7f214735ada53397db3b203885ce39ee48d69465935eade21ce36e61826c52c82f038341d9bab5687c740ed3c18897094e7e1391eb84a4052e03c0c7c39ae86d454938f65e284620b99481c33d9f5e5b7a6c0d7548723f55b213c76be37f40c850c38e265758ebd8238257a146d6eced16fd658a784c928fea7a841db1a7fd6520442dae5fc0d3a3d3a5f16fcf6fe4f062ecdad7d0f3c6cd339339533c0ef28ad1e2729907094c3de93c1b1b00ad6df89507000000fb7565d3a8e9eaea020ed173c2179fb03e0944460989240a689c7fe795d310be4e7a6b778a903280dbf426b39c3603c49049980767e31edb997f59785184cbd7b9070400000073c745f71db0906cb51780f908fa61634af8ac85d9f04f3dff0a948e81cd3229a59aaeb00995358155343e3239588a0383e4df109d5ca24276d0d83a27d0e9bf681c1bbea12a6f3c20ad50f63430333bb327eb6ae32fe8809065bce26d2dc2fbb2b48d404637d61fd86852e0e1b6ccc6f75b1107aaa5f60ef45f94e953b3f213c3cb4ca4c716565078c666f84e1a99bb4cb5c7190648132f6ff1f6cb79b93f20752753c938da6241607a742361d995188b23cb4b8269e98e822585695962620673433748e476f7cc3e37db88639c525ff3a502c82c283b00aecfe7734ab369e1ed7c75e27a5a333641817baa3ea37844e20e6266c5095abf9d47ca5f8ad93f1a4d8795daec222ada00d65cf91425fae7939ceaa8d94ec1ab5082e1d251c27b3132119b350e81771f3733be232ffb90c03a818bf458aac3314007c3e35d5e4bed6b897608b01e7e26a54433e5f5c74a2ee3c2fc50067be05a677f122b7dba7010830b879a41b579d44158fb89ea05761d2d369853bea84dfb8081ed7b891dcb3bb3361534fdc5252e4964aed936ad2838e7af14fc65c7c1c6d44c6256f2462ae83cfd6a6b2651da607fe79d345e5080098e9e6e7482cc5c267e00d8d09dcde70b60fe6220fe9530547201664db91cf1885ecc2f106b66cd99131523c99f6102ddd7403791b3a7ac59b256cc4c938fe01740ae4f19b5204ca305b1666b0c2a7e5015d6d530995843adfbac3954306d4cd82257d4d2c3283d45dbae43548fed9879328f114f7c8238ac955391b24614d91be1701ae07c170a9c299fcf3d0ac4cea07e88fbf66b697883af17a06ac3f9954eb2fbd20f101802cd023fc48c5d464c16059cc9dce8558c5322ac7612db0e2725427628c2c41a21f0d2f3962e32f710bf9e216ff1694e8d88c8a81328744b36d9ef9f08c0ea3ccd4f8729e2f00a048162834a95", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) 5.227389396s ago: executing program 0 (id=809): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 5.205685515s ago: executing program 4 (id=810): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x0, &(0x7f00000005c0), 0x8, 0x34, 0x8, 0x8, &(0x7f0000000640)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000011c0)=ANY=[], 0x50) sendmsg$ETHTOOL_MSG_EEE_GET(0xffffffffffffffff, &(0x7f00000013c0)={0x0, 0x0, &(0x7f0000001380)={&(0x7f0000001400)={0x14, 0x0, 0x200, 0x70bd28, 0x8}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x40448a0) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001040)=ANY=[], 0x18}, 0x1, 0x0, 0x0, 0x8d0}, 0x4040800) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000f80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="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"], 0x340}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x80000000, @empty, 0x7}, 0x1c, &(0x7f0000000f00)=[{&(0x7f0000000500)='q', 0x1}, {&(0x7f0000000540)}, {&(0x7f0000000600)="58b327f21946add0e0c31b173119ac7b4ceda64bbfbc8159462a8686f4303aeee1d7c9b54c4bd660fe192582950eb09a8bae632fb4e7313e3828773c09fec9b010373ca7be0ccc91233fffcfe03f287a50f2b4a970278097aed06e61a0f2da47b0bd02fcb45bf35e78c15cc4c5d6d163a6eaf921d8afc7d8376e847f403535371a24ce2a19c3898aca", 0x89}, {&(0x7f00000006c0)}, {&(0x7f0000000700)="e59c889c8be9e17c21882a76c6907239d44f6a0efb65359c6a8e5ede789aa995461e", 0x22}, {&(0x7f0000000e80)="0e9129a2bae0d093a9c5091f0926391174e5aff7420b47b0cf1a8bbd7bb239460a6b26eb4f86fa48acdf54294bee3567a8ff0ed4f912a1aa059d62286db3e045dc31db292f5ab26a8f1466d90f0f98ff1a0e2b1018604ef19bc70a", 0x5b}], 0x6}}], 0x2, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) ioctl$KVM_SET_SREGS(0xffffffffffffffff, 0x4138ae84, &(0x7f00000001c0)={{0xeeee8000, 0x4, 0x3, 0xf1, 0x5, 0xfa, 0xd4, 0xd4, 0x0, 0x4, 0x7, 0x4f}, {0x5000, 0x2, 0xd, 0x9, 0x8, 0x3, 0x6, 0xb, 0x5, 0xf, 0x3, 0xc0}, {0xffff1000, 0xeeef0000, 0xb, 0x1, 0x2, 0x7, 0x4, 0x1, 0x81, 0x0, 0x6, 0x5}, {0xeeee8000, 0x2000, 0x8, 0xf8, 0x3, 0x46, 0x2, 0xd, 0x6, 0x0, 0x8, 0x1}, {0x100000, 0x4000, 0x9, 0x9, 0x3, 0x9, 0xd, 0x6, 0x5, 0x9, 0xc, 0x4b}, {0x6000, 0x0, 0x4, 0x6, 0x3, 0x7d, 0x1, 0xff, 0x4, 0x90, 0x1, 0xfc}, {0x8000000, 0x4000, 0x0, 0x9d, 0x3, 0x0, 0x0, 0xb, 0x5, 0x7, 0x9, 0xf8}, {0xf7f63004, 0x8000000, 0xf, 0x5, 0x28, 0x3, 0xa, 0x9, 0x54, 0x1, 0x2, 0x7}, {0xdddd1000, 0x5}, {0x4, 0x9}, 0x40030000, 0x0, 0x80a0000, 0x300, 0x1, 0xa901, 0xe6e70c00, [0x3, 0x401, 0x7, 0xc5]}) ioctl$KVM_SET_LAPIC(0xffffffffffffffff, 0x4400ae8f, &(0x7f0000000740)={"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"}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3be", 0x6) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4.973251856s ago: executing program 0 (id=811): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffc, '\x00', 0x0, 0x0}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) socket$xdp(0x2c, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x723080, 0x0) syz_usb_connect$uac1(0x3, 0xdc, &(0x7f00000017c0)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902ca0003010070000904000000010100000a24010800000201020d24060000030800000000000000240803960c03112d9cd2ce0c240208000103000000ff000924060506020100000924030003030005490c240206", @ANYRES8=r0, @ANYBLOB="07b0cf7e2c89cc"], 0x0) 4.832271584s ago: executing program 6 (id=812): sendmsg$IPVS_CMD_SET_INFO(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40081c4}, 0x44000) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000980)=ANY=[@ANYRESHEX], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000080)={0x0, 0x2, 0x3, 0x0, 0xad7}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="2000000040000701feffffff00000000017c000004004280040001800400028016a31fdf7ce10161d410ff422b8e2fbb5087050c7166e190fcfe13dbf82a57a82fefc92afd799452a689e3a5505df1e8cf0c701ad72839279467c82e3fe76ffc80600202809d4dcd4cc067db037194463cde68290cc1221d89661e517136f46f8a5ac4d4f3c149b0088309c4099b3eff05da02de1357713389"], 0x20}}, 0xc000) r1 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$IPVS_CMD_GET_DEST(r0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10805}, 0x44049) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 4.511135267s ago: executing program 4 (id=813): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r0, 0xc0285628, &(0x7f0000000080)={0x2, @win={{0xae, 0x0, 0x4}, 0x0, 0x0, &(0x7f0000000040)={{0x0, 0x0, 0x0, 0x3fc}}, 0x0, 0x0, 0x40}}) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="63429860415b7ac7", 0x8) r5 = accept(r1, 0x0, 0x0) recvmsg(r5, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{0x0}, {&(0x7f000000b500)=""/153, 0x99}], 0x2, 0x0, 0x0, 0x1000000}, 0x0) 4.476086503s ago: executing program 6 (id=814): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000001c0)=[@text16={0x10, 0x0}], 0x1, 0x4, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000100)=[@text64={0x40, 0x0}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) ioctl$KVM_SET_IRQCHIP(r1, 0x8208ae63, &(0x7f0000000380)={0x2, 0x0, @ioapic={0xd000, 0x9, 0x10001, 0xfffffffe, 0x0, [{0x2, 0x4, 0x87, '\x00', 0x8}, {0x9, 0x8, 0x6, '\x00', 0xb}, {0xff, 0x7f, 0xd6, '\x00', 0x67}, {0xff, 0x5, 0x3, '\x00', 0xf}, {0x5, 0x9, 0xc, '\x00', 0xfb}, {0x0, 0x4, 0x54, '\x00', 0xff}, {0x71, 0xd5, 0xf1, '\x00', 0x7f}, {0x3, 0x4, 0xc}, {0x7f, 0x5, 0x4, '\x00', 0x8}, {0xd7, 0xd, 0xcc, '\x00', 0xff}, {0x0, 0x3, 0x80, '\x00', 0x9c}, {0xff, 0x1, 0xfe, '\x00', 0xc}, {0xfe, 0x47, 0x26}, {0xcf, 0x3, 0x1, '\x00', 0x86}, {0xf, 0xee, 0x7, '\x00', 0x3}, {0x39, 0x2, 0x6, '\x00', 0xb}, {0x9, 0x6, 0x2, '\x00', 0x8}, {0x5, 0xc, 0x5, '\x00', 0xc}, {0x7, 0x1, 0x47, '\x00', 0xc2}, {0x8, 0x80, 0xf, '\x00', 0x7f}, {0x1, 0xc, 0x80, '\x00', 0x7f}, {0x10, 0x6, 0x3, '\x00', 0x66}, {0x1, 0x23, 0xf3, '\x00', 0x4}, {0x7, 0x6, 0x4, '\x00', 0x2}]}}) 3.444128998s ago: executing program 5 (id=815): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) io_uring_setup(0x6e60, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$binder_debug(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x3) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(0x0, 0xfffffffffffffffa, 0x0) read$msr(r1, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x84}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) 3.443903295s ago: executing program 4 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x541b, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r2, 0x0, 0x0) r3 = io_uring_setup(0xfc6, &(0x7f0000000180)) close_range(r3, 0xffffffffffffffff, 0x0) 2.338471927s ago: executing program 5 (id=817): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1, 0x0) write(r0, &(0x7f0000000100)="673aaa44fa73c2d18f929b3e9c4f093461835123dc2371a7ef12576b0192d51da57ac78a1ee9c176c58e8b5363a4d075e8e513", 0x33) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000000)={0x10001, 0x6, 0x1, 0x11, 0xb7, "1c8049689ddb51559c9c411085242fafeec915", 0x0, 0x7ff}) 2.128258624s ago: executing program 6 (id=818): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = msgget$private(0x0, 0x193) msgctl$IPC_STAT(r3, 0x2, &(0x7f0000000300)=""/168) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000), 0xc) syz_open_dev$vcsa(&(0x7f0000000300), 0x2, 0x40000) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) 1.106201853s ago: executing program 6 (id=819): r0 = socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x7a, &(0x7f0000000340)={r2, @in6={{0xa, 0x3, 0x3, @mcast1}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000400)={r2, 0x1}, 0x8) 917.015618ms ago: executing program 0 (id=820): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) setsockopt$SO_RDS_TRANSPORT(r0, 0x114, 0x8, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f00006dbffc), 0x4) bind$inet(r0, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) sendmsg$xdp(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000200)="0000000000aa303e97380e90231bdbdaf6a4bd866226b7cdb7c26858c4e4fd703be2f51ed6ddc4a47116ec2db75c7042a22491af0ffea4174a9de3350c0a498396b28c7d1784d04aa38922721cb7816094cb82950fd012efd26d", 0x5a}, {&(0x7f0000000900)="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", 0x3f1}, {&(0x7f00000003c0)="128b9306006d4810e5ac5040ad9201847839fc378469d5765b9cc241840896c1498194a7197b45d74a8532b82037b02c9e6045c361eb", 0x36}], 0x3}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000001600)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x0) recvmmsg(r0, &(0x7f0000003a00)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x60000100, 0x0) 886.412445ms ago: executing program 2 (id=821): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x78}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f0000000500)={@broadcast, @broadcast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) 788.338233ms ago: executing program 6 (id=822): ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, 0x0) ioctl$IOCTL_VMCI_CTX_SET_CPT_STATE(0xffffffffffffffff, 0x7b2, 0x0) pipe2(&(0x7f0000001440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$inet(0x2b, 0x801, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt(r2, 0x400000000000003a, 0x1, 0x0, 0xfffffffffffffffe) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) splice(r1, 0x0, r0, 0x0, 0x3, 0x0) 651.1219ms ago: executing program 2 (id=823): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) mkdir(&(0x7f00000003c0)='./file0\x00', 0x10) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), 0x802, &(0x7f00000000c0)=ANY=[@ANYBLOB='huge=always,huge=within_size,nr_blocks=', @ANYRESDEC=r0]) chdir(&(0x7f0000000140)='./file0\x00') r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) ftruncate(r1, 0x8008976) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000000), 0x208e24b) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 473.224907ms ago: executing program 0 (id=824): syz_emit_ethernet(0x56, &(0x7f0000000040)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x20, 0x6, 0x1, @dev={0xfe, 0x80, '\x00', 0x23}, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x2, 0x0, 0x0, 0x0, {[@timestamp={0x8, 0xa, 0xc5833c80, 0x7}]}}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001cc0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8844}, 0x1) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000740)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=ANY=[], 0x188}}], 0x1, 0x810) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r3 = accept4(r2, 0x0, 0x0, 0x800) pwritev(0xffffffffffffffff, &(0x7f0000000d40)=[{&(0x7f0000000500)="50981a1f6d047db18cc91ee86ac4cfd7d07f078e2aaaa1eb956d2de729b2ecef010d49211ee022f211a069044ace6611443a36875edd0d27ad50c8c653d1fb2dfac7091bddeb0824db8841f5774babcc0cc9ec4beccbbd91a7ca72d0b60bdb9855239b5bbff1c7215bc682d6020238b79e56d9f50e5fd3c75bdaac15f068e5d41629b13f194340e6f014862516b96eda8a589306e95ad93e9b9a80f8c087555e549fbaee0096262bc0d8a993b2", 0xad}, {&(0x7f0000000600)="7164245da20fccdee39bb8f4f2055dfa97e2710832cd4a27793e79bc409cb5c38a8ad35c9ff44014744d4fab508d57d9fa7e1c831f7e576883c122358fec103da82522517d9243dfe9f77e8f69f4501e6070573756b0538bca622f5b51783625ac3ccea6782360267389f674cbf7e7c1d310bc9fb645bc7f20518e7ba5807ce4e54b1bd58f058215932892ed0a8a831b5441f58f6a2b63a2763923c51ae9b87c58417173a18b24e341ea0f0fc3", 0xad}, {&(0x7f0000002840)="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", 0xdf9}, {&(0x7f00000002c0)="fb4a738b8fff03179d36d97a7e768c605c5a276efb8604f121d8c3432483ec477b13316313b6ebd165904c8e245bcd4fda069923032292004d8efce529dab99fa5d682b52473829f561f11ac11a428eab9985d916240ec7d21a11926bc5353ea29c9ebd9aed10aa3403a5e35a1116b7b", 0x70}, {&(0x7f0000000880)="b8e4d28ec970bdf146d717bed673a03be982338e021e1058d00776227b342db7671f5a0a2d75e9e5a7fbd4ecc62684a793ab69989c8836473cf7744072ef0bd03758c8c6cb740f2c8abc1b69715c98796adbec917f572e32a4f6977abd032183f498075de23e212c05e37d608df3d5ca7f4b7e08f974d4f12d6c3b6c90c44b9355f52cf1e5a88049a7ab8952d5232e812f6cf20679d54d51950da095fbacb3365e30f62093a40e3c28728a31fb2de8702c2d6995430d6a2b2f3562f77256", 0xbe}, {&(0x7f0000000780)="5c06f00294cc721081e366131c0fcd179066c58c4951ef284a51dfc59d67e247edf1b4fc93718f3d1d6f3bd71ab442cb6b6ebc9f4bb562848ec35bfd1a443267ca11db6125b298f33c1fc9ab", 0x4c}, {&(0x7f0000000980)="65b426e7fb8932534948519e6381e5e369fc65a3128f6056c7d77c618f08eae1cd2944eee2ab50617c99c5c7f640757950d3ec8b33b136a5c8a541bcacab7a9901", 0x41}, {&(0x7f0000000ec0)="6598c590eb73ec1ac1cce9664c5dbc3b6d9685d587ebdf52f29b7cad419f7bb403de35224456e9f506a3ba418e022d95925faf708865169a6ba6250d6275cd6a87f81062b11c2cf0440cf3fb94fa8244fb33299dea4c69eda426e3f7475b57155062b609f56046302a44bfc56e32841c66b772326d2394596778149d4b1c9c788b1d70d0485447b3b2c683f8cdf37f5d5fcf837d48d671dbad0b918fcbc5633f56e4329d259d716c5f1fc663bbd106e9e3962ab76b0619d5329b39605552c5ed6e56d92fa515eb4bbb20defc655176a41edc1a4dc32b950579b8832ad92cc97914467ed3c7b24cf13032503e7d4a7332a0", 0xf1}, {&(0x7f0000000e00)="bf83903af3912b25320771861a97d9099887b5133b772fd4b99cb75c05cc6056c51d5bb95835f9b0158c4cfee49435eee968d62cc9e3f2170f885492ef045fe78a057d2f5d22250b0d1832e4e7d9caf59cb596b09bdb792e92381b57fa01c34b662c00464d755260824c4afcf590616c92c6de993cbafa1a", 0x78}, {&(0x7f0000000c40)}], 0xa, 0xfffffffd, 0x2000008) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x3000, 0x2000, &(0x7f0000003000/0x2000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@text32={0x20, &(0x7f00000000c0)="650f340f3566b842000f00d8b805000000b9a00000000f01c13e0f070fde460b0f0130670f01c2f2360f217a0f07", 0x2e}], 0x1, 0x11, 0x0, 0x0) pwritev(0xffffffffffffffff, &(0x7f0000000b00)=[{&(0x7f0000001880)="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", 0xf91}], 0x1, 0x1, 0x2) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000180)=[@text64={0x40, 0x0}], 0x1, 0x18, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 255.818764ms ago: executing program 2 (id=825): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(0xffffffffffffffff, 0xc004500a, &(0x7f0000000240)=0x3) ioctl$SNDCTL_DSP_CHANNELS(0xffffffffffffffff, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(0xffffffffffffffff, 0xc0045002, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setattr(0x0, 0x0, 0x0) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f0000000000)={[0x36, 0xb, 0x80000006, 0x180, 0x7fffffff, 0x10, 0xf1, 0x50, 0x7fffffffffffe, 0x5, 0x6, 0x9, 0x8000000000000000, 0x10000000f4a, 0x100000000, 0xbdb], 0x6000, 0x4000}) ioctl$VIDIOC_SUBDEV_ENUM_FRAME_SIZE(0xffffffffffffffff, 0xc040564a, &(0x7f0000000200)={0x0, 0x0, 0x300f, 0x2}) r0 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) ioctl$KVM_RUN(r0, 0xae80, 0x0) syz_emit_ethernet(0x42, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008ff4b0000340000000000019078ac1e0001ac1414"], 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="6400000002060103000000000000000000000000050001000700000016000300686173683a6e65742c706f72742c6e65740000000900020073797a30000000000500040000000000050005000a00000014000780050015000200000008001240"], 0x64}}, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) 0s ago: executing program 2 (id=826): socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@nat={'nat\x00', 0x670, 0x5, 0x418, 0x208, 0x208, 0xffffffff, 0x2b0, 0x168, 0x380, 0x380, 0xffffffff, 0x380, 0x380, 0x5, 0x0, {[{{@ip={@rand_addr=0x64010104, @initdev={0xac, 0x1e, 0x1, 0x0}, 0xff0000ff, 0xffffff00, 'veth1_to_bridge\x00', 'wg1\x00', {}, {0xff}, 0x16}, 0x0, 0x130, 0x168, 0x48, {}, [@common=@unspec=@string={{0xc0}, {0x5, 0xc, 'kmp\x00', "48ae43e4c6b2bfd892aa7400051624fa86999b13d39b99407a9b7abe75a728baa18da576811985de44110b8602025e1298ea55f1c5087ab16f67b18ca90ac68f0b3d6a068f727f7d23fa5fad26a59a5da2651212bdf9d29248ae63e2349b2470915eea2c39ade5129ff26b6fe772493180cfda2cdd49412e9469d85abdb467ba", 0x79, 0x2, {0x1}}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0xf, @local, @initdev={0xac, 0x1e, 0x0, 0x0}, @port=0x4e22, @port=0x4e24}}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0xfffc, 0xd, 0x1}, {0x2, 0x4, 0x3}, 0x1000, 0x100}}}, {{@ip={@multicast2, @broadcast, 0xff, 0x0, 'virt_wifi0\x00', 'batadv_slave_1\x00', {}, {0xff}}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x2, @loopback, @empty, @icmp_id=0x68, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@icmp={{0x28}, {0x4, "1542", 0x1}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x10, @rand_addr, @dev={0xac, 0x14, 0x14, 0x2a}, @icmp_id, @icmp_id}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$INCFS_IOC_FILL_BLOCKS(0xffffffffffffffff, 0x80106720, 0x0) r4 = openat$vcs(0xffffffffffffff9c, &(0x7f0000000dc0), 0x100, 0x0) sendmsg$NFT_MSG_GETSETELEM(r4, 0x0, 0x805) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) syz_open_dev$dvb_dvr(&(0x7f0000000240), 0x0, 0x100) mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x1816c1, 0x1ff) execve(&(0x7f0000000380)='./file1\x00', 0x0, 0xfffffffffffffffe) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_type(r5, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r6, &(0x7f0000000280), 0x9) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x14, 0x2a, 0x107, 0xfffffffc, 0x0, {0x5, 0x7c}}, 0x14}, 0x1, 0x0, 0x0, 0x488c4}, 0xc000) kernel console output (not intermixed with test programs): ive interface with an up link [ 87.049296][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.058128][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.066173][ T5850] Bluetooth: hci3: command tx timeout [ 87.092808][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.118220][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.126071][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.152482][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.168170][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.197137][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.207923][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.214879][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.240893][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.253422][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.260646][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.286600][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.314865][ T5855] team0: Port device team_slave_0 added [ 87.366403][ T5855] team0: Port device team_slave_1 added [ 87.390121][ T5854] team0: Port device team_slave_0 added [ 87.403879][ T5853] team0: Port device team_slave_0 added [ 87.441984][ T5854] team0: Port device team_slave_1 added [ 87.465468][ T5853] team0: Port device team_slave_1 added [ 87.472761][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.479952][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.505926][ T5855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.571129][ T5855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.578175][ T5855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.604114][ T5855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.649633][ T5844] hsr_slave_0: entered promiscuous mode [ 87.656959][ T5844] hsr_slave_1: entered promiscuous mode [ 87.693098][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.700090][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.726399][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.744713][ T5843] hsr_slave_0: entered promiscuous mode [ 87.752300][ T5843] hsr_slave_1: entered promiscuous mode [ 87.759091][ T5843] debugfs: 'hsr0' already exists in 'hsr' [ 87.764905][ T5843] Cannot create hsr debugfs directory [ 87.773745][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.780849][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.807058][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.821818][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.828944][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.854899][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.867672][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.874619][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 87.900638][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.064187][ T5855] hsr_slave_0: entered promiscuous mode [ 88.071255][ T5855] hsr_slave_1: entered promiscuous mode [ 88.078084][ T5855] debugfs: 'hsr0' already exists in 'hsr' [ 88.083846][ T5855] Cannot create hsr debugfs directory [ 88.218118][ T5854] hsr_slave_0: entered promiscuous mode [ 88.225109][ T5854] hsr_slave_1: entered promiscuous mode [ 88.232257][ T5854] debugfs: 'hsr0' already exists in 'hsr' [ 88.238498][ T5854] Cannot create hsr debugfs directory [ 88.271790][ T5853] hsr_slave_0: entered promiscuous mode [ 88.278827][ T5853] hsr_slave_1: entered promiscuous mode [ 88.285458][ T5853] debugfs: 'hsr0' already exists in 'hsr' [ 88.291458][ T5853] Cannot create hsr debugfs directory [ 88.864709][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 88.884221][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 88.897391][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 88.906806][ T5850] Bluetooth: hci1: command tx timeout [ 88.927782][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 88.987869][ T5850] Bluetooth: hci0: command tx timeout [ 89.019561][ T5843] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.031696][ T5843] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.044837][ T5843] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.058646][ T5843] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.066491][ T5850] Bluetooth: hci2: command tx timeout [ 89.066511][ T5161] Bluetooth: hci4: command tx timeout [ 89.146835][ T5161] Bluetooth: hci3: command tx timeout [ 89.193946][ T5855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.208501][ T5855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.230081][ T5855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.241454][ T5855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.360975][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.384298][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.415175][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.426975][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.472000][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.558463][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.570480][ T5853] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.582403][ T5853] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 89.602302][ T5853] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 89.613583][ T5853] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.635604][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.643006][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.709427][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.716657][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.810015][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.850344][ T5855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.907738][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.947205][ T184] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.954370][ T184] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.978619][ T5855] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.023329][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.034230][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.041467][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.051297][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.058450][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.083002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.090159][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.208354][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.244967][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.252229][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.277741][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.321787][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.329032][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.470922][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.519992][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.561181][ T58] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.568424][ T58] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.622536][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.629797][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.869671][ T5844] veth0_vlan: entered promiscuous mode [ 90.938422][ T5855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.966350][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.976388][ T5844] veth1_vlan: entered promiscuous mode [ 90.987707][ T5161] Bluetooth: hci1: command tx timeout [ 91.066316][ T5161] Bluetooth: hci0: command tx timeout [ 91.133366][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.146298][ T5161] Bluetooth: hci4: command tx timeout [ 91.149690][ T5850] Bluetooth: hci2: command tx timeout [ 91.170130][ T5844] veth0_macvtap: entered promiscuous mode [ 91.205799][ T5844] veth1_macvtap: entered promiscuous mode [ 91.236054][ T5850] Bluetooth: hci3: command tx timeout [ 91.372464][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.423344][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.438429][ T5843] veth0_vlan: entered promiscuous mode [ 91.477049][ T49] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.486919][ T49] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.504110][ T5843] veth1_vlan: entered promiscuous mode [ 91.514942][ T49] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.524525][ T49] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.537649][ T5854] veth0_vlan: entered promiscuous mode [ 91.563507][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.625157][ T5854] veth1_vlan: entered promiscuous mode [ 91.739304][ T5855] veth0_vlan: entered promiscuous mode [ 91.752098][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.769096][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.794655][ T10] cfg80211: failed to load regulatory.db [ 91.811550][ T5843] veth0_macvtap: entered promiscuous mode [ 91.837531][ T5855] veth1_vlan: entered promiscuous mode [ 91.869537][ T5843] veth1_macvtap: entered promiscuous mode [ 91.892259][ T184] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.904510][ T184] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.924154][ T5854] veth0_macvtap: entered promiscuous mode [ 91.961337][ T5854] veth1_macvtap: entered promiscuous mode [ 91.997804][ T5844] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.021860][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.035290][ T5853] veth0_vlan: entered promiscuous mode [ 92.063236][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.075306][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.137211][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.152299][ T5855] veth0_macvtap: entered promiscuous mode [ 92.230487][ T5853] veth1_vlan: entered promiscuous mode [ 92.238914][ T58] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.253160][ T5855] veth1_macvtap: entered promiscuous mode [ 92.278423][ T58] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.335561][ T58] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.350666][ T58] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.398467][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.412666][ T5855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.432617][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.442500][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.472717][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.482249][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.502458][ T58] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.518353][ T58] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.727413][ T58] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.805551][ T58] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.147106][ T5850] Bluetooth: hci1: command tx timeout [ 93.149653][ T5161] Bluetooth: hci0: command tx timeout [ 93.227608][ T5161] Bluetooth: hci2: command tx timeout [ 93.228033][ T5850] Bluetooth: hci4: command tx timeout [ 93.288611][ T5853] veth0_macvtap: entered promiscuous mode [ 93.307330][ T5850] Bluetooth: hci3: command tx timeout [ 93.329511][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.337781][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.350567][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.358192][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.378694][ T5853] veth1_macvtap: entered promiscuous mode [ 93.459077][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.484987][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.547706][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.566300][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.580155][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.633412][ T5967] loop2: detected capacity change from 0 to 32768 [ 93.681834][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.700383][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.712551][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.734773][ T30] audit: type=1800 audit(1773951343.307:2): pid=5967 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.6" name="file1" dev="loop2" ino=4 res=0 errno=0 [ 93.840274][ T49] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.882593][ T49] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.903943][ T49] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.940678][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.944216][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.960541][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.281679][ T13] read_mapping_page failed! [ 94.294585][ T13] ERROR: (device loop2): txCommit: [ 94.294585][ T13] [ 94.321248][ T13] jfs_write_inode: jfs_commit_inode failed! [ 94.913317][ T808] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 95.117841][ T808] usb 2-1: Using ep0 maxpacket: 32 [ 95.178635][ T808] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 95.202954][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.220000][ T808] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.322203][ T808] usb 2-1: config 0 descriptor?? [ 95.412203][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473326][ T5981] loop4: detected capacity change from 0 to 64 [ 95.481343][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.237591][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.290242][ T808] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 96.336857][ T808] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 96.399415][ T808] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 96.460822][ T808] usb 2-1: media controller created [ 97.395384][ T808] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 98.034400][ T808] az6027: usb out operation failed. (-71) [ 98.041224][ T808] az6027: usb out operation failed. (-71) [ 98.073630][ T808] stb0899_attach: Driver disabled by Kconfig [ 98.112336][ T808] az6027: no front-end attached [ 98.112336][ T808] [ 98.146303][ T808] az6027: usb out operation failed. (-71) [ 98.177401][ T808] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 98.202046][ T5999] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 98.312254][ T808] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.1/usb2/2-1/input/input5 [ 98.371299][ T808] dvb-usb: schedule remote query interval to 400 msecs. [ 98.386022][ T5906] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 98.428218][ T808] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 99.223344][ T6019] loop2: detected capacity change from 0 to 64 [ 99.246376][ T6019] hfs: get root inode failed [ 99.444341][ T808] usb 2-1: USB disconnect, device number 2 [ 100.228934][ T6027] Bluetooth: MGMT ver 1.23 [ 100.425248][ T5906] usb 5-1: config 6 has an invalid descriptor of length 0, skipping remainder of the config [ 100.601029][ T6029] loop3: detected capacity change from 0 to 2048 [ 100.757069][ T808] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 100.766400][ T6029] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 101.077708][ T6029] loop3: detected capacity change from 0 to 32768 [ 101.087741][ T5906] usb 5-1: string descriptor 0 read error: -71 [ 101.113441][ T5906] usb 5-1: New USB device found, idVendor=0979, idProduct=0227, bcdDevice=6f.50 [ 101.131917][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 101.147012][ T5906] usb 5-1: can't set config #6, error -71 [ 101.154714][ T5906] usb 5-1: USB disconnect, device number 2 [ 101.445033][ T6039] Zero length message leads to an empty skb [ 101.452751][ T6039] netlink: 'syz.0.16': attribute type 10 has an invalid length. [ 101.460637][ T6039] netlink: 40 bytes leftover after parsing attributes in process `syz.0.16'. [ 101.693267][ T6039] batadv0: entered promiscuous mode [ 101.698677][ T6039] batadv0: entered allmulticast mode [ 101.705025][ T6039] bridge0: port 3(batadv0) entered blocking state [ 101.716309][ T6039] bridge0: port 3(batadv0) entered disabled state [ 101.726881][ T6039] bridge0: port 3(batadv0) entered blocking state [ 101.734232][ T6039] bridge0: port 3(batadv0) entered forwarding state [ 102.069147][ T5995] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 102.078661][ T5995] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 102.394339][ T6049] netlink: 'syz.4.20': attribute type 10 has an invalid length. [ 102.513730][ T6049] netlink: 40 bytes leftover after parsing attributes in process `syz.4.20'. [ 102.708269][ T6049] batadv0: entered promiscuous mode [ 103.106076][ T6049] batadv0: entered allmulticast mode [ 103.270614][ T6049] bridge0: port 3(batadv0) entered blocking state [ 103.412293][ T6049] bridge0: port 3(batadv0) entered disabled state [ 103.616246][ T5975] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 103.626447][ T5975] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 103.641468][ T6049] bridge0: port 3(batadv0) entered blocking state [ 103.648115][ T6049] bridge0: port 3(batadv0) entered forwarding state [ 104.638229][ T6075] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 104.644907][ T6075] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 104.653681][ T6075] vhci_hcd vhci_hcd.0: Device attached [ 104.813128][ T6080] vhci_hcd: connection closed [ 104.926976][ T5975] vhci_hcd vhci_hcd.1: stop threads [ 105.080000][ T5906] usb 35-1: new low-speed USB device number 2 using vhci_hcd [ 105.131267][ T5975] vhci_hcd vhci_hcd.1: release socket [ 105.247832][ T5975] vhci_hcd vhci_hcd.1: disconnect device [ 106.934886][ T5965] usb 2-1: new full-speed USB device number 3 using dummy_hcd [ 107.223803][ T5965] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 107.381287][ T5965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.681817][ T5965] usb 2-1: Product: syz [ 107.688978][ T5965] usb 2-1: Manufacturer: syz [ 107.693651][ T5965] usb 2-1: SerialNumber: syz [ 107.704378][ T5965] usb 2-1: config 0 descriptor?? [ 107.855100][ T6121] loop3: detected capacity change from 0 to 64 [ 107.921341][ T5965] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 107.990478][ T6121] syz.3.42: attempt to access beyond end of device [ 107.990478][ T6121] loop3: rw=0, sector=1024, nr_sectors = 2 limit=64 [ 108.019232][ T6121] Buffer I/O error on dev loop3, logical block 512, async page read [ 108.028654][ T6121] syz.3.42: attempt to access beyond end of device [ 108.028654][ T6121] loop3: rw=0, sector=113152, nr_sectors = 2 limit=64 [ 108.067550][ T6121] Buffer I/O error on dev loop3, logical block 56576, async page read [ 108.068137][ T6122] minix: Unknown parameter 'Fù^Ð4ÂÿÄ' [ 108.391140][ T6125] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 108.397703][ T6125] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 108.405717][ T6125] vhci_hcd vhci_hcd.0: Device attached [ 108.702454][ T809] usb 39-1: new low-speed USB device number 2 using vhci_hcd [ 109.154929][ T6127] vhci_hcd: connection reset by peer [ 109.162564][ T63] vhci_hcd vhci_hcd.3: stop threads [ 109.169141][ T63] vhci_hcd vhci_hcd.3: release socket [ 109.176987][ T63] vhci_hcd vhci_hcd.3: disconnect device [ 109.769636][ T5965] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 109.800711][ T5965] usb 2-1: USB disconnect, device number 3 [ 110.676171][ T5906] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 111.178772][ T5965] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 111.642166][ T5965] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 111.834085][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 111.958123][ T5965] usb 3-1: config 0 descriptor?? [ 112.075761][ T6160] netlink: 'syz.0.51': attribute type 10 has an invalid length. [ 112.096667][ T6160] netlink: 40 bytes leftover after parsing attributes in process `syz.0.51'. [ 112.589010][ T5965] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0f [ 112.605542][ T6175] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 112.612119][ T6175] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 112.620017][ T6175] vhci_hcd vhci_hcd.0: Device attached [ 113.106171][ T5960] usb 35-1: new low-speed USB device number 3 using vhci_hcd [ 113.455307][ T6176] vhci_hcd: connection reset by peer [ 113.552019][ T1348] vhci_hcd vhci_hcd.1: stop threads [ 113.602908][ T1348] vhci_hcd vhci_hcd.1: release socket [ 113.690616][ T1348] vhci_hcd vhci_hcd.1: disconnect device [ 113.913289][ T5965] hackrf 3-1:0.0: Could not detect board [ 113.916596][ T809] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 113.919385][ T5965] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 113.935331][ T5965] usb 3-1: USB disconnect, device number 2 [ 114.303977][ T6185] vlan0: entered promiscuous mode [ 114.327567][ T5965] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 114.525951][ T5965] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 114.550113][ T5965] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 114.586935][ T5965] usb 3-1: Product: syz [ 114.598315][ T5965] usb 3-1: Manufacturer: syz [ 114.617733][ T5965] usb 3-1: SerialNumber: syz [ 114.647015][ T5965] usb 3-1: config 0 descriptor?? [ 114.882167][ T5965] usb 3-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 114.963622][ T6208] loop3: detected capacity change from 0 to 1024 [ 115.002838][ T6208] ======================================================= [ 115.002838][ T6208] WARNING: The mand mount option has been deprecated and [ 115.002838][ T6208] and is ignored by this kernel. Remove the mand [ 115.002838][ T6208] option from the mount to silence this warning. [ 115.002838][ T6208] ======================================================= [ 115.084893][ T6208] EXT4-fs: Ignoring removed bh option [ 115.250120][ T6208] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 115.367929][ T6220] virtio-fs: tag not found [ 115.883907][ T6221] ext4: Bad value for 'max_batch_time' [ 115.996377][ T5965] dvb_usb_rtl28xxu 3-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 116.972356][ T6228] vhci_hcd vhci_hcd.0: pdev(1) rhport(0) sockfd(5) [ 116.978942][ T6228] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 116.987723][ T6228] vhci_hcd vhci_hcd.0: Device attached [ 117.164669][ T6230] vhci_hcd: connection closed [ 117.171106][ T12] vhci_hcd vhci_hcd.1: stop threads [ 117.402090][ T12] vhci_hcd vhci_hcd.1: release socket [ 117.514780][ T12] vhci_hcd vhci_hcd.1: disconnect device [ 117.704925][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 117.724702][ T6235] loop4: detected capacity change from 0 to 64 [ 117.733366][ T809] usb 3-1: USB disconnect, device number 3 [ 117.753035][ T6235] hfs: get root inode failed [ 118.336513][ T5960] vhci_hcd vhci_hcd.1: vhci_device speed not set [ 118.662588][ T6240] loop1: detected capacity change from 0 to 16 [ 118.736987][ T6240] erofs (device loop1): invalid ishare xattr prefix id 0 [ 122.696058][ T5965] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 123.549334][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 123.591759][ T5965] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.634147][ T5965] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 123.818571][ T5965] usb 2-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 124.432161][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 124.455023][ T5965] usb 2-1: config 0 descriptor?? [ 124.931888][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 124.955952][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 124.975234][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 125.000091][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 125.015963][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 125.032681][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 125.070042][ T5965] steelseries 0003:1038:1410.0001: unknown main item tag 0x0 [ 125.107637][ T5965] steelseries 0003:1038:1410.0001: missing HID_OUTPUT_REPORT 0 [ 126.110174][ T5965] usb 2-1: USB disconnect, device number 4 [ 127.021878][ T5960] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 127.299673][ T5960] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.316728][ T5960] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.324815][ T5960] usb 4-1: Product: syz [ 127.329284][ T5960] usb 4-1: Manufacturer: syz [ 127.334313][ T5960] usb 4-1: SerialNumber: syz [ 127.348281][ T5960] usb 4-1: config 0 descriptor?? [ 127.690571][ T5960] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 128.414905][ T5960] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 128.854320][ T6341] loop0: detected capacity change from 0 to 256 [ 129.094389][ T6341] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 129.688417][ T6341] FAT-fs (loop0): Filesystem has been set read-only [ 129.870434][ T6341] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 129.922436][ T6341] FAT-fs (loop0): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 129.965799][ T30] audit: type=1800 audit(1773951379.537:3): pid=6341 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.103" name="file1" dev="loop0" ino=1048605 res=0 errno=0 [ 129.999523][ T808] usb 4-1: USB disconnect, device number 2 [ 130.160358][ T6341] FAT-fs (loop0): error, fat_free_clusters: deleting FAT entry beyond EOF [ 132.765282][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.793609][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.636548][ T6367] loop3: detected capacity change from 0 to 32768 [ 133.705352][ T6367] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.111 (6367) [ 133.772776][ T5965] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 133.831080][ T6367] BTRFS info (device loop3): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 133.878584][ T6367] BTRFS info (device loop3): using sha256 checksum algorithm [ 133.896896][ T6367] BTRFS warning (device loop3): space cache v1 is being deprecated and will be removed in a future release, please use -o space_cache=v2 [ 133.939733][ T5965] usb 2-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 133.974142][ T5965] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 134.000037][ T5965] usb 2-1: config 0 descriptor?? [ 134.202157][ T5960] usb 5-1: new full-speed USB device number 3 using dummy_hcd [ 134.258402][ T6367] BTRFS info (device loop3): rebuilding free space tree [ 134.328299][ T5965] udl 2-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 134.572287][ T5965] [drm:udl_init] *ERROR* Selecting channel failed [ 134.966276][ T5960] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 134.977000][ T5960] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 134.985499][ T5960] usb 5-1: Product: syz [ 134.990088][ T5960] usb 5-1: Manufacturer: syz [ 134.996209][ T5960] usb 5-1: SerialNumber: syz [ 135.004678][ T5960] usb 5-1: config 0 descriptor?? [ 135.057765][ T6409] o2cb: This node has not been configured. [ 135.128270][ T6367] BTRFS info (device loop3): disabling free space tree [ 135.138036][ T6409] o2cb: Cluster check failed. Fix errors before retrying. [ 135.153547][ T6367] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 135.166559][ T5965] [drm] Initialized udl 0.0.1 for 2-1:0.0 on minor 2 [ 135.177862][ T6367] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 135.188223][ T6409] (syz.0.115,6409,0):user_dlm_register:674 ERROR: status = -22 [ 135.199915][ T5965] [drm] Initialized udl on minor 2 [ 135.223521][ T5960] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 135.252801][ T5965] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 135.267980][ T6409] (syz.0.115,6409,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 135.296925][ T5965] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 135.316741][ T6367] BTRFS info (device loop3): enabling ssd optimizations [ 135.340961][ T6367] BTRFS info (device loop3): turning on async discard [ 135.350457][ T5906] udl 2-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 135.360950][ T5965] usb 2-1: USB disconnect, device number 5 [ 135.368821][ T6367] BTRFS info (device loop3): enabling disk space caching [ 135.384249][ T5906] udl 2-1:0.0: [drm] Cannot find any crtc or sizes [ 135.396566][ T6367] BTRFS info (device loop3): force clearing of disk cache [ 135.438067][ T6367] BTRFS info (device loop3): enabling auto defrag [ 135.459901][ T6367] BTRFS info (device loop3): force zlib compression, level 3 [ 135.595543][ T6415] netlink: 4 bytes leftover after parsing attributes in process `syz.1.120'. [ 135.613968][ T5853] BTRFS info (device loop3): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 135.840305][ T5960] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 137.064799][ T5906] usb 5-1: USB disconnect, device number 3 [ 137.206052][ T6431] loop1: detected capacity change from 0 to 512 [ 137.230181][ T6431] EXT4-fs: Ignoring removed bh option [ 137.305375][ T6431] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 137.374749][ T6431] EXT4-fs (loop1): 1 truncate cleaned up [ 137.390378][ T6431] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 137.914506][ T6444] overlayfs: upper fs needs to support d_type. [ 138.535475][ T5854] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 138.880455][ T5854] EXT4-fs error (device loop1): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 139.555767][ T6454] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 139.562359][ T6454] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 139.570207][ T6454] vhci_hcd vhci_hcd.0: Device attached [ 140.086840][ T809] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 140.341909][ T6455] vhci_hcd: connection reset by peer [ 140.411941][ T5995] vhci_hcd vhci_hcd.4: stop threads [ 140.470633][ T5995] vhci_hcd vhci_hcd.4: release socket [ 140.548470][ T5995] vhci_hcd vhci_hcd.4: disconnect device [ 140.972719][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 141.016599][ T6459] syz.2.133 (6459): attempted to duplicate a private mapping with mremap. This is not supported. [ 141.878123][ T5983] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.226790][ T6467] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=2856336778 (5712673556 ns) > initial count (1379961870 ns). Using initial count to start timer. [ 142.254442][ T5983] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.538350][ T5983] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 142.698340][ T5983] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.103389][ T5161] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 143.122005][ T5161] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 143.132149][ T5161] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 143.145037][ T5161] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 143.153271][ T5161] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 143.360312][ T6480] netlink: 'syz.4.140': attribute type 10 has an invalid length. [ 143.368263][ T6480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.140'. [ 143.851645][ T5983] bridge_slave_1: left allmulticast mode [ 144.006437][ T5983] bridge_slave_1: left promiscuous mode [ 144.014281][ T5983] bridge0: port 2(bridge_slave_1) entered disabled state [ 144.163894][ T5983] bridge_slave_0: left allmulticast mode [ 144.189945][ T5983] bridge_slave_0: left promiscuous mode [ 144.216962][ T5983] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.243024][ T5850] Bluetooth: hci4: command tx timeout [ 145.327893][ T809] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 145.476506][ T6495] o2cb: This node has not been configured. [ 145.495547][ T6495] o2cb: Cluster check failed. Fix errors before retrying. [ 145.562564][ T6495] (syz.3.139,6495,1):user_dlm_register:674 ERROR: status = -22 [ 145.833717][ T6500] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 145.840287][ T6500] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 145.847828][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 145.857481][ T6500] vhci_hcd vhci_hcd.0: Device attached [ 145.897660][ T6495] (syz.3.139,6495,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 146.468767][ T6504] vhci_hcd: connection closed [ 146.525777][ T49] vhci_hcd vhci_hcd.4: stop threads [ 146.634661][ T809] usb 41-1: device descriptor read/64, error -110 [ 146.693701][ T49] vhci_hcd vhci_hcd.4: release socket [ 146.763936][ T49] vhci_hcd vhci_hcd.4: disconnect device [ 147.165974][ T809] vhci_hcd vhci_hcd.4: vhci_device speed not set [ 147.305949][ T5850] Bluetooth: hci4: command tx timeout [ 148.335757][ T5983] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.435286][ T5983] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.491495][ T5983] bond0 (unregistering): Released all slaves [ 148.789069][ T809] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 148.976115][ T809] usb 1-1: Using ep0 maxpacket: 16 [ 148.997829][ T809] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 149.031879][ T809] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.062501][ T809] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.100227][ T809] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 149.133244][ T809] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 149.167763][ T809] usb 1-1: config 0 has no interface number 0 [ 149.209964][ T809] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 149.266126][ T809] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 149.285873][ T809] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.307459][ T809] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 149.325853][ T809] usb 1-1: config 0 interface 125 has no altsetting 0 [ 149.333816][ T809] usb 1-1: config 0 interface 125 has no altsetting 2 [ 149.343274][ T809] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 149.352780][ T809] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 149.365872][ T809] usb 1-1: Product: syz [ 149.370178][ T809] usb 1-1: Manufacturer: syz [ 149.374975][ T809] usb 1-1: SerialNumber: syz [ 149.389834][ T5850] Bluetooth: hci4: command tx timeout [ 149.396797][ T809] usb 1-1: config 0 descriptor?? [ 149.410773][ T809] usb 1-1: selecting invalid altsetting 2 [ 149.612047][ C1] usb 1-1: async_complete: urb error -71 [ 149.618815][ C1] usb 1-1: async_complete: urb error -71 [ 149.624580][ C1] usb 1-1: async_complete: urb error -71 [ 149.630325][ C1] usb 1-1: async_complete: urb error -71 [ 149.647601][ T809] get_1284_register: usb error -71 [ 149.712041][ T6549] netlink: 'syz.2.152': attribute type 10 has an invalid length. [ 149.719917][ T6549] netlink: 40 bytes leftover after parsing attributes in process `syz.2.152'. [ 150.410653][ T809] usb 1-1: USB disconnect, device number 2 [ 150.482563][ T6549] batadv0: entered promiscuous mode [ 150.487889][ T6549] batadv0: entered allmulticast mode [ 150.494128][ T6549] bridge0: port 3(batadv0) entered blocking state [ 150.501682][ T6549] bridge0: port 3(batadv0) entered disabled state [ 150.517047][ T6549] bridge0: port 3(batadv0) entered blocking state [ 150.523669][ T6549] bridge0: port 3(batadv0) entered forwarding state [ 150.817130][ T49] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 150.826921][ T49] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 151.000978][ T5983] hsr_slave_0: left promiscuous mode [ 151.041556][ T5983] hsr_slave_1: left promiscuous mode [ 151.067308][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.140259][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.466239][ T5850] Bluetooth: hci4: command tx timeout [ 151.700544][ T5983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.780493][ T5983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.846952][ T6563] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 151.853529][ T6563] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 151.861278][ T6563] vhci_hcd vhci_hcd.0: Device attached [ 152.057004][ T6565] vhci_hcd: connection closed [ 152.060629][ T49] vhci_hcd vhci_hcd.0: stop threads [ 152.108626][ T5983] veth1_macvtap: left promiscuous mode [ 152.118323][ T49] vhci_hcd vhci_hcd.0: release socket [ 152.126202][ T5983] veth0_macvtap: left promiscuous mode [ 152.131933][ T5983] veth1_vlan: left promiscuous mode [ 152.137929][ T809] usb 33-1: new low-speed USB device number 2 using vhci_hcd [ 152.149227][ T49] vhci_hcd vhci_hcd.0: disconnect device [ 152.272560][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.156'. [ 152.790399][ T5983] team0 (unregistering): Port device team_slave_1 removed [ 152.979091][ T5983] team0 (unregistering): Port device team_slave_0 removed [ 154.079156][ T6595] netlink: 'syz.3.163': attribute type 10 has an invalid length. [ 154.087141][ T6595] netlink: 40 bytes leftover after parsing attributes in process `syz.3.163'. [ 154.951944][ T6569] vlan2: entered promiscuous mode [ 154.957101][ T6569] syz_tun: entered promiscuous mode [ 155.969067][ T6595] batadv0: entered promiscuous mode [ 155.974350][ T6595] batadv0: entered allmulticast mode [ 155.980690][ T6595] bridge0: port 3(batadv0) entered blocking state [ 155.989704][ T6595] bridge0: port 3(batadv0) entered disabled state [ 155.990315][ T6612] syz.0.168 uses obsolete (PF_INET,SOCK_PACKET) [ 156.003398][ T6595] bridge0: port 3(batadv0) entered blocking state [ 156.010019][ T6595] bridge0: port 3(batadv0) entered forwarding state [ 156.116401][ T1348] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 156.125714][ T1348] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 156.241441][ T6474] chnl_net:caif_netlink_parms(): no params data found [ 156.311147][ T6619] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 156.317730][ T6619] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 156.325869][ T6619] vhci_hcd vhci_hcd.0: Device attached [ 156.678535][ T5906] usb 39-1: new low-speed USB device number 3 using vhci_hcd [ 157.098175][ T6622] vhci_hcd: connection reset by peer [ 157.200255][ T999] vhci_hcd vhci_hcd.3: stop threads [ 157.281946][ T999] vhci_hcd vhci_hcd.3: release socket [ 157.335982][ T809] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 157.354949][ T999] vhci_hcd vhci_hcd.3: disconnect device [ 158.098763][ T6474] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.115356][ T6474] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.123376][ T6474] bridge_slave_0: entered allmulticast mode [ 158.135686][ T6474] bridge_slave_0: entered promiscuous mode [ 158.161529][ T6474] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.190970][ T6474] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.219599][ T6474] bridge_slave_1: entered allmulticast mode [ 158.248991][ T6474] bridge_slave_1: entered promiscuous mode [ 158.404192][ T6474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 158.431613][ T6474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 158.571562][ T6474] team0: Port device team_slave_0 added [ 158.600415][ T6474] team0: Port device team_slave_1 added [ 158.696844][ T5965] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 158.719651][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 158.733597][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.769549][ T6474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 158.790849][ T6474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.790865][ T6474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 158.790889][ T6474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.887531][ T5965] usb 1-1: Using ep0 maxpacket: 16 [ 158.889225][ T5965] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 158.889256][ T5965] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 158.891746][ T5965] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 158.891775][ T5965] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 158.891796][ T5965] usb 1-1: Product: syz [ 158.891812][ T5965] usb 1-1: Manufacturer: syz [ 158.891828][ T5965] usb 1-1: SerialNumber: syz [ 158.946808][ T5965] usb 1-1: 0:2 : does not exist [ 159.022881][ T6474] hsr_slave_0: entered promiscuous mode [ 159.025102][ T6474] hsr_slave_1: entered promiscuous mode [ 159.032163][ T6474] debugfs: 'hsr0' already exists in 'hsr' [ 159.032186][ T6474] Cannot create hsr debugfs directory [ 159.044018][ T6629] loop2: detected capacity change from 0 to 32768 [ 159.066243][ T6629] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop2 (7:2) scanned by syz.2.170 (6629) [ 159.124001][ T6629] BTRFS info (device loop2): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 159.124043][ T6629] BTRFS info (device loop2): using crc32c checksum algorithm [ 159.149293][ T5965] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 159.345738][ T6629] BTRFS info (device loop2): enabling ssd optimizations [ 159.383455][ T6629] BTRFS info (device loop2): turning on async discard [ 159.395935][ T6629] BTRFS info (device loop2): enabling free space tree [ 159.553713][ T5965] usb 1-1: USB disconnect, device number 3 [ 160.377289][ T6629] BTRFS info (device loop2): balance: start -s [ 160.505408][ T6629] BTRFS info (device loop2): left=0, need=98304, flags=2 [ 160.553014][ T6629] BTRFS info (device loop2): space_info SYSTEM (sub-group id 0) has 0 free, is not full [ 160.563140][ T6629] BTRFS info (device loop2): space_info total=4194304, used=4096, pinned=0, reserved=0, may_use=0, readonly=4190208 zone_unusable=0 [ 160.576830][ T6629] BTRFS info (device loop2): global_block_rsv: size 1441792 reserved 1441792 [ 160.586436][ T6629] BTRFS info (device loop2): trans_block_rsv: size 0 reserved 0 [ 160.594923][ T6629] BTRFS info (device loop2): chunk_block_rsv: size 0 reserved 0 [ 160.603244][ T6629] BTRFS info (device loop2): remap_block_rsv: size 0 reserved 0 [ 160.610991][ T6629] BTRFS info (device loop2): delayed_block_rsv: size 0 reserved 0 [ 160.618875][ T6629] BTRFS info (device loop2): delayed_refs_rsv: size 0 reserved 0 [ 160.777659][ T6687] netlink: 'syz.4.178': attribute type 10 has an invalid length. [ 160.849252][ T6687] netlink: 40 bytes leftover after parsing attributes in process `syz.4.178'. [ 160.892639][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.005079][ T6698] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 161.011635][ T6698] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 161.019417][ T6698] vhci_hcd vhci_hcd.0: Device attached [ 161.727911][ T6699] vhci_hcd: connection closed [ 161.768956][ T5983] vhci_hcd vhci_hcd.3: stop threads [ 161.948755][ T5983] vhci_hcd vhci_hcd.3: release socket [ 162.093264][ T5983] vhci_hcd vhci_hcd.3: disconnect device [ 162.249669][ T6629] BTRFS info (device loop2): relocating block group 1048576 flags system [ 162.521408][ T6704] netlink: 8 bytes leftover after parsing attributes in process `syz.0.181'. [ 162.968614][ T6629] BTRFS info (device loop2): balance: ended with status: 0 [ 163.116058][ T6474] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 163.167855][ T6474] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 163.198378][ T5844] BTRFS info (device loop2): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 163.218247][ T6474] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 163.285294][ T6474] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 164.127366][ T6474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 164.223333][ T6474] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.268935][ T5983] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.276205][ T5983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.357930][ T5983] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.365171][ T5983] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.126349][ T6759] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 166.132928][ T6759] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 166.140852][ T6759] vhci_hcd vhci_hcd.0: Device attached [ 166.608272][ T5906] usb 39-1: new low-speed USB device number 4 using vhci_hcd [ 166.655136][ T6760] vhci_hcd: connection closed [ 166.697062][ T49] vhci_hcd vhci_hcd.3: stop threads [ 166.876408][ T49] vhci_hcd vhci_hcd.3: release socket [ 166.991066][ T49] vhci_hcd vhci_hcd.3: disconnect device [ 167.172834][ T6764] loop4: detected capacity change from 0 to 24 [ 167.188946][ T6764] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 167.236312][ T6764] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 167.354159][ T6474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.599787][ T6775] input: syz1 as /devices/virtual/input/input6 [ 168.119394][ T6474] veth0_vlan: entered promiscuous mode [ 168.235115][ T6474] veth1_vlan: entered promiscuous mode [ 168.618704][ T6474] veth0_macvtap: entered promiscuous mode [ 168.717534][ T6474] veth1_macvtap: entered promiscuous mode [ 169.136833][ T6806] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 169.143411][ T6806] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 169.151302][ T6806] vhci_hcd vhci_hcd.0: Device attached [ 169.635452][ T6807] vhci_hcd: connection reset by peer [ 169.712159][ T5995] vhci_hcd vhci_hcd.3: stop threads [ 169.756619][ T5995] vhci_hcd vhci_hcd.3: release socket [ 169.886775][ T5995] vhci_hcd vhci_hcd.3: disconnect device [ 169.901284][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.196272][ T6474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.303611][ T13] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.331815][ T13] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.359710][ T13] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.383456][ T13] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.792451][ T6824] netlink: 'syz.2.207': attribute type 10 has an invalid length. [ 170.800314][ T6824] netlink: 40 bytes leftover after parsing attributes in process `syz.2.207'. [ 171.101760][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.125201][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.197341][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.205371][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.221927][ T5847] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 171.375915][ T5847] usb 4-1: Using ep0 maxpacket: 8 [ 171.387917][ T808] usb 1-1: new low-speed USB device number 4 using dummy_hcd [ 171.394257][ T5847] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.417427][ T5847] usb 4-1: New USB device found, idVendor=2833, idProduct=0201, bcdDevice=2a.d5 [ 171.427226][ T5847] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.471591][ T5847] usb 4-1: config 0 descriptor?? [ 171.494051][ T5847] uvcvideo 4-1:0.0: Found UVC 0.00 device (2833:0201) [ 171.520754][ T5847] uvcvideo 4-1:0.0: No valid video chain found. [ 171.561977][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 171.583996][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 171.594349][ T808] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 171.607147][ T808] usb 1-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 171.617434][ T808] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.627631][ T5933] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 171.667012][ T6830] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 171.706369][ T808] hub 1-1:1.0: bad descriptor, ignoring hub [ 171.712508][ T808] hub 1-1:1.0: probe with driver hub failed with error -5 [ 171.721810][ T808] cdc_wdm 1-1:1.0: skipping garbage [ 171.729177][ T808] cdc_wdm 1-1:1.0: skipping garbage [ 171.742555][ T5847] usb 4-1: USB disconnect, device number 3 [ 171.775927][ T808] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 171.783730][ T808] cdc_wdm 1-1:1.0: Unknown control protocol [ 171.824834][ T5933] usb 6-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 171.839405][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 171.853377][ T5933] usb 6-1: Product: syz [ 171.860228][ T5906] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 171.873247][ T5933] usb 6-1: Manufacturer: syz [ 171.889331][ T5933] usb 6-1: SerialNumber: syz [ 171.921715][ T5933] usb 6-1: config 0 descriptor?? [ 172.052781][ T5830] usb 1-1: USB disconnect, device number 4 [ 172.062695][ T6830] cdc_wdm 1-1:1.0: Error submitting int urb - -19 [ 172.140976][ T5933] usb 6-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 172.623934][ T6844] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 172.630517][ T6844] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 172.646638][ T6844] vhci_hcd vhci_hcd.0: Device attached [ 173.023473][ T5906] usb 39-1: new low-speed USB device number 5 using vhci_hcd [ 173.340643][ T6846] vhci_hcd: connection reset by peer [ 173.401973][ T12] vhci_hcd vhci_hcd.3: stop threads [ 173.475377][ T12] vhci_hcd vhci_hcd.3: release socket [ 173.564505][ T12] vhci_hcd vhci_hcd.3: disconnect device [ 173.712244][ T5933] dvb_usb_rtl28xxu 6-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 173.931099][ T5933] usb 6-1: USB disconnect, device number 2 [ 174.286289][ T809] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 174.462869][ T809] usb 4-1: Using ep0 maxpacket: 16 [ 174.476943][ T809] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 174.699754][ T809] usb 4-1: config 0 has no interface number 0 [ 174.707961][ T809] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 174.719023][ T809] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 174.733715][ T809] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 174.747313][ T809] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 174.755568][ T809] usb 4-1: Product: syz [ 174.760061][ T809] usb 4-1: SerialNumber: syz [ 174.803788][ T809] usb 4-1: config 0 descriptor?? [ 174.841684][ T809] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 174.890508][ T809] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input7 [ 175.073875][ C1] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 175.261950][ T5847] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 175.335351][ T6878] netlink: 'syz.5.222': attribute type 10 has an invalid length. [ 175.379071][ T6878] netlink: 40 bytes leftover after parsing attributes in process `syz.5.222'. [ 175.393783][ T6881] loop4: detected capacity change from 0 to 512 [ 175.444757][ T6878] batadv0: entered promiscuous mode [ 175.457567][ T6881] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.473824][ T5847] usb 1-1: Using ep0 maxpacket: 32 [ 175.497868][ T5847] usb 1-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 175.511349][ T6878] batadv0: entered allmulticast mode [ 175.522776][ T6881] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 175.545893][ T5847] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 175.584972][ T6881] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.223: Corrupt directory, running e2fsck is recommended [ 175.608694][ T6878] bridge0: port 3(batadv0) entered blocking state [ 175.619742][ T5847] usb 1-1: config 0 descriptor?? [ 175.699413][ T6878] bridge0: port 3(batadv0) entered disabled state [ 175.710708][ T6881] EXT4-fs (loop4): Cannot turn on journaled quota: type 1: error -117 [ 175.710858][ T6881] EXT4-fs error (device loop4): ext4_iget_extra_inode:5028: inode #15: comm syz.4.223: corrupted in-inode xattr: e_name out of bounds [ 175.711046][ T6881] loop4: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 175.715888][ C1] EXT4-fs (loop4): error count since last fsck: 1 [ 175.715941][ C1] EXT4-fs (loop4): initial error at time 1773951425: ext4_iget_extra_inode:5028: inode 15 [ 175.715981][ C1] EXT4-fs (loop4): last error at time 1773951425: ext4_iget_extra_inode:5028: inode 15 [ 175.719348][ T6881] EXT4-fs error (device loop4): ext4_orphan_get:1396: comm syz.4.223: couldn't read orphan inode 15 (err -117) [ 175.719702][ T6881] loop4: lost filesystem error report for type 5 error -117 [ 175.742364][ T6878] bridge0: port 3(batadv0) entered blocking state [ 175.743085][ T6878] bridge0: port 3(batadv0) entered forwarding state [ 175.744763][ T6881] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 175.766345][ T6881] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.768298][ T6881] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 175.768322][ T6881] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.223: Corrupt directory, running e2fsck is recommended [ 175.802302][ T6881] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.802387][ T6881] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 175.802407][ T6881] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.223: Corrupt directory, running e2fsck is recommended [ 175.807204][ T6881] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 175.807293][ T6881] EXT4-fs warning (device loop4): dx_probe:849: Enable large directory feature to access it [ 175.807312][ T6881] EXT4-fs warning (device loop4): dx_probe:934: inode #2: comm syz.4.223: Corrupt directory, running e2fsck is recommended [ 175.810820][ T6881] EXT4-fs warning (device loop4): dx_probe:846: Directory (ino: 2) htree depth 0x0002 exceedsupported value [ 176.013956][ T5847] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 176.017016][ T5995] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 176.017046][ T5995] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 176.416719][ T5847] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 176.421382][ T5847] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 176.421444][ T5847] usb 1-1: media controller created [ 176.498127][ T5847] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 176.635416][ T5847] az6027: usb out operation failed. (-71) [ 176.637267][ T5847] az6027: usb out operation failed. (-71) [ 176.637284][ T5847] stb0899_attach: Driver disabled by Kconfig [ 176.637297][ T5847] az6027: no front-end attached [ 176.637297][ T5847] [ 176.638152][ T5847] az6027: usb out operation failed. (-71) [ 176.638169][ T5847] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 176.650874][ T5847] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.0/usb1/1-1/input/input8 [ 176.677589][ T5847] dvb-usb: schedule remote query interval to 400 msecs. [ 176.677611][ T5847] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 176.705696][ T5847] usb 1-1: USB disconnect, device number 5 [ 176.772717][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 177.048081][ T5847] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 178.495958][ T5906] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 180.666543][ T5920] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 180.713907][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 180.723110][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 180.730314][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 180.738442][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: urb status -71 [ 180.741257][ T5960] usb 4-1: USB disconnect, device number 4 [ 180.745415][ C0] cm109 4-1:0.8: cm109_submit_buzz_toggle: usb_submit_urb (urb_ctl) failed -19 [ 180.819901][ T5960] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 180.876117][ T5920] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 180.953147][ T5920] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.012089][ T5920] usb 5-1: Product: syz [ 181.069608][ T5920] usb 5-1: Manufacturer: syz [ 181.240626][ T5920] usb 5-1: SerialNumber: syz [ 181.575081][ T5920] usb 5-1: config 0 descriptor?? [ 181.872648][ T5920] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 185.048408][ T5920] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 185.068687][ T5920] usb 5-1: USB disconnect, device number 4 [ 186.013690][ T6978] loop5: detected capacity change from 0 to 1024 [ 186.540694][ T5983] hfsplus: b-tree write err: -5, ino 25 [ 187.388333][ T6990] loop4: detected capacity change from 0 to 2048 [ 187.489183][ T6990] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 187.558402][ T5983] hfsplus: b-tree write err: -5, ino 4 [ 187.576951][ T5983] hfsplus: b-tree write err: -5, ino 2 [ 187.613939][ T30] audit: type=1800 audit(1773951437.187:4): pid=6990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.246" name="file1" dev="loop4" ino=1367 res=0 errno=0 [ 188.096882][ T6976] loop3: detected capacity change from 0 to 32768 [ 188.138081][ T6976] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.241 (6976) [ 188.205636][ T6976] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 188.229144][ T6976] BTRFS info (device loop3): using crc32c checksum algorithm [ 189.104016][ T6976] workqueue: Failed to create a rescuer kthread for wq "btrfs-freespace-write": -EINTR [ 189.113683][ T6976] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 189.264720][ T6976] BTRFS error (device loop3): open_ctree failed: -12 [ 190.645230][ T7042] tipc: Failed to remove unknown binding: 66,1,1/0:144165749/144165751 [ 190.782238][ T7042] tipc: Failed to remove unknown binding: 66,1,1/0:144165749/144165751 [ 190.843943][ T7042] tipc: Failed to remove unknown binding: 66,1,1/0:144165749/144165751 [ 192.182585][ T7061] kvm: requested 188571 ns i8254 timer period limited to 200000 ns [ 192.234804][ T7061] kvm: requested 140800 ns i8254 timer period limited to 200000 ns [ 192.271464][ T7061] kvm: requested 170971 ns i8254 timer period limited to 200000 ns [ 192.301408][ T7061] kvm: requested 150019 ns i8254 timer period limited to 200000 ns [ 192.319392][ T7075] netlink: 36 bytes leftover after parsing attributes in process `syz.5.266'. [ 192.421155][ T7061] kvm: requested 151695 ns i8254 timer period limited to 200000 ns [ 193.014932][ T7061] kvm: requested 187733 ns i8254 timer period limited to 200000 ns [ 193.698813][ T7098] loop4: detected capacity change from 0 to 1024 [ 193.741519][ T7098] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 193.859677][ T7109] loop3: detected capacity change from 0 to 256 [ 194.195090][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.216301][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.804597][ T7098] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 195.305922][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 196.660017][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 198.361317][ T7141] loop0: detected capacity change from 0 to 64 [ 199.163045][ T7145] loop3: detected capacity change from 0 to 256 [ 199.202358][ T7145] exfat: Invalid uid '0x00000000ffffffff' [ 201.469036][ T7167] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 201.475598][ T7167] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 201.483257][ T7167] vhci_hcd vhci_hcd.0: Device attached [ 201.493920][ T7169] vhci_hcd: connection closed [ 201.494838][ T5983] vhci_hcd vhci_hcd.4: stop threads [ 201.515381][ T5983] vhci_hcd vhci_hcd.4: release socket [ 201.525712][ T5983] vhci_hcd vhci_hcd.4: disconnect device [ 202.313060][ T7185] netlink: 'syz.5.295': attribute type 10 has an invalid length. [ 202.321061][ T7185] netlink: 40 bytes leftover after parsing attributes in process `syz.5.295'. [ 203.122595][ T7183] loop3: detected capacity change from 0 to 2048 [ 203.235705][ T7183] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 203.259475][ T7183] ext4 filesystem being mounted at /57/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 203.574910][ T7190] loop4: detected capacity change from 0 to 32768 [ 203.678245][ T7183] fuse: Unknown parameter 'fd00000000000000000000' [ 203.797764][ T7190] JBD2: Ignoring recovery information on journal [ 204.005511][ T7190] ocfs2: Mounting device (7,4) on (node local, slot 0) with ordered data mode. [ 204.042307][ T30] audit: type=1800 audit(1773951453.617:5): pid=7190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.297" name="file1" dev="loop4" ino=17058 res=0 errno=0 [ 204.072411][ T5853] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.187383][ T5855] ocfs2: Unmounting device (7,4) on (node local) [ 205.377057][ T7210] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 205.383621][ T7210] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 205.391627][ T7210] vhci_hcd vhci_hcd.0: Device attached [ 205.566196][ T5847] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 205.746079][ T5920] usb 39-1: new low-speed USB device number 6 using vhci_hcd [ 205.836047][ T5847] usb 6-1: Using ep0 maxpacket: 16 [ 205.927998][ T5847] usb 6-1: unable to get BOS descriptor or descriptor too short [ 206.108722][ T5847] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 206.173752][ T7211] vhci_hcd: connection reset by peer [ 206.255285][ T184] vhci_hcd vhci_hcd.3: stop threads [ 206.358276][ T184] vhci_hcd vhci_hcd.3: release socket [ 206.383053][ T5847] usb 6-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 206.465588][ T184] vhci_hcd vhci_hcd.3: disconnect device [ 206.538280][ T5847] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.641002][ T5847] usb 6-1: Product: syz [ 206.702268][ T5847] usb 6-1: Manufacturer: syz [ 206.724175][ T5847] usb 6-1: SerialNumber: syz [ 207.068024][ T5847] usb 6-1: Audio class v2/v3 interfaces need an interface association [ 208.046160][ T5847] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 208.258072][ T5847] usb 6-1: 2:1 : bogus bTerminalLink 6 [ 208.666236][ T5847] usb 6-1: USB disconnect, device number 3 [ 209.290723][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 209.521691][ T7243] loop2: detected capacity change from 0 to 7 [ 209.579948][ T7243] loop2: [ 209.587382][ T7243] loop2: partition table partially beyond EOD, truncated [ 209.725971][ T5847] usb 1-1: new full-speed USB device number 6 using dummy_hcd [ 210.147032][ T5847] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 210.325269][ T5847] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.347424][ T5847] usb 1-1: Product: syz [ 210.357147][ T5847] usb 1-1: Manufacturer: syz [ 210.370889][ T5847] usb 1-1: SerialNumber: syz [ 210.574840][ T5847] usb 1-1: config 0 descriptor?? [ 211.019536][ T5920] vhci_hcd vhci_hcd.3: vhci_device speed not set [ 211.153671][ T5847] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 211.640103][ T5859] Bluetooth: hci0: command 0x0406 tx timeout [ 211.650549][ T5859] Bluetooth: hci1: command 0x0406 tx timeout [ 211.658783][ T5851] Bluetooth: hci2: command 0x0406 tx timeout [ 211.665011][ T5859] Bluetooth: hci3: command 0x0406 tx timeout [ 213.162583][ T5847] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 213.182718][ T5847] usb 1-1: USB disconnect, device number 6 [ 213.900048][ T7288] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 214.518157][ T7301] netlink: 'syz.2.328': attribute type 10 has an invalid length. [ 214.526010][ T7301] netlink: 40 bytes leftover after parsing attributes in process `syz.2.328'. [ 215.503935][ T7270] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 215.962291][ T7308] loop5: detected capacity change from 0 to 2048 [ 216.049487][ T7308] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 216.126967][ T7308] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 217.047311][ T7319] loop4: detected capacity change from 0 to 256 [ 217.060627][ T7319] exfat: Deprecated parameter 'utf8' [ 217.066267][ T7319] exfat: Deprecated parameter 'utf8' [ 217.071860][ T7319] exfat: Deprecated parameter 'utf8' [ 217.895219][ T7318] vivid-001: ================= START STATUS ================= [ 217.903275][ T7318] vivid-001: Radio HW Seek Mode: Bounded [ 217.907191][ T7319] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xabf88b1f, utbl_chksum : 0xe619d30d) [ 217.909225][ T7318] vivid-001: Radio Programmable HW Seek: false [ 217.927595][ T7318] vivid-001: RDS Rx I/O Mode: Block I/O [ 217.933236][ T7318] vivid-001: Generate RBDS Instead of RDS: false [ 217.940639][ T7318] vivid-001: RDS Reception: true [ 217.945630][ T7318] vivid-001: RDS Program Type: 0 inactive [ 217.951469][ T7318] vivid-001: RDS PS Name: inactive [ 217.957519][ T7318] vivid-001: RDS Radio Text: inactive [ 217.963019][ T7318] vivid-001: RDS Traffic Announcement: false inactive [ 217.969833][ T7318] vivid-001: RDS Traffic Program: false inactive [ 217.976234][ T7318] vivid-001: RDS Music: false inactive [ 217.981739][ T7318] vivid-001: ================== END STATUS ================== [ 218.277416][ T6474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 218.605889][ T5933] usb 5-1: new full-speed USB device number 5 using dummy_hcd [ 218.646061][ T7313] loop2: detected capacity change from 0 to 32768 [ 218.765142][ T7313] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 218.782091][ T7334] loop5: detected capacity change from 0 to 64 [ 218.809494][ T5933] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 218.828850][ T7334] hfs: invalid btree extent records (0 size) [ 218.838072][ T5933] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 218.846947][ T7334] hfs: unable to open catalog tree [ 218.852236][ T5933] usb 5-1: Product: syz [ 218.858683][ T5933] usb 5-1: Manufacturer: syz [ 218.863409][ T5933] usb 5-1: SerialNumber: syz [ 218.874679][ T5933] usb 5-1: config 0 descriptor?? [ 218.950836][ T7313] XFS (loop2): Ending clean mount [ 219.082518][ T7334] loop5: detected capacity change from 0 to 4096 [ 219.107536][ T5933] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 219.132758][ T7334] ntfs3(loop5): Different NTFS sector size (1024) and media sector size (512). [ 219.208424][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 219.317080][ T7334] ntfs3(loop5): ino=1a, mi_enum_attr [ 219.348495][ T7334] ntfs3(loop5): Mark volume as dirty due to NTFS errors [ 219.470890][ T7334] ntfs3(loop5): ino=1e, "file1" ntfs3_write_inode failed, -22. [ 220.602463][ T7359] netlink: 'syz.0.343': attribute type 10 has an invalid length. [ 220.610369][ T7359] netlink: 40 bytes leftover after parsing attributes in process `syz.0.343'. [ 221.339990][ T5933] dvb_usb_rtl28xxu 5-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 221.372418][ T5933] usb 5-1: USB disconnect, device number 5 [ 222.493444][ T7350] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 227.083022][ T7409] binder_alloc: 7407: binder_alloc_buf, no vma [ 227.167598][ T7412] loop5: detected capacity change from 0 to 512 [ 227.454143][ T7412] EXT4-fs error (device loop5): ext4_free_branches:1023: inode #11: comm syz.5.357: invalid indirect mapped block 256 (level 2) [ 227.472177][ T7412] loop5: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 227.475811][ C1] EXT4-fs (loop5): error count since last fsck: 1 [ 227.492305][ C1] EXT4-fs (loop5): initial error at time 1773951477: ext4_free_branches:1023: inode 11 [ 227.502016][ C1] EXT4-fs (loop5): last error at time 1773951477: ext4_free_branches:1023: inode 11 [ 228.320514][ T7412] EXT4-fs (loop5): 2 truncates cleaned up [ 228.699665][ T7412] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 230.566911][ T6474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 230.643744][ T7434] loop4: detected capacity change from 0 to 1024 [ 230.650958][ T7434] EXT4-fs: Ignoring removed orlov option [ 230.691230][ T7434] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 230.985910][ T7429] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 231.065063][ T5855] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 231.893234][ T7468] Cannot find add_set index 65532 as target [ 233.368915][ T7492] loop0: detected capacity change from 0 to 8 [ 233.670975][ T7492] MTD: Attempt to mount non-MTD device "/dev/loop0" [ 233.751107][ T7491] loop5: detected capacity change from 0 to 2048 [ 233.785741][ T7491] EXT4-fs: Ignoring removed mblk_io_submit option [ 233.867130][ T7492] cramfs: bad data blocksize 4294967270 [ 233.876391][ T7492] cramfs: Error -3 while decompressing! [ 233.894365][ T7474] netlink: 8 bytes leftover after parsing attributes in process `syz.4.369'. [ 233.930723][ T7491] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 233.956568][ T7492] cramfs: ffffffff9a3d6da2(26)->ffff88807e408000(4096) [ 233.979069][ T7492] cramfs: bad data blocksize 3221485902 [ 234.003204][ T7491] ext4 filesystem being mounted at /35/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 234.039752][ T7492] cramfs: bad data blocksize 4294967270 [ 234.048889][ T30] audit: type=1800 audit(1773951483.627:6): pid=7492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.375" name="file2" dev="loop0" ino=348 res=0 errno=0 [ 234.996139][ T6474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 236.491173][ T7530] netlink: 'syz.3.382': attribute type 10 has an invalid length. [ 236.528448][ T7530] netlink: 40 bytes leftover after parsing attributes in process `syz.3.382'. [ 236.914265][ T7510] loop0: detected capacity change from 0 to 40427 [ 237.004338][ T7510] F2FS-fs (loop0): invalid crc value [ 237.525302][ T7510] F2FS-fs (loop0): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 237.658582][ T7510] F2FS-fs (loop0): Start checkpoint disabled! [ 237.686839][ T7510] F2FS-fs (loop0): f2fs_disable_checkpoint() finish, err:0 [ 237.702803][ T7510] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e6 [ 237.716101][ T7520] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 237.761617][ T7529] loop4: detected capacity change from 0 to 40427 [ 237.792048][ T7529] F2FS-fs (loop4): Invalid log_blocksize (268), supports only 12 [ 237.816100][ T7529] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 237.841837][ T7529] F2FS-fs (loop4): invalid crc value [ 238.081749][ T7529] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 238.099132][ T5995] kworker/u8:11: attempt to access beyond end of device [ 238.099132][ T5995] loop0: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 238.136929][ T7529] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 238.162718][ T5995] CPU: 1 UID: 0 PID: 5995 Comm: kworker/u8:11 Tainted: G L syzkaller #0 PREEMPT(full) [ 238.162749][ T5995] Tainted: [L]=SOFTLOCKUP [ 238.162756][ T5995] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 238.162770][ T5995] Workqueue: writeback wb_workfn (flush-7:0) [ 238.162812][ T5995] Call Trace: [ 238.162823][ T5995] [ 238.162832][ T5995] dump_stack_lvl+0xe8/0x150 [ 238.162866][ T5995] f2fs_handle_critical_error+0x37c/0x540 [ 238.162901][ T5995] f2fs_write_end_io+0x1274/0x1740 [ 238.162944][ T5995] __submit_merged_bio+0x256/0x700 [ 238.162980][ T5995] __submit_merged_write_cond+0x3c9/0x4e0 [ 238.163017][ T5995] ? __pfx___submit_merged_write_cond+0x10/0x10 [ 238.163070][ T5995] f2fs_write_data_pages+0x287e/0x34f0 [ 238.163139][ T5995] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.163184][ T5995] ? __lock_acquire+0x6b5/0x2cf0 [ 238.163243][ T5995] ? unwind_next_frame+0xa5/0x23c0 [ 238.163271][ T5995] ? unwind_next_frame+0xa5/0x23c0 [ 238.163313][ T5995] ? unwind_next_frame+0xa5/0x23c0 [ 238.163335][ T5995] ? ret_from_fork_asm+0x1a/0x30 [ 238.163355][ T5995] ? ret_from_fork_asm+0x1a/0x30 [ 238.163396][ T5995] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 238.163429][ T5995] do_writepages+0x32e/0x550 [ 238.163468][ T5995] ? reacquire_held_locks+0x104/0x190 [ 238.163490][ T5995] ? writeback_sb_inodes+0x477/0x1a20 [ 238.163524][ T5995] __writeback_single_inode+0x133/0x11a0 [ 238.163552][ T5995] ? do_raw_spin_unlock+0xf5/0x210 [ 238.163583][ T5995] writeback_sb_inodes+0x992/0x1a20 [ 238.163631][ T5995] ? unwind_next_frame+0xa5/0x23c0 [ 238.163659][ T5995] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 238.163683][ T5995] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.163751][ T5995] ? rcu_is_watching+0x15/0xb0 [ 238.163782][ T5995] wb_writeback+0x456/0xb70 [ 238.163812][ T5995] ? queue_io+0x1d1/0x4a0 [ 238.163847][ T5995] ? __pfx_wb_writeback+0x10/0x10 [ 238.163870][ T5995] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.163914][ T5995] wb_workfn+0x414/0xf50 [ 238.163939][ T5995] ? look_up_lock_class+0x57/0x110 [ 238.163984][ T5995] ? __pfx_wb_workfn+0x10/0x10 [ 238.164013][ T5995] ? do_raw_spin_unlock+0xf5/0x210 [ 238.164043][ T5995] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 238.164087][ T5995] ? process_one_work+0x8bb/0x1780 [ 238.164117][ T5995] process_one_work+0x9ab/0x1780 [ 238.164171][ T5995] ? __pfx_process_one_work+0x10/0x10 [ 238.164199][ T5995] ? do_raw_spin_lock+0x12b/0x2f0 [ 238.164243][ T5995] worker_thread+0xba8/0x11e0 [ 238.164273][ T5995] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 238.164298][ T5995] ? __kthread_parkme+0x7a/0x1f0 [ 238.164320][ T5995] ? __kthread_parkme+0x19c/0x1f0 [ 238.164349][ T5995] kthread+0x388/0x470 [ 238.164374][ T5995] ? __pfx_worker_thread+0x10/0x10 [ 238.164392][ T5995] ? __pfx_kthread+0x10/0x10 [ 238.164419][ T5995] ret_from_fork+0x51e/0xb90 [ 238.164452][ T5995] ? __pfx_ret_from_fork+0x10/0x10 [ 238.164488][ T5995] ? __switch_to+0xc7d/0x1450 [ 238.164519][ T5995] ? __pfx_kthread+0x10/0x10 [ 238.164545][ T5995] ret_from_fork_asm+0x1a/0x30 [ 238.164583][ T5995] [ 238.468168][ T5995] F2FS-fs (loop0): Stopped filesystem due to reason: 3 [ 238.477866][ T7529] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 238.982723][ T7559] loop2: detected capacity change from 0 to 40427 [ 239.018518][ T7559] F2FS-fs (loop2): Invalid log_blocksize (268), supports only 12 [ 239.027439][ T7559] F2FS-fs (loop2): Can't find valid F2FS filesystem in 1th superblock [ 239.044321][ T7563] loop5: detected capacity change from 0 to 128 [ 239.100492][ T7563] FAT-fs (loop5): Directory bread(block 524322) failed [ 239.143712][ T7563] FAT-fs (loop5): Directory bread(block 524323) failed [ 239.169440][ T7563] FAT-fs (loop5): Directory bread(block 524324) failed [ 239.204736][ T7563] FAT-fs (loop5): Directory bread(block 524325) failed [ 239.239632][ T7563] FAT-fs (loop5): Directory bread(block 524326) failed [ 239.273850][ T7563] FAT-fs (loop5): Directory bread(block 524327) failed [ 239.304800][ T7563] FAT-fs (loop5): Directory bread(block 524328) failed [ 239.345877][ T7563] FAT-fs (loop5): Directory bread(block 524329) failed [ 239.403815][ T7559] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 239.449010][ T7559] F2FS-fs (loop2): Try to recover 1th superblock, ret: 0 [ 239.482027][ T7559] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 240.044134][ T7584] loop4: detected capacity change from 0 to 128 [ 241.287371][ T7600] loop5: detected capacity change from 0 to 1024 [ 241.301652][ T7600] EXT4-fs: Ignoring removed orlov option [ 241.845693][ T7600] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 242.219342][ T30] audit: type=1800 audit(1773951491.637:7): pid=7606 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.394" name="file1" dev="loop5" ino=15 res=0 errno=0 [ 242.937112][ T58] kworker/u8:4: attempt to access beyond end of device [ 242.937112][ T58] loop4: rw=1, sector=145, nr_sectors = 896 limit=128 [ 242.971253][ T6474] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 244.133744][ T7613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.179039][ T7628] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.189206][ T7628] block device autoloading is deprecated and will be removed. [ 244.207972][ T7622] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 244.217647][ T7622] block device autoloading is deprecated and will be removed. [ 244.565601][ T7635] loop2: detected capacity change from 0 to 32768 [ 244.600596][ T7635] XFS (loop2): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 244.617515][ T7613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.667759][ T7635] XFS (loop2): Ending clean mount [ 244.681336][ T7635] XFS (loop2): Quotacheck needed: Please wait. [ 244.840204][ T7613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.858238][ T7649] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 244.911986][ T7635] XFS (loop2): Quotacheck: Done. [ 245.127249][ T7613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.545872][ T7629] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 245.762743][ T5844] XFS (loop2): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 246.196970][ T5965] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 246.497290][ T5983] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.535883][ T5965] usb 5-1: Using ep0 maxpacket: 16 [ 246.544482][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 246.544740][ T5983] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.569875][ T5965] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 246.602067][ T5965] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 246.697609][ T5965] usb 5-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 246.720220][ T5983] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.734140][ T12] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.781499][ T5965] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 246.843960][ T5965] usb 5-1: config 0 descriptor?? [ 247.279286][ T7694] Bluetooth: hci0: invalid len left 7, exp >= 50 [ 247.330681][ T5965] microsoft 0003:045E:07DA.0002: ignoring exceeding usage max [ 247.382919][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.416423][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.452623][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.484274][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.514380][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.557932][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.605213][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.645459][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.673231][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.711428][ T5965] microsoft 0003:045E:07DA.0002: unknown main item tag 0x0 [ 247.978588][ T5965] input: HID 045e:07da as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:045E:07DA.0002/input/input9 [ 248.932167][ T5965] microsoft 0003:045E:07DA.0002: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.4-1/input0 [ 248.997372][ T5965] usb 5-1: USB disconnect, device number 6 [ 249.093517][ T7736] netlink: 'syz.5.423': attribute type 10 has an invalid length. [ 249.101378][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.5.423'. [ 249.257600][ T7738] ªªªªªª: renamed from vlan0 (while UP) [ 249.813461][ T7740] fido_id[7740]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 250.438649][ T7725] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 250.509040][ T7749] warning: `syz.0.429' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 251.306058][ T5960] usb 6-1: new low-speed USB device number 4 using dummy_hcd [ 251.607223][ T5960] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 251.636002][ T5960] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 251.652697][ T5960] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 30062, setting to 8 [ 251.664905][ T5960] usb 6-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 251.681673][ T5960] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 251.722610][ T7769] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 251.757075][ T5960] hub 6-1:1.0: bad descriptor, ignoring hub [ 251.772666][ T5960] hub 6-1:1.0: probe with driver hub failed with error -5 [ 251.805596][ T5960] cdc_wdm 6-1:1.0: skipping garbage [ 251.832519][ T5960] cdc_wdm 6-1:1.0: skipping garbage [ 251.858480][ T7781] netlink: 64 bytes leftover after parsing attributes in process `syz.2.441'. [ 251.894088][ T5960] cdc_wdm 6-1:1.0: cdc-wdm0: USB WDM device [ 251.916125][ T5960] cdc_wdm 6-1:1.0: Unknown control protocol [ 252.150506][ T7786] netlink: 'syz.0.440': attribute type 10 has an invalid length. [ 252.158349][ T7786] netlink: 40 bytes leftover after parsing attributes in process `syz.0.440'. [ 253.489837][ T7769] usb 6-1: reset low-speed USB device number 4 using dummy_hcd [ 253.866073][ T7788] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 253.953501][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 253.960345][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 253.966707][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 253.973334][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 253.980442][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 253.987075][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 253.994235][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 254.000866][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 254.007674][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 254.014309][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 254.022654][ C1] cdc_wdm 6-1:1.0: nonzero urb status received: -71 [ 254.029302][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - 0 bytes [ 254.036402][ C1] cdc_wdm 6-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 254.153440][ T7813] netlink: 20 bytes leftover after parsing attributes in process `syz.4.451'. [ 254.172859][ T7797] syz.2.446 (7797): drop_caches: 2 [ 254.279824][ T5960] usb 6-1: USB disconnect, device number 4 [ 255.658774][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.672689][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.734098][ T7830] netlink: 'syz.2.456': attribute type 10 has an invalid length. [ 255.742018][ T7830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.456'. [ 257.218519][ T7859] netlink: 48 bytes leftover after parsing attributes in process `syz.4.463'. [ 260.574310][ T7899] syzkaller0: entered promiscuous mode [ 260.580139][ T7899] syzkaller0: entered allmulticast mode [ 262.866871][ T5976] IPVS: starting estimator thread 0... [ 263.160255][ T7929] IPVS: using max 24 ests per chain, 57600 per kthread [ 264.985074][ T7951] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 264.993562][ T7951] IPv6: NLM_F_CREATE should be set when creating new route [ 266.825873][ T5976] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 266.834422][ T7970] netlink: 64 bytes leftover after parsing attributes in process `syz.3.500'. [ 267.053154][ T5976] usb 1-1: Using ep0 maxpacket: 16 [ 267.127396][ T7976] netlink: 'syz.4.501': attribute type 10 has an invalid length. [ 267.135272][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.4.501'. [ 267.646484][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.669145][ T5976] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.708130][ T5976] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 267.814220][ T5976] usb 1-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 267.839350][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.882600][ T5976] usb 1-1: config 0 descriptor?? [ 268.120624][ T5850] Bluetooth: hci4: command 0x0406 tx timeout [ 268.812242][ T5976] hid_parser_main: 7 callbacks suppressed [ 268.812260][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 268.869493][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 268.903468][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 268.922293][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 268.966565][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 268.985980][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 269.002590][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 269.035311][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 269.054741][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 269.075666][ T5976] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 269.132152][ T5976] HID 045e:07da: Invalid code 65791 type 1 [ 269.187010][ T5976] input: HID 045e:07da as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:045E:07DA.0003/input/input10 [ 269.302025][ T5976] microsoft 0003:045E:07DA.0003: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.0-1/input0 [ 269.384878][ T5976] usb 1-1: USB disconnect, device number 7 [ 269.451974][ T8007] tmpfs: Bad value for 'nr_inodes' [ 269.597561][ T8007] netlink: 'syz.5.514': attribute type 2 has an invalid length. [ 270.520181][ T8007] xt_hashlimit: size too large, truncated to 1048576 [ 270.579431][ T8009] fido_id[8009]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/1-1/report_descriptor': No such file or directory [ 271.097695][ T5976] usb 1-1: new full-speed USB device number 8 using dummy_hcd [ 271.430422][ T5976] usb 1-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 271.466612][ T5976] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.527641][ T5976] usb 1-1: config 0 descriptor?? [ 271.580335][ T8036] loop3: detected capacity change from 0 to 512 [ 271.614518][ T8036] EXT4-fs: Ignoring removed bh option [ 271.646265][ T8036] EXT4-fs (loop3): mounting ext3 file system using the ext4 subsystem [ 271.713410][ T8036] EXT4-fs (loop3): 1 truncate cleaned up [ 271.752870][ T5976] udl 1-1:0.0: [drm] Unrecognized vendor firmware descriptor [ 271.766823][ T8036] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 272.030184][ T5976] [drm:udl_init] *ERROR* Selecting channel failed [ 272.050769][ T5976] [drm] Initialized udl 0.0.1 for 1-1:0.0 on minor 2 [ 272.057587][ T5976] [drm] Initialized udl on minor 2 [ 272.064590][ T5976] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 272.404642][ T8047] overlayfs: upper fs needs to support d_type. [ 273.030831][ T5976] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 273.039508][ T5920] udl 1-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 273.054900][ T5976] usb 1-1: USB disconnect, device number 8 [ 273.061026][ T5920] udl 1-1:0.0: [drm] Cannot find any crtc or sizes [ 273.086911][ T8049] capability: warning: `syz.5.522' uses deprecated v2 capabilities in a way that may be insecure [ 274.194174][ T5853] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 274.222319][ T5853] EXT4-fs error (device loop3): ext4_lookup:1785: inode #14: comm syz-executor: invalid fast symlink length 39 [ 275.163256][ T7891] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 275.416503][ T8067] 9pnet_virtio: no channels available for device syz [ 277.129930][ T999] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.289045][ T10] usb 3-1: new low-speed USB device number 4 using dummy_hcd [ 277.411037][ T999] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.484180][ T10] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 277.503508][ T10] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 277.512965][ T10] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 26984, setting to 8 [ 277.534721][ T10] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 277.544852][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.424442][ T5976] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 278.640861][ T8077] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 278.720506][ T10] hub 3-1:1.0: bad descriptor, ignoring hub [ 278.750764][ T5976] usb 6-1: Using ep0 maxpacket: 16 [ 278.831821][ T10] hub 3-1:1.0: probe with driver hub failed with error -5 [ 278.874431][ T5976] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 278.886866][ T5976] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 278.888990][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 278.917677][ T5976] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 278.988576][ T999] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.006041][ T5976] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.019068][ T10] cdc_wdm 3-1:1.0: skipping garbage [ 279.039498][ T5976] usb 6-1: Product: syz [ 279.049442][ T5976] usb 6-1: Manufacturer: syz [ 279.074387][ T5976] usb 6-1: SerialNumber: syz [ 279.118826][ T10] cdc_wdm 3-1:1.0: cdc-wdm0: USB WDM device [ 279.143119][ T10] cdc_wdm 3-1:1.0: Unknown control protocol [ 279.158879][ T5976] usb 6-1: 0:2 : does not exist [ 279.219536][ T999] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.219579][ T10] usb 3-1: USB disconnect, device number 4 [ 279.252660][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 279.265040][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 279.281043][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 279.291461][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 279.301144][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 279.380677][ T5976] usb 6-1: 5:0: failed to get current value for ch 0 (-22) [ 279.757359][ T5976] usb 6-1: USB disconnect, device number 5 [ 279.893942][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.122145][ T999] bridge0: port 3(batadv0) entered disabled state [ 280.164826][ T999] bridge_slave_1: left allmulticast mode [ 280.176614][ T999] bridge_slave_1: left promiscuous mode [ 280.189839][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.212737][ T999] bridge_slave_0: left allmulticast mode [ 280.218617][ T999] bridge_slave_0: left promiscuous mode [ 280.229048][ T999] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.112736][ T8120] netlink: 64 bytes leftover after parsing attributes in process `syz.0.546'. [ 281.396034][ T5861] Bluetooth: hci2: command tx timeout [ 283.465975][ T5861] Bluetooth: hci2: command tx timeout [ 283.928885][ T999] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.941761][ T999] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.954205][ T999] bond0 (unregistering): Released all slaves [ 283.977986][ T8094] chnl_net:caif_netlink_parms(): no params data found [ 283.986833][ T8133] PID 8133 killed due to inadequate hugepage pool [ 285.344425][ T8094] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.577279][ T5861] Bluetooth: hci2: command tx timeout [ 285.584812][ T8094] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.645396][ T8094] bridge_slave_0: entered allmulticast mode [ 285.746697][ T8094] bridge_slave_0: entered promiscuous mode [ 285.820908][ T8094] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.830431][ T8094] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.837900][ T8094] bridge_slave_1: entered allmulticast mode [ 285.888699][ T8094] bridge_slave_1: entered promiscuous mode [ 286.092917][ T999] hsr_slave_0: left promiscuous mode [ 286.151488][ T999] hsr_slave_1: left promiscuous mode [ 286.177665][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.352364][ T999] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.402311][ T999] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.425885][ T999] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.435263][ T8179] netlink: 8 bytes leftover after parsing attributes in process `syz.5.559'. [ 286.488141][ T999] veth1_macvtap: left promiscuous mode [ 286.502971][ T999] veth0_macvtap: left promiscuous mode [ 286.522417][ T999] veth1_vlan: left promiscuous mode [ 286.540633][ T999] veth0_vlan: left promiscuous mode [ 287.676168][ T5861] Bluetooth: hci2: command tx timeout [ 288.367897][ T999] team0 (unregistering): Port device team_slave_1 removed [ 288.538963][ T999] team0 (unregistering): Port device team_slave_0 removed [ 288.839180][ T8094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.858565][ T8094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 289.061600][ T8094] team0: Port device team_slave_0 added [ 289.078953][ T8094] team0: Port device team_slave_1 added [ 289.145955][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.153358][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.201672][ T8094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.240205][ T5965] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 289.274236][ T8094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.296845][ T8094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 289.344825][ T8094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 290.220991][ T999] IPVS: stop unused estimator thread 0... [ 290.233912][ T8094] hsr_slave_0: entered promiscuous mode [ 290.301711][ T8094] hsr_slave_1: entered promiscuous mode [ 290.345875][ T5965] usb 3-1: Using ep0 maxpacket: 8 [ 290.354218][ T5965] usb 3-1: config index 0 descriptor too short (expected 301, got 45) [ 290.363263][ T5965] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 290.373637][ T5965] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 290.383601][ T5965] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 290.396565][ T8094] debugfs: 'hsr0' already exists in 'hsr' [ 290.428447][ T8094] Cannot create hsr debugfs directory [ 291.033012][ T5965] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 291.046153][ T5965] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 291.072600][ T5965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.347341][ T5965] usb 3-1: usb_control_msg returned -32 [ 291.379759][ T5965] usbtmc 3-1:16.0: can't read capabilities [ 291.426338][ T8235] netlink: 'syz.0.573': attribute type 10 has an invalid length. [ 291.434184][ T8235] netlink: 40 bytes leftover after parsing attributes in process `syz.0.573'. [ 291.846020][ T8239] usbtmc 3-1:16.0: usb_control_msg returned -32 [ 292.289652][ T809] usb 3-1: USB disconnect, device number 5 [ 292.736226][ T5976] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 292.819117][ T8094] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 292.859963][ T8094] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 292.899579][ T8094] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 292.906906][ T5976] usb 6-1: Using ep0 maxpacket: 32 [ 292.918958][ T5976] usb 6-1: config index 0 descriptor too short (expected 29220, got 36) [ 292.935029][ T8094] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 292.949307][ T5976] usb 6-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 292.973756][ T5976] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 292.993320][ T5976] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 293.031765][ T5976] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 293.069059][ T5976] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 102 [ 293.094542][ T5976] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 293.139364][ T5976] usb 6-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 293.158814][ T5976] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 293.201705][ T5976] usb 6-1: config 0 descriptor?? [ 293.217409][ T8245] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 293.392532][ T8094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 293.447826][ T5976] usblp 6-1:0.0: usblp0: USB Bidirectional printer dev 6 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 293.513313][ T8094] 8021q: adding VLAN 0 to HW filter on device team0 [ 293.551170][ T1348] bridge0: port 1(bridge_slave_0) entered blocking state [ 293.555517][ T8267] netlink: 64 bytes leftover after parsing attributes in process `syz.2.579'. [ 293.558501][ T1348] bridge0: port 1(bridge_slave_0) entered forwarding state [ 293.585201][ T1348] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.592499][ T1348] bridge0: port 2(bridge_slave_1) entered forwarding state [ 293.661745][ C0] usblp0: nonzero read bulk status received: -71 [ 293.680675][ T5830] usb 6-1: USB disconnect, device number 6 [ 293.714362][ T5830] usblp0: removed [ 294.444330][ T8287] mmap: syz.0.583 (8287) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 294.695417][ T8094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.574355][ T8094] veth0_vlan: entered promiscuous mode [ 296.643186][ T8094] veth1_vlan: entered promiscuous mode [ 296.780365][ T8094] veth0_macvtap: entered promiscuous mode [ 296.844244][ T8094] veth1_macvtap: entered promiscuous mode [ 297.024733][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 297.100586][ T8094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 297.366667][ T49] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.411233][ T49] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.457115][ T49] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.501281][ T49] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 297.871913][ T30] audit: type=1326 audit(1773951547.447:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8334 comm="syz.5.594" exe="/root/syz-executor" sig=31 arch=c000003e syscall=15 compat=0 ip=0x7f69df93db19 code=0x0 [ 298.197946][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 298.236527][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.418359][ T7469] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.428307][ T7469] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.078997][ T8395] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 301.085616][ T8395] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 301.155180][ T8395] vhci_hcd vhci_hcd.0: Device attached [ 301.896303][ T809] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 302.004843][ T8396] vhci_hcd: connection reset by peer [ 302.031538][ T12] vhci_hcd vhci_hcd.5: stop threads [ 302.053650][ T12] vhci_hcd vhci_hcd.5: release socket [ 302.085920][ T12] vhci_hcd vhci_hcd.5: disconnect device [ 302.431727][ T8421] netlink: 'syz.6.613': attribute type 10 has an invalid length. [ 302.443251][ T8421] netlink: 40 bytes leftover after parsing attributes in process `syz.6.613'. [ 302.452271][ T8421] batadv0: entered promiscuous mode [ 302.457603][ T8421] batadv0: entered allmulticast mode [ 302.666398][ T5861] Bluetooth: hci3: command 0x0406 tx timeout [ 303.035660][ T8421] bridge0: port 3(batadv0) entered blocking state [ 303.042522][ T8421] bridge0: port 3(batadv0) entered disabled state [ 303.175236][ T8421] bridge0: port 3(batadv0) entered blocking state [ 303.181920][ T8421] bridge0: port 3(batadv0) entered forwarding state [ 303.491932][ T7469] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 303.501355][ T7469] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 303.964114][ T8448] Cannot find add_set index 65532 as target [ 304.756174][ T808] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 304.936023][ T808] usb 1-1: Using ep0 maxpacket: 16 [ 304.952581][ T808] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 304.971866][ T808] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 304.987095][ T808] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 305.000377][ T808] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 305.010599][ T808] usb 1-1: Product: syz [ 305.014827][ T808] usb 1-1: Manufacturer: syz [ 305.022724][ T808] usb 1-1: SerialNumber: syz [ 305.053549][ T808] usb 1-1: 0:2 : does not exist [ 306.039544][ T808] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 306.069812][ T8461] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 306.076392][ T8461] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 306.256256][ T8467] netlink: 'syz.2.628': attribute type 10 has an invalid length. [ 306.264136][ T8467] netlink: 40 bytes leftover after parsing attributes in process `syz.2.628'. [ 306.293150][ T8461] vhci_hcd vhci_hcd.0: Device attached [ 306.332602][ T8462] vhci_hcd: connection closed [ 306.333044][ T63] vhci_hcd vhci_hcd.6: stop threads [ 306.354761][ T63] vhci_hcd vhci_hcd.6: release socket [ 306.412463][ T63] vhci_hcd vhci_hcd.6: disconnect device [ 306.447036][ T808] usb 1-1: USB disconnect, device number 9 [ 306.589156][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 307.397293][ T809] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 308.104218][ T8523] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 308.112552][ T8523] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 308.573296][ T8496] Cannot find add_set index 65532 as target [ 309.194393][ T8546] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 309.200980][ T8546] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 309.224497][ T8546] vhci_hcd vhci_hcd.0: Device attached [ 309.384096][ T8547] vhci_hcd: connection closed [ 309.387361][ T12] vhci_hcd vhci_hcd.0: stop threads [ 309.419087][ T12] vhci_hcd vhci_hcd.0: release socket [ 309.434039][ T12] vhci_hcd vhci_hcd.0: disconnect device [ 310.503227][ T8573] netlink: 'syz.2.657': attribute type 10 has an invalid length. [ 310.512300][ T8573] netlink: 40 bytes leftover after parsing attributes in process `syz.2.657'. [ 312.455929][ T809] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 312.626097][ T809] usb 5-1: Using ep0 maxpacket: 32 [ 312.639189][ T809] usb 5-1: New USB device found, idVendor=0b89, idProduct=0007, bcdDevice=ef.64 [ 312.649155][ T809] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=4 [ 312.710083][ T809] usb 5-1: SerialNumber: syz [ 312.722513][ T8608] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 312.729158][ T8608] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 312.822986][ T809] usb 5-1: config 0 descriptor?? [ 313.296106][ T809] as10x_usb: device has been detected [ 313.312783][ T8608] vhci_hcd vhci_hcd.0: Device attached [ 313.366795][ T809] dvbdev: DVB: registering new adapter (nBox DVB-T Dongle) [ 313.477093][ T809] usb 5-1: DVB: registering adapter 1 frontend 0 (nBox DVB-T Dongle)... [ 313.503304][ T8609] vhci_hcd: connection closed [ 313.504938][ T13] vhci_hcd vhci_hcd.0: stop threads [ 313.564867][ T13] vhci_hcd vhci_hcd.0: release socket [ 313.566318][ T808] usb 33-1: new low-speed USB device number 4 using vhci_hcd [ 313.602756][ T13] vhci_hcd vhci_hcd.0: disconnect device [ 313.911943][ T809] as10x_usb: error during firmware upload part1 [ 313.938525][ T809] Registered device nBox DVB-T Dongle [ 313.962638][ T809] usb 5-1: USB disconnect, device number 7 [ 314.175886][ T8632] 9pnet_virtio: no channels available for device syz [ 314.202811][ T809] Unregistered device nBox DVB-T Dongle [ 314.222365][ T809] as10x_usb: device has been disconnected [ 314.351401][ T8638] netlink: 'syz.0.675': attribute type 10 has an invalid length. [ 314.359295][ T8638] netlink: 40 bytes leftover after parsing attributes in process `syz.0.675'. [ 315.324939][ T809] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 316.075916][ T5920] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 316.245838][ T5920] usb 7-1: Using ep0 maxpacket: 16 [ 316.253892][ T5920] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 316.264922][ T5920] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 316.281903][ T5920] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 316.291799][ T5920] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.303182][ T5920] usb 7-1: Product: syz [ 316.308519][ T5920] usb 7-1: Manufacturer: syz [ 316.314939][ T5920] usb 7-1: SerialNumber: syz [ 316.388142][ T5920] usb 7-1: 0:2 : does not exist [ 316.640725][ T5920] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 316.689540][ T8682] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 316.696114][ T8682] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 316.740501][ T8682] vhci_hcd vhci_hcd.0: Device attached [ 316.872086][ T8683] vhci_hcd: connection closed [ 316.872476][ T5995] vhci_hcd vhci_hcd.4: stop threads [ 316.910215][ T5995] vhci_hcd vhci_hcd.4: release socket [ 316.934087][ T5995] vhci_hcd vhci_hcd.4: disconnect device [ 316.998220][ T5920] usb 7-1: USB disconnect, device number 2 [ 317.076618][ T1314] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.085539][ T1314] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.419950][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.963215][ T8709] netlink: 'syz.4.690': attribute type 10 has an invalid length. [ 317.971060][ T8709] netlink: 40 bytes leftover after parsing attributes in process `syz.4.690'. [ 318.826006][ T808] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 318.839832][ T8714] syzkaller0: entered promiscuous mode [ 318.847794][ T8714] syzkaller0: entered allmulticast mode [ 319.051542][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz.4.696'. [ 319.718484][ T10] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 320.003240][ T8745] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 320.009825][ T8745] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 320.019914][ T8745] vhci_hcd vhci_hcd.0: Device attached [ 320.325952][ T5920] usb 43-1: new low-speed USB device number 3 using vhci_hcd [ 320.427701][ T8749] vhci_hcd: connection reset by peer [ 320.435029][ T58] vhci_hcd vhci_hcd.5: stop threads [ 320.511138][ T58] vhci_hcd vhci_hcd.5: release socket [ 320.572577][ T58] vhci_hcd vhci_hcd.5: disconnect device [ 320.715847][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 320.956977][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 321.011760][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 321.023367][ T10] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 321.033235][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.042495][ T10] usb 5-1: Product: syz [ 321.047635][ T10] usb 5-1: Manufacturer: syz [ 321.053018][ T10] usb 5-1: SerialNumber: syz [ 321.122280][ T10] usb 5-1: 0:2 : does not exist [ 322.682511][ T10] usb 5-1: 5:0: failed to get current value for ch 0 (-22) [ 322.771376][ T10] usb 5-1: USB disconnect, device number 9 [ 322.904577][ T8777] Bluetooth: hci0: unsupported parameter 255 [ 322.924346][ T8777] Bluetooth: hci0: unsupported parameter 255 [ 322.998892][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 325.896487][ T5920] vhci_hcd vhci_hcd.5: vhci_device speed not set [ 326.845071][ T8822] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 326.851659][ T8822] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 326.904205][ T8822] vhci_hcd vhci_hcd.0: Device attached [ 327.138419][ T8823] vhci_hcd: connection closed [ 327.138891][ T7469] vhci_hcd vhci_hcd.0: stop threads [ 327.183946][ T7469] vhci_hcd vhci_hcd.0: release socket [ 327.199660][ T8827] input: syz1 as /devices/virtual/input/input11 [ 327.206311][ T8827] input: failed to attach handler leds to device input11, error: -6 [ 327.216246][ T7469] vhci_hcd vhci_hcd.0: disconnect device [ 327.255961][ T5965] usb 33-1: new low-speed USB device number 5 using vhci_hcd [ 327.264030][ T5965] usb 33-1: enqueue for inactive port 0 [ 327.339912][ T5965] vhci_hcd vhci_hcd.0: vhci_device speed not set [ 327.585687][ T8834] netlink: 64 bytes leftover after parsing attributes in process `syz.6.723'. [ 327.942742][ T8842] netlink: 'syz.6.725': attribute type 10 has an invalid length. [ 327.952517][ T8842] netlink: 40 bytes leftover after parsing attributes in process `syz.6.725'. [ 328.625879][ T5976] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 328.835877][ T5976] usb 3-1: Using ep0 maxpacket: 16 [ 328.866250][ T5976] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 328.883897][ T5976] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 328.904801][ T5976] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 328.914965][ T5976] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.924013][ T5976] usb 3-1: Product: syz [ 328.943615][ T5976] usb 3-1: Manufacturer: syz [ 328.949267][ T5976] usb 3-1: SerialNumber: syz [ 329.067515][ T5976] usb 3-1: 0:2 : does not exist [ 329.255777][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 329.372628][ T5976] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 330.381674][ T5976] usb 3-1: USB disconnect, device number 6 [ 331.314700][ T8880] netlink: 'syz.6.738': attribute type 10 has an invalid length. [ 331.322626][ T8880] netlink: 40 bytes leftover after parsing attributes in process `syz.6.738'. [ 332.181447][ T8882] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 332.188018][ T8882] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 332.239108][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 332.412547][ T8882] vhci_hcd vhci_hcd.0: Device attached [ 332.489225][ T8887] vhci_hcd: connection closed [ 332.490621][ T7469] vhci_hcd vhci_hcd.5: stop threads [ 332.501934][ T7469] vhci_hcd vhci_hcd.5: release socket [ 332.508720][ T7469] vhci_hcd vhci_hcd.5: disconnect device [ 333.097340][ T5920] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 333.289172][ T5920] usb 5-1: Using ep0 maxpacket: 8 [ 333.475396][ T5920] usb 5-1: config index 0 descriptor too short (expected 301, got 45) [ 333.496560][ T5920] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 334.833643][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 334.850622][ T5920] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 334.866159][ T5920] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 334.880884][ T5920] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 334.890418][ T5920] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.305890][ T5920] usb 5-1: usb_control_msg returned -32 [ 335.322348][ T5920] usbtmc 5-1:16.0: can't read capabilities [ 335.350730][ T8916] bridge_slave_0: Device is already in use. [ 335.894509][ T8919] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 335.954151][ T8919] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 336.030283][ T8919] usbtmc 5-1:16.0: usbtmc_ioctl_request failed -71 [ 336.086394][ T5920] usb 5-1: USB disconnect, device number 10 [ 339.146354][ T8953] netlink: 'syz.0.758': attribute type 10 has an invalid length. [ 339.154261][ T8953] netlink: 40 bytes leftover after parsing attributes in process `syz.0.758'. [ 341.071597][ T8967] netlink: 4 bytes leftover after parsing attributes in process `syz.2.762'. [ 341.383231][ T8978] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 341.389996][ T8978] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 341.397962][ T8978] vhci_hcd vhci_hcd.0: Device attached [ 341.453687][ T8979] vhci_hcd: connection closed [ 341.457923][ T63] vhci_hcd vhci_hcd.0: stop threads [ 341.495301][ T63] vhci_hcd vhci_hcd.0: release socket [ 341.534094][ T63] vhci_hcd vhci_hcd.0: disconnect device [ 342.601374][ T8990] comedi: No check for data length of config insn id 16777248 is implemented [ 342.642248][ T8990] comedi: Add a check to check_insn_config_length in drivers/comedi/comedi_fops.c [ 342.806316][ T8990] comedi: Assuming n=15 is correct [ 344.627953][ T9] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 344.795941][ T9] usb 1-1: Using ep0 maxpacket: 16 [ 344.819404][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 344.842326][ T9] usb 1-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 344.853968][ T9] usb 1-1: config 0 interface 0 has no altsetting 0 [ 344.883458][ T9] usb 1-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 344.911922][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 344.934119][ T9] usb 1-1: Product: syz [ 344.944263][ T9] usb 1-1: Manufacturer: syz [ 344.980806][ T9] usb 1-1: SerialNumber: syz [ 345.009612][ T9] usb 1-1: config 0 descriptor?? [ 345.166427][ T1348] batman_adv: batadv0: IGMP Querier appeared [ 345.244889][ T9] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input12 [ 345.502706][ T9017] Cannot find add_set index 65532 as target [ 346.196507][ T5933] usb 1-1: USB disconnect, device number 10 [ 348.546215][ T9064] Cannot find add_set index 65532 as target [ 354.292692][ T9068] syz.4.793 (9068): drop_caches: 2 [ 355.660744][ T9126] Cannot find add_set index 65532 as target [ 355.820626][ T5960] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 357.225694][ T5960] usb 1-1: Using ep0 maxpacket: 16 [ 357.270352][ T5960] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 357.454438][ T5960] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 357.523254][ T5960] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.552727][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.585276][ T5960] usb 1-1: Product: syz [ 357.606006][ T5960] usb 1-1: Manufacturer: syz [ 357.624493][ T5960] usb 1-1: SerialNumber: syz [ 357.699352][ T5960] usb 1-1: 0:2 : does not exist [ 358.022763][ T5960] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 359.079523][ T5960] usb 1-1: USB disconnect, device number 11 [ 359.396220][ T6003] udevd[6003]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 359.444264][ T38] node ffff888027bff440 offset 0 parent ffff888027bfd080 shift 0 count 1 values 0 array ffff88804fab4ce0 list ffff888027bff458 ffff888027bff458 marks 0 0 0 [ 359.975689][ T999] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.369299][ T999] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.398047][ T38] ------------[ cut here ]------------ [ 360.403611][ T38] kernel BUG at ./include/linux/xarray.h:1441! [ 360.418097][ T38] Oops: invalid opcode: 0000 [#1] SMP KASAN PTI [ 360.424551][ T38] CPU: 0 UID: 0 PID: 38 Comm: khugepaged Tainted: G L syzkaller #0 PREEMPT(full) [ 360.435265][ T38] Tainted: [L]=SOFTLOCKUP [ 360.439619][ T38] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 360.449706][ T38] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 360.455807][ T38] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 360.475448][ T38] RSP: 0018:ffffc90000ae7500 EFLAGS: 00010246 [ 360.481630][ T38] RAX: 0000000000000000 RBX: ffff888027bff440 RCX: 5a5a2b2d3f1ba100 [ 360.489655][ T38] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 360.497706][ T38] RBP: ffffc90000ae7810 R08: ffffc90000ae7287 R09: 1ffff9200015ce50 [ 360.505714][ T38] R10: dffffc0000000000 R11: fffff5200015ce51 R12: ffffea0001526fb0 [ 360.513763][ T38] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000ae76f0 [ 360.521770][ T38] FS: 0000000000000000(0000) GS:ffff888125436000(0000) knlGS:0000000000000000 [ 360.530736][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 360.537345][ T38] CR2: 00007f09cefe92f8 CR3: 0000000037ae0000 CR4: 00000000003526f0 [ 360.545354][ T38] Call Trace: [ 360.548720][ T38] [ 360.551685][ T38] ? collapse_scan_file+0x1c1/0x5230 [ 360.557065][ T38] ? __pfx___schedule+0x10/0x10 [ 360.561958][ T38] ? __pfx_collapse_scan_file+0x10/0x10 [ 360.567550][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 360.572531][ T38] ? schedule+0x16e/0x360 [ 360.576897][ T38] ? __up_read+0x291/0x6b0 [ 360.581356][ T38] ? __pfx___up_read+0x10/0x10 [ 360.586167][ T38] collapse_single_pmd+0x22b/0x4510 [ 360.591399][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.596454][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 360.601435][ T38] ? __flush_work+0x100/0xc50 [ 360.606168][ T38] ? __flush_work+0x100/0xc50 [ 360.610876][ T38] ? __pfx_collapse_single_pmd+0x10/0x10 [ 360.616543][ T38] ? __lock_acquire+0x6b5/0x2cf0 [ 360.621534][ T38] ? shmem_get_orders_within_size+0x154/0x180 [ 360.627649][ T38] ? shmem_allowable_huge_orders+0x2fc/0x690 [ 360.633714][ T38] khugepaged+0x930/0x1500 [ 360.638169][ T38] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 360.643591][ T38] ? __pfx_khugepaged+0x10/0x10 [ 360.648472][ T38] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 360.654151][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 360.660257][ T38] ? __pfx_autoremove_wake_function+0x10/0x10 [ 360.666365][ T38] ? do_raw_spin_lock+0x12b/0x2f0 [ 360.671437][ T38] ? __kthread_parkme+0x7a/0x1f0 [ 360.676422][ T38] kthread+0x388/0x470 [ 360.680586][ T38] ? __pfx_khugepaged+0x10/0x10 [ 360.685527][ T38] ? __pfx_kthread+0x10/0x10 [ 360.690161][ T38] ret_from_fork+0x51e/0xb90 [ 360.694799][ T38] ? __pfx_ret_from_fork+0x10/0x10 [ 360.699948][ T38] ? __switch_to+0xc7d/0x1450 [ 360.704658][ T38] ? __pfx_kthread+0x10/0x10 [ 360.709285][ T38] ret_from_fork_asm+0x1a/0x30 [ 360.714091][ T38] [ 360.717128][ T38] Modules linked in: SYZFAIL: failed to send rpc fd=3 want=17672 sent=0 n=-1 (errno 32: Broken pipe) [ 360.722825][ T38] ---[ end trace 0000000000000000 ]--- [ 360.875466][ T38] RIP: 0010:collapse_scan_file+0x4f98/0x5230 [ 360.881748][ T38] Code: ff 4c 89 e7 48 c7 c6 20 b2 dc 8b e8 72 52 f1 fe 90 0f 0b 48 85 db 0f 84 03 01 00 00 e8 41 e5 8f ff 48 89 df e8 89 90 7b 09 90 <0f> 0b e8 31 e5 8f ff 48 89 df 48 c7 c6 20 b2 dc 8b e8 42 52 f1 fe [ 360.902331][ T38] RSP: 0018:ffffc90000ae7500 EFLAGS: 00010246 [ 360.922876][ T38] RAX: 0000000000000000 RBX: ffff888027bff440 RCX: 5a5a2b2d3f1ba100 [ 360.968173][ T999] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.121270][ T999] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.286311][ T38] RDX: 0000000000000000 RSI: 0000000080000000 RDI: 0000000000000000 [ 361.294365][ T38] RBP: ffffc90000ae7810 R08: ffffc90000ae7287 R09: 1ffff9200015ce50 [ 361.304080][ T38] R10: dffffc0000000000 R11: fffff5200015ce51 R12: ffffea0001526fb0 [ 361.314132][ T38] R13: dffffc0000000000 R14: 0000000000000000 R15: ffffc90000ae76f0 [ 361.332086][ T38] FS: 0000000000000000(0000) GS:ffff888125536000(0000) knlGS:0000000000000000 [ 361.336596][ T999] bridge0: port 3(batadv0) entered disabled state [ 361.341942][ T38] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 361.398643][ T999] bridge_slave_1: left allmulticast mode [ 361.434723][ T999] bridge_slave_1: left promiscuous mode [ 361.454388][ T999] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.477174][ T38] CR2: 00005627ef443f40 CR3: 0000000037ae0000 CR4: 00000000003526f0 [ 361.485436][ T38] Kernel panic - not syncing: Fatal exception [ 361.492123][ T38] Kernel Offset: disabled [ 361.496457][ T38] Rebooting in 86400 seconds..