last executing test programs: 22m7.196041045s ago: executing program 32 (id=358): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000001080), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000a80)={'syzkaller0\x00', @broadcast}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, 0x0, 0x40004) recvmmsg(r3, &(0x7f0000001540)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f00000008c0)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000001780)=""/33, 0x21}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/145, 0x91}, {&(0x7f0000000680)=""/177, 0xb1}, {&(0x7f0000000880)=""/62, 0x3e}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000006d40)=""/211, 0xd3}, {&(0x7f0000008f00)=""/4096, 0x1000}], 0xc}, 0x3}], 0x1, 0x40002000, 0x0) 20m50.788793047s ago: executing program 33 (id=635): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./my_debugfs\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./my_debugfs\x00', &(0x7f0000000300)='debugfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000400)='./my_debugfs/usb/devices\x00', 0x0, 0x0) read(r0, &(0x7f0000000340)=""/87, 0x57) 19m14.589996311s ago: executing program 34 (id=1016): syz_mount_image$iso9660(&(0x7f0000000000), &(0x7f0000000740)='./file0\x00', 0x800, &(0x7f00000006c0)=ANY=[], 0x1, 0x800, &(0x7f0000001040)="$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") mkdir(0x0, 0xc) syz_open_dev$loop(0x0, 0x0, 0x30d842) munmap(&(0x7f0000002000/0x1000)=nil, 0x1000) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mount(0x0, &(0x7f0000000240)='./debug\x00', &(0x7f0000000280)='debugfs\x00', 0x0, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x9, 0xffffffff, 0x4e, 0x567}, 0x13) write(0xffffffffffffffff, 0x0, 0x0) open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) r4 = socket(0x10, 0x2, 0x0) write(r4, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) 17m55.27449496s ago: executing program 35 (id=1133): syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) r0 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x47, &(0x7f0000000200)=0x7) r5 = openat(0xffffffffffffff9c, 0x0, 0x42, 0xc0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_UNCONFIRMED(r6, 0x0, 0x80) r7 = openat$cgroup_devices(0xffffffffffffffff, 0x0, 0x2, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000059c0)={&(0x7f00000000c0)=@kern={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000005780), 0x0, &(0x7f0000005940)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, r4, 0xffffffffffffffff, r7, 0xffffffffffffffff, r5, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50, 0xe20294614ad50b4}, 0x40091) ioctl$UI_DEV_SETUP(r0, 0x405c5503, &(0x7f0000000340)={{0x1002, 0x8, 0xfffd, 0x3037}, 'syz1\x00', 0x22}) ioctl$UI_ABS_SETUP(r0, 0x401c5504, &(0x7f0000000100)={0x35, {0x9, 0xd, 0x2040000, 0x7fff, 0x14b, 0xfffffffe}}) 16m52.214964966s ago: executing program 36 (id=1312): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), r1) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000005c0)=0x44) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x9901, 0x49a41}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_TTL={0x5}]}}}]}, 0x40}}, 0x0) sendto$packet(r0, &(0x7f0000000400)="05d936277c6f5422007f83477ca1b278e3e4018a34e7bfd3de1a00ad6762646c95c716727eb53bcc", 0x28, 0x40880, &(0x7f0000000200)={0x11, 0x86dd, r2, 0x1, 0x4, 0x6, @local}, 0x14) 16m26.172025135s ago: executing program 37 (id=1359): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000003080)=ANY=[@ANYBLOB], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x1000, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0xffffffff}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x4000}, 0x10}, 0x94) close(0x3) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a00)=ANY=[@ANYRESDEC=r0], &(0x7f0000000340)='syzkaller\x00'}, 0x94) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) io_setup(0x8, 0x0) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x4000002, 0x14032, 0xffffffffffffffff, 0x0) io_submit(0x0, 0xfffffef7, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10041, 0x0) shutdown(0xffffffffffffffff, 0x1) connect$inet6(0xffffffffffffffff, 0x0, 0x0) dup2(0xffffffffffffffff, 0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x88000) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r2, 0xc0505350, &(0x7f0000000040)={{}, {0x20, 0xfc}, 0x0, 0x4}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@mcast2}, 0x14) read$FUSE(0xffffffffffffffff, 0x0, 0x0) 15m24.661230161s ago: executing program 38 (id=1434): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000030c0)=ANY=[], 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f0000000100)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000000)='3', 0x3e) r1 = syz_open_dev$video4linux(&(0x7f0000000080), 0x2, 0x0) ioctl$VIDIOC_QUERYMENU(r1, 0xc040564a, 0x0) add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f0000000200)="3082", 0x2, 0xffffffffffffffff) 14m2.04211748s ago: executing program 39 (id=1560): r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000000)='\x00', 0x89901) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000019800)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) close(r0) socket(0x10, 0x2, 0x0) 13m33.169029857s ago: executing program 40 (id=1600): unshare(0x6a040000) 10m55.225590585s ago: executing program 41 (id=1909): syz_mount_image$ext4(&(0x7f0000000540)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x22091406, &(0x7f0000000440)={[{@dioread_lock}, {@quota}, {@delalloc}, {@block_validity}, {@nolazytime}, {@nojournal_checksum, 0x2e}, {@nombcache}, {@grpjquota}, {@barrier_val={'barrier', 0x3d, 0x800}}, {@mblk_io_submit}], [], 0x2c}, 0x84, 0x4ed, &(0x7f0000001e00)="$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") sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) ptrace$getsig(0x4202, r2, 0x6d4, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000fc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000e80)=[@cred={{0x1c, 0x1, 0x2, {r1}}}, @rights={{0x10}}], 0x30, 0x6051}}], 0x1, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) 10m21.661376047s ago: executing program 42 (id=2033): socket$nl_netfilter(0x10, 0x3, 0xc) clock_adjtime(0x0, &(0x7f00000000c0)={0x7, 0x9, 0x380000, 0x8, 0xfffffffffffffff9, 0xfffffffffffffff7, 0x9, 0x0, 0xae, 0x6, 0x7, 0x4, 0xfffffffffffff04f, 0x7, 0xffffffffffffffff, 0xfffffffffffffff8, 0xffffffffffffffff, 0x6, 0x0, 0x100, 0x4, 0x2, 0x5, 0x3, 0x8, 0x8}) clock_adjtime(0x0, &(0x7f0000000300)={0x6, 0x7, 0x6, 0xd8b8, 0x3, 0x8, 0x4, 0xe7, 0x727, 0x80000001, 0x400, 0x1b4, 0x1a, 0xaed8, 0x7, 0x0, 0xfffffffffffffffb, 0x5, 0x1, 0x7ff, 0x8, 0x0, 0x8, 0x9, 0xfffffffffffff800}) 10m11.194036132s ago: executing program 43 (id=2056): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=@base={0x6, 0x4, 0x70be, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x48) 9m22.46742919s ago: executing program 8 (id=2128): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x200, 0x0) ppoll(&(0x7f00000002c0)=[{r0, 0x1000}], 0x1, 0x0, 0x0, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r0, 0xc004500a, &(0x7f00000003c0)=0x80000000) r1 = syz_io_uring_setup(0xf08, &(0x7f0000000300)={0x0, 0x1118, 0x2, 0x3, 0x800000c5}, &(0x7f0000000240)=0x0, &(0x7f0000000540)=0x0, &(0x7f0000000f40)=0x0) syz_io_uring_submit(r2, r3, r4, &(0x7f00000001c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x1, {0x54}}) io_uring_enter(r1, 0x1000001, 0xfffffffd, 0x4b, 0x0, 0x0) ioctl$SNDCTL_DSP_GETISPACE(r0, 0x8010500d, &(0x7f0000000000)) 9m16.096276193s ago: executing program 44 (id=2135): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./config\x00', &(0x7f0000000100)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/target\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/target/core\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/target/core/rd_mcp_0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000500)='./config/target/core/rd_mcp_0/ramdisk0\x00', 0x1ff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/target/core/rd_mcp_0/ramdisk0/control\x00', 0x2, 0x0) write(r0, &(0x7f0000000700)='rd_pages=1024', 0xd) r1 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./config/target/core/rd_mcp_0/ramdisk0/enable\x00', 0x2, 0x0) write(r1, &(0x7f0000000900)='1\x00', 0x1) 9m13.452705669s ago: executing program 8 (id=2138): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000003c0)="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", 0x1ac, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000040)=@secondary) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x40010, r2, 0x0) read(r2, &(0x7f0000002340)=""/148, 0xaf) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 9m11.807570218s ago: executing program 8 (id=2139): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r3, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r4 = gettid() r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r5, &(0x7f0000000200)=""/209, 0xd1) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000180)={0x335, @time={0x101, 0x10001}, 0x1b, {}, 0x2, 0x0, 0x6}) tkill(r4, 0x7) 9m9.817961788s ago: executing program 8 (id=2142): syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f00000002c0)='./file0\x00', 0x2048c5, &(0x7f00000005c0)={[{@fat=@allow_utime={'allow_utime', 0x3d, 0x7ff}}, {@shortname_mixed}, {@fat=@time_offset={'time_offset', 0x3d, 0x48a}}, {@utf8}, {@uni_xlate}, {@utf8}, {@fat=@showexec}, {@uni_xlateno}, {@rodir}, {@uni_xlate}, {@numtail}, {@shortname_lower}, {@numtail}]}, 0x0, 0x2c4, &(0x7f0000002880)="$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") r0 = syz_open_procfs(0x0, &(0x7f0000000540)='mounts\x00') mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x1333404, 0x0) mount$bind(&(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='./file0/file0\x00', 0x0, 0x13481, 0x0) mount$bind(&(0x7f0000000240)='.\x00', &(0x7f0000000280)='./file0\x00', 0x0, 0x1005848, 0x0) read$FUSE(r0, &(0x7f0000000840)={0x2020}, 0x2020) 9m5.419214904s ago: executing program 8 (id=2148): add_key(&(0x7f0000000000)='asymmetric\x00', 0x0, &(0x7f00000003c0)="308201d43082017ba00302010202142eea648d7f17e62e9e5869c887c68e1bd0f86fde300a06082a8648ce3d040302303a3138303606035504030c2f436572746966696361746520766572696669636174696f6e2045434453412073656c662d74657374696e67206b65793020170d3234303431333232313632365a180f32313234303332303232313632365a303a3138303606035504030c2f43657274696669636174652076657269666963617428a2e0861e1ae90d412073656c662d74657374696e67206b65793059301306072a8648ce3d020106082a8648ce3d0301070342000407e56b51affc19412c88926b775771039ee2fe6e6a714ec7299f90e177189fc2e70a82d08ae181a9717c5a73fb25b95b1e248c739ff838f848b4ad1619c022c6a35d305b301d0603551d0e041604142900bcea1deb7bc8479a84a23d758efdfdd2b2d3301f0603551d230418301680142900bcea1deb7bc8499a84a23d758efdfdd2b2d3300c0603551d130101ff04023000300b0603551d0f040403020780300a06082a8648ce3d040302034700304402201ad7ac07c8975556d22cab6b8fbe7b8c9bb03eb61f6c", 0x1ac, 0xfffffffffffffffd) r0 = add_key$keyring(&(0x7f0000000000), 0x0, 0x0, 0x0, 0xfffffffffffffffe) r1 = add_key$keyring(&(0x7f0000000200), &(0x7f0000000140)={'syz', 0x1}, 0x0, 0x0, r0) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r1, 0x0, &(0x7f0000000040)=@secondary) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = openat$zero(0xffffffffffffff9c, &(0x7f0000000100), 0x88000, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x0, 0x40010, r2, 0x0) read(r2, &(0x7f0000002340)=""/148, 0xaf) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000000), 0xe00, 0x0) ioctl$RTC_WKALM_SET(r6, 0x4028700f, &(0x7f0000000080)={0x1, 0x1, {0x39, 0x38, 0x9, 0xd, 0x6, 0x4eac, 0x5, 0xce}}) openat$loop_ctrl(0xffffff9c, &(0x7f0000000100), 0x0, 0x0) semctl$IPC_RMID(0x0, 0x0, 0x0) 9m4.950385139s ago: executing program 8 (id=2150): mkdirat(0xffffffffffffff9c, 0x0, 0xc5) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xffffffffffffffff, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3ff, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 9m4.301982727s ago: executing program 45 (id=2150): mkdirat(0xffffffffffffff9c, 0x0, 0xc5) syz_open_dev$loop(&(0x7f0000000100), 0xf01c, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, &(0x7f0000000140)) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0xffffffffffffffff, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x3ff, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) 6m0.561588749s ago: executing program 1 (id=2622): bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f0000000140)=[{0x20, 0x0, 0xb, 0xfffff00c}, {0x6}]}, 0x8) sendmmsg(r0, &(0x7f0000001c00), 0x400000000000159, 0x40840) connect$unix(0xffffffffffffffff, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) eventfd2(0x90, 0x180801) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x3, 0x48, 0x1, 0x0, 0xb47, 0x9, 0x0, 0x80000001, 0x3}, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x3f00) syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000002280)=ANY=[@ANYBLOB='d\x00\x00', @ANYRES16=0x0, @ANYBLOB="010000000000000000000a000000500004800000010073797a30000000000e44d2"], 0x64}}, 0x0) close(0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, 0x0, 0xc000) r4 = openat$vnet(0xffffffffffffff9c, &(0x7f00000038c0), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r4, 0xaf01, 0x0) r5 = eventfd(0x80000001) ioctl$VHOST_SET_VRING_KICK(r4, 0x4008af20, &(0x7f0000000040)={0x1, r5}) ioctl$VHOST_RESET_OWNER(r4, 0xaf02, 0x0) 5m57.771547048s ago: executing program 1 (id=2635): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$LOOP_CTL_ADD(r0, 0x4c80, 0x1) 5m57.250253548s ago: executing program 1 (id=2640): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000340)='\x00\x00', 0x2) 5m56.018061083s ago: executing program 7 (id=2644): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) tkill(r3, 0x7) 5m55.872621234s ago: executing program 1 (id=2645): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x48, &(0x7f0000000100)={0x88, 0x0, '\x00', [@generic]}, 0x10) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000000)=0x0) ptrace$ARCH_FORCE_TAGGED_SVA(0x1e, r1, 0x0, 0x4004) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r5, &(0x7f0000001640)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000004c0)=""/4096, 0x10a1}], 0x1}}], 0x1, 0x36120, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4c000000180001eeffffffffffffff850a3f0000000000000500000014000500200100000000000000000100000000001c00090008", @ANYRES32=r6], 0x4c}}, 0x40000) 5m53.862621279s ago: executing program 7 (id=2650): r0 = openat$adsp1(0xffffffffffffff9c, &(0x7f00000001c0), 0x82002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, &(0x7f0000000080)=0x40000) ioctl$SNDCTL_DSP_SYNC(r0, 0x5001, 0x0) ioctl$SNDCTL_DSP_SETFMT(r0, 0xc0045005, 0x0) 5m52.980482872s ago: executing program 1 (id=2651): socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f00008d7000/0x3000)=nil, 0x3000, 0x2000008, 0x31, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee7, 0x8031, 0xffffffffffffffff, 0x8ccbf000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) r4 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) r6 = open(&(0x7f0000000040)='./bus\x00', 0x143142, 0x80) ftruncate(r6, 0x2007ffb) sendfile(r6, r6, 0x0, 0x1000000201005) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) ftruncate(r7, 0x1) open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) 5m48.830738332s ago: executing program 1 (id=2654): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000c, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) chdir(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x7a, 0x11cfa, 0x0, 0x8080008, 0x3, 0x4, 0x1000001}) 5m47.212207409s ago: executing program 7 (id=2657): r0 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r0, 0x80047437, &(0x7f0000000040)) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f00000000c0)) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl(r2, 0x40047438, &(0x7f0000000040)) ioctl$PPPIOCCONNECT(r2, 0x4004743a, &(0x7f00000000c0)) write$ppp(r2, &(0x7f0000000340)='\x00\x00', 0x2) 5m46.620793985s ago: executing program 7 (id=2660): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x10b8}, 0xff00) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1e000000000000000700400009"], 0x50) r0 = socket$kcm(0xa, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x890b, &(0x7f0000000000)) 5m46.373786475s ago: executing program 7 (id=2662): r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) read$FUSE(r0, &(0x7f0000000500)={0x2020}, 0x2020) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() setrlimit(0xa, &(0x7f00000000c0)={0x9, 0x6}) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x6, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @local}}}, 0x108) write(r2, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r3 = gettid() r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000840), 0x8000) read(r4, &(0x7f0000000200)=""/209, 0xd1) tkill(r3, 0x7) 5m44.849590421s ago: executing program 7 (id=2665): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) creat(&(0x7f0000000180)='./bus\x00', 0x28) 5m33.534255859s ago: executing program 46 (id=2654): openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x20000000c, 0x0) socket$unix(0x1, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) chdir(0x0) sched_setaffinity(r0, 0x2, &(0x7f00000000c0)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) openat$procfs(0xffffffffffffff9c, &(0x7f0000000100)='/proc/bus/input/devices\x00', 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, &(0x7f00000005c0)={{0x80, 0xfd}, 'port1\x00', 0x7a, 0x11cfa, 0x0, 0x8080008, 0x3, 0x4, 0x1000001}) 5m29.61472571s ago: executing program 47 (id=2665): dup(0xffffffffffffffff) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) r1 = getpgid(r0) sched_rr_get_interval(r1, &(0x7f00000000c0)) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r3, 0x2, &(0x7f0000000000)=0x80000000000003) creat(&(0x7f0000000180)='./bus\x00', 0x28) 3m38.802944863s ago: executing program 2 (id=2944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d63c"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(0xffffffffffffffff, 0x3) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="11ef424853d9", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 3m38.292051626s ago: executing program 2 (id=2949): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x1, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x94) socketpair(0x1, 0x1, 0x0, &(0x7f0000000180)) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x108, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffcd, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) 3m37.742224775s ago: executing program 2 (id=2952): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000880)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d0019feffe69ee517d34460bc06000000a705251e6182949a3651f60a84c9", 0x45}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)=""/144, 0x90}, {&(0x7f0000000cc0)=""/4145, 0x1031}, {&(0x7f0000001d00)=""/229, 0xe5}, {&(0x7f0000000140)=""/159, 0x9f}, {&(0x7f0000000380)=""/184, 0xb8}, {&(0x7f0000000700)=""/179, 0xb3}, {&(0x7f0000000040)=""/30, 0x1e}], 0x7}, 0x10102) 3m36.537219285s ago: executing program 2 (id=2955): syz_emit_vhci(&(0x7f00000003c0)=ANY=[@ANYRESDEC], 0x7) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1df) mount(0x0, &(0x7f0000000080)='./proc\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) mkdir(&(0x7f0000000000)='myproc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000300)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000440)='./config\x00', 0x2100, 0x197) read(r0, &(0x7f0000000500), 0xfa0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000140)='./config/usb_gadget/g1/functions/midi.usb0/id\x00', 0x1, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/midi.usb0/in_ports\x00', 0x1, 0x0) write(r1, &(0x7f0000000240), 0x0) openat(0xffffffffffffff9c, &(0x7f0000000280)='./config/usb_gadget/g1/functions/midi.usb0/out_ports\x00', 0x1, 0x0) symlinkat(&(0x7f0000000100)='./config/usb_gadget/g1/functions/midi.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000340)='./config/usb_gadget/g1/configs/c.1/midi.usb0\x00') write(0xffffffffffffffff, &(0x7f00000003c0)='dummy_udc.', 0xa) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) userfaultfd(0x80001) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000180)={0x200005, 0x200027, 0x801, 0x0, 0x7}) mkdir(0x0, 0x0) 3m35.033270233s ago: executing program 2 (id=2960): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="7000000010000304000080000000000000007400", @ANYRES32=r3, @ANYBLOB="0000000003120100500012800b000100627269646765000040000280080005000100000006002700000000000800010015000800050025000000000008000400000000000c00"], 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x40) 3m32.02464383s ago: executing program 2 (id=2967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 3m16.671992369s ago: executing program 48 (id=2967): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x80000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="c8ed0ec2aff22b790000000000000000", 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 11.147509227s ago: executing program 9 (id=3508): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) 10.522260702s ago: executing program 6 (id=3516): sendfile(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000040)=0x3, 0xac5) syz_clone3(&(0x7f0000000900)={0x23800000, &(0x7f0000000040)=0xffffffffffffffff, 0x0, 0x0, {0x27}, 0x0, 0x0, 0x0, 0x0}, 0x58) io_setup(0x8, &(0x7f0000000600)=0x0) io_submit(r1, 0x1, &(0x7f0000001300)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x5, 0x6, r0, 0x0}]) 9.393106087s ago: executing program 9 (id=3520): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80000) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) sendto$inet6(r1, &(0x7f0000000000)='\v', 0x1, 0x200408c4, 0x0, 0x0) 9.390878935s ago: executing program 6 (id=3521): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'hmac(sha256)\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000840), 0x0, 0x0, 0x0, 0x4080}, 0x8000) 9.279095185s ago: executing program 4 (id=3522): openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) close(r0) r1 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_INFO(r1, 0x80e85411, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f0000000080)={@remote, 0x800, 0x0, 0x3, 0x1, 0x8}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000040)=0x2005, 0x4) sendmsg$inet6(r2, &(0x7f0000000140)={&(0x7f00000000c0)={0xa, 0x4e23, 0x180000, @local, 0xffffffff}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000"], 0x18}, 0x30000004) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff1000/0x4000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x20800, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$sock_int(r6, 0x1, 0x28, &(0x7f0000000000)=0x1, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000001a80)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "b8ff05", 0x8, 0x3a, 0xff, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x5, 0x2}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa, 0x6}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x6}}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) sendmsg$nl_route_sched(r4, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newtfilter={0x44, 0x2c, 0xd27, 0x70bd28, 0xfffff000, {0x0, 0x0, 0x0, r7, {0xf000, 0xfff3}, {}, {0x7, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0xfff2, 0x7}}, @TCA_FLOWER_FLAGS={0x8, 0x16, 0x2}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) 9.145959872s ago: executing program 3 (id=3523): mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./sys\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='7', 0x1) 9.105964648s ago: executing program 0 (id=3524): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$sock(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000300)="3000000013000500000000000000000003010000100002007664706173696d5f626c6b000a0004007664706130000000", 0x30}], 0x1}, 0x0) sendmsg$sock(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) sendmsg$sock(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000680)="300000001700050000000000000000000301000010000200766470617369", 0x1e}], 0x1}, 0x0) sendmsg$sock(r0, 0x0, 0x0) sendmsg$sock(r0, 0x0, 0x0) sendmsg$sock(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)}, 0x0) sendmsg$sock(r0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f0000000500)='./dev\x00', 0x0, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000700)='./dev/vda\x00', 0x2, 0x0) 8.853545887s ago: executing program 3 (id=3525): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x1}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000dc0)=@filter={'filter\x00', 0xe, 0x4, 0x288, 0xffffffff, 0x0, 0x98, 0x130, 0xffffffff, 0xffffffff, 0x0, 0x98, 0x1f0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@inet=@set1={{0x28}, {{0x0, 0x2, 0x1}}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e8) r1 = socket$kcm(0xa, 0x2, 0x0) sendmsg$sock(r1, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 8.759986123s ago: executing program 9 (id=3526): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, 0x0, 0x0) 8.529152887s ago: executing program 3 (id=3527): syz_mount_image$xfs(&(0x7f0000000000), &(0x7f0000000100)='./file1\x00', 0x4800802, &(0x7f0000009b00), 0x7, 0x9896, &(0x7f0000009c00)="$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") setxattr$security_evm(&(0x7f0000000200)='./file0\x00', &(0x7f0000000240), &(0x7f0000000640)=ANY=[@ANYBLOB="05"], 0x2d6, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000380)='./file1\x00', &(0x7f00000001c0), &(0x7f0000001400)=ANY=[], 0x835, 0x0) setxattr$trusted_overlay_upper(&(0x7f0000000000)='./file1\x00', &(0x7f00000001c0), &(0x7f0000000200)=ANY=[], 0x841, 0x0) setxattr$trusted_overlay_upper(0x0, 0x0, 0x0, 0x0, 0x0) 8.521236976s ago: executing program 9 (id=3528): syz_mount_image$erofs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000080)=ANY=[], 0x3, 0x1fa, &(0x7f0000000180)="$eJzsls+K01AUxr+bxPwRcefGjYIDzkLTJFVxMzBuXLkQFAYXgsXJDKMZR6ZZ2IKIT+DenQsfQ6hbH0KqIIqiG3V95ebem1zbpPaPtQvPD3ryJff05OQk/VIQBPHf8v7dzyH/sfHRB3AMa/DU8U92lWMZ+W/9b49fX7u69ez2yzfeMAx+r+bNfH4HwOCKjVztc865ub6mtjdhaX3EXN8CQ6j0HVifbyidguGW0vcMfSDyw3BnL0vDuwfZthCRCLEIiQjt0f6+PmXYNvpjxnq317/fybL0sBL22JEFRf3kBl/K/nxgw+jPvF8hZLdRNT/EsBAr3QaDntlleHo2ciROdf0nnaq+PfH6XSx42R8AVEd2Zq4TYOpkV5xqrlYBVnfvlye85gduAWGjEPqOjuc4c85nSnF82aOD89cKcg/4U474lfyzR6LX11b4alNuy1afyP3mr584JzPMpc2GZHdCnQmTh6896QXDWSlPCwORVvK8eKJb+f7DVrfXP7+339lNd9MHSdK+FF2IootJqzAiGesM0Jb+FxT+dFS9ezjnQb1fAi5z8aiT54exjOV+ImOd41qF/1lYPyPfO8JN3ZG63wHokzL1sYqtUOt2Uz8EQRCr5BRY8Z9O4Gih3iblAufJ9RX3SRAEQRAEQRAEQRDE/PwKAAD//8ieUJ0=") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x1, r0, 0x7) 8.203919141s ago: executing program 6 (id=3529): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="11ef424853d9", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 7.521173749s ago: executing program 6 (id=3530): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) pread64(r2, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) read$ptp(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7ad07e8c5d00000000000000"]) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 6.911914556s ago: executing program 9 (id=3531): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x34ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 6.878452909s ago: executing program 6 (id=3532): socket(0xa, 0x3, 0x87) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) connect$unix(r1, &(0x7f0000019080)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getcwd(0x0, 0x0) setfsgid(0xee00) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x41, 0x0, 0x0) capset(&(0x7f0000000500)={0x20080522}, &(0x7f0000000200)={0x200002, 0x200003, 0x803, 0x4, 0x7}) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000002280)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r2, &(0x7f0000000200)={0x2020}, 0x2020) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f00000047c0)={0x2020}, 0x2020) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1/functions/SourceSink.r0\x00', 0x1ff) 6.721845059s ago: executing program 0 (id=3533): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x720, 0x0, 0xfffffffffffffd25) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, 0x0, 0x0) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x3ff, 0x2, 0x2000005}, 0x1c) 5.717501493s ago: executing program 9 (id=3536): r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0xff}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgctl$MSG_INFO(0x0, 0xc, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(0xffffffffffffffff, 0xc02064b9, 0x0) sendmsg$BATADV_CMD_SET_MESH(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010028bd7040010000000f00000005002e000000000008000300", @ANYRES32=r5], 0x2c}}, 0x18) 5.711389093s ago: executing program 4 (id=3537): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='7', 0x1) 5.382404321s ago: executing program 0 (id=3539): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, 0x0, 0x480f0) sendmsg$inet6(r0, 0x0, 0x4010015) writev(0xffffffffffffffff, &(0x7f0000000140), 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={0x0, 0xa4}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x34}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00/\x00\t\x00'], 0x24}, 0x1, 0x0, 0x0, 0x42804}, 0x4) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000540)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r4, 0x84, 0x1b, &(0x7f0000000640)={r5}, &(0x7f0000000740)=0x8) 5.095785876s ago: executing program 4 (id=3540): socket$tipc(0x1e, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x4004000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=[@cred={{0x1c}}, @rights={{0x10}}], 0x30}, 0x80) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_ublk_add_dev(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000440)=@new_dev={0x4, 0x3c9, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0x50}}}, &(0x7f0000000300)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, 0x0, &(0x7f0000000a80)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0xe704, 0x800, 0x1000002, 0x91}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5c87, 0x20, 0x3, 0x3aa}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x801f70, 0x2, 0x40040001, 0x334}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x4, 0x200, 0x1, 0xffffffff}}], 0x1, 0x0, 0x0) 5.059990999s ago: executing program 3 (id=3542): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff00000000000000001000000000000000050000000000000000000000002000000000000000000000000000000000000001000202000000004400050000000000000000000000ffff0a010100000004d6"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r1, 0x3) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000280)={@local, @random="11ef424853d9", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0xc2}}}}}}, 0x0) 4.863984142s ago: executing program 0 (id=3543): syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f00000002c0), 0x1, 0xbc1, &(0x7f00000043c0)="$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") timer_create(0x0, &(0x7f0000000300)={0x0, 0x21, 0x2}, &(0x7f00000005c0)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) timer_create(0x6, 0x0, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r1, &(0x7f00000021c0)={0x2020}, 0x2020) syz_fuse_handle_req(r1, &(0x7f00000042c0)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4.494502995s ago: executing program 3 (id=3544): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_route(0x10, 0x3, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./trace\x00', &(0x7f0000000100)='tracefs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./trace/set_event\x00', 0x2, 0x0) read$FUSE(r2, &(0x7f0000002100)={0x2020}, 0x2020) pread64(r2, &(0x7f0000000040)=""/107, 0x6b, 0xab7f) read$ptp(r2, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./pipefs\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./pipefs\x00', &(0x7f0000000100)='rpc_pipefs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./mnt\x00', 0x1ff) mount$nfs4(&(0x7f0000000300)='127.0.0.1:/root\x00', &(0x7f0000000200)='./mnt\x00', &(0x7f0000000400), 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="616464723d3132372e302e302e312c736f66742c74696d656f3d312c72657472616e733d312c7365633d6b7262352c00685c96f99875e694e3c4e3a4a5fce63942e16e72cc267752449268a83f73ba8638de9393134f7ed1ddf23089273c40de7b241310bc328e2a033a606904f9bc3aa51980aaf912503d20f0b7e3cb32eda9bbcee203f2d2220f6dd2b2c1446396800aa6c433ce2d515bb08f22c2606ea856b4df594cdc7ad07e8c5d00000000000000"]) symlink(&(0x7f0000001400)='./config\x00', &(0x7f0000000140)='./config/usb_gadget/g1/functions/uvc.usb0/streaming/header/h/file0\x00') write(0xffffffffffffffff, &(0x7f0000000000)="5a000300010003", 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) 3.599934417s ago: executing program 3 (id=3545): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r0, &(0x7f00000001c0)="5cba91a4", 0xffffffd9) ioctl$SOUND_MIXER_WRITE_RECSRC(r0, 0xc0044dff, &(0x7f0000000180)=0x4) ioctl$SNDCTL_DSP_SETFMT(r0, 0x40045010, &(0x7f0000000080)) 3.591941255s ago: executing program 5 (id=3546): r0 = landlock_create_ruleset(&(0x7f00000002c0)={0x2da8}, 0x18, 0x0) landlock_restrict_self(r0, 0x0) openat$pfkey(0xffffffffffffff9c, 0x0, 0x40140, 0x0) 3.591666535s ago: executing program 4 (id=3547): r0 = syz_open_dev$sndpcmp(&(0x7f0000000100), 0x1, 0x2) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) unshare(0x20060400) ioctl$SNDRV_PCM_IOCTL_FORWARD(r0, 0x40084149, &(0x7f0000000080)=0xfd8) 3.085826121s ago: executing program 5 (id=3548): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f00000004c0)=@updpolicy={0x17c, 0x19, 0x8, 0x0, 0x1, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, @in=@local, 0x0, 0x1973, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x3, 0x8}, 0x0, 0x6e6bb7, 0x0, 0x1}, [@tmpl={0xc4, 0x5, [{{@in=@local, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x34ff, 0x1, 0x0, 0x0, 0x5, 0x0, 0x40}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x2000, 0x0, 0x0, 0x0, 0x81}, {{@in6=@mcast2, 0x4d6, 0x6c}, 0x2, @in=@multicast1, 0x34fe, 0x0, 0x0, 0x0, 0x0, 0x9}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x1}, 0x8000080) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="fc0000001900010029bd7000fbdbdf25ac1e0101000000000000000000000000ffffffff00000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000001000080000000000000000000000000000000000000000000000000000000000200000000000000fdffffffefffffff0000000000000000100000000000000005000000000000000000000000200000000000000000000000000000000000000100020200000000"], 0xfc}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) r1 = socket$inet(0x2, 0x3, 0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x0) sendmsg$inet(r1, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0xffff, @private=0xe0000000}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="1c000000000000000000000007000000890b040a0101027f00000100000000001c000000000000000000000008"], 0x40}, 0xfffe) 2.752248151s ago: executing program 0 (id=3549): syz_usb_connect$cdc_ncm(0x0, 0x72, &(0x7f0000000440)=ANY=[@ANYBLOB="1201000002000040257d15a4400001040001090260004201000000090400000102090000052406000105240000000d240f01000004eaffffff1e0006031a000008048002000905811765"], 0x0) r0 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) pwritev2(r0, &(0x7f0000000600)=[{&(0x7f00000004c0)="99", 0x1}], 0x1, 0xfffffc01, 0x81, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000140)) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x80000000) write$char_usb(r1, 0x0, 0x0) close(r1) 2.703427809s ago: executing program 5 (id=3550): r0 = socket$packet(0x11, 0x3, 0x300) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x74, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000f00)={'veth1_macvtap\x00', &(0x7f00000002c0)=@ethtool_cmd={0x35, 0xc5, 0x531, 0x8d, 0xf, 0x1, 0x6, 0x25, 0x5, 0xd, 0xad, 0x7, 0x80, 0x80, 0xfd, 0xf, [0x3, 0x10007c88]}}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6_vti0\x00'}) sendto$packet(r0, &(0x7f00000002c0)="1a040500bbff03fc01004788031c09", 0xf, 0x4000004, 0x0, 0x0) 2.395206414s ago: executing program 4 (id=3551): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeee, 0x8031, 0xffffffffffffffff, 0xffffc000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000000000/0x9000)=nil, 0x600002, 0x600002, 0x7, &(0x7f0000a00000/0x600000)=nil) r3 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x30000009}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x0) ioctl$TIOCSTI(0xffffffffffffffff, 0x5412, &(0x7f0000000040)=0x11) epoll_wait(r3, &(0x7f00000002c0)=[{}], 0x1, 0x8) ioprio_set$pid(0x2, 0x0, 0x0) unshare(0x60040000) 2.173542144s ago: executing program 5 (id=3552): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mount(0x0, &(0x7f00000001c0)='./sys\x00', &(0x7f0000000200)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/new_dev\x00', 0x1, 0x0) write(r0, &(0x7f0000000300)='7', 0x1) 900.67664ms ago: executing program 5 (id=3553): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) socket$nl_xfrm(0x10, 0x3, 0x6) accept(r1, 0x0, 0x0) 884.974699ms ago: executing program 4 (id=3554): prlimit64(0x0, 0xe, &(0x7f0000000340)={0x8, 0x408b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, &(0x7f0000000100), 0x40000006, 0x0) 154.324267ms ago: executing program 6 (id=3555): mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./dev\x00', &(0x7f0000000140)='devtmpfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000300)='./dev/md0\x00', 0x4002, 0x0) ioctl(r0, 0x400c0930, &(0x7f0000000500)) 145.544595ms ago: executing program 5 (id=3556): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys_sec\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys_sec\x00', &(0x7f0000000080)='securityfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys_sec/tomoyo/domain_policy\x00', 0x2, 0x0) read(r4, &(0x7f0000000100)=""/9, 0xfffffd87) 0s ago: executing program 0 (id=3557): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r0}, 0xc) kernel console output (not intermixed with test programs): t+0x45/0x100 [ 1036.265701][T15566] sctp_init_sock+0x947/0x1380 [ 1036.265745][T15566] sctp_v6_init_sock+0x16/0x70 [ 1036.265788][T15566] inet6_create+0xefb/0x1270 [ 1036.265824][T15566] ? inet6_create+0x80/0x1270 [ 1036.265865][T15566] __sock_create+0x4b3/0x9d0 [ 1036.265915][T15566] __sys_socket+0xd6/0x1b0 [ 1036.265957][T15566] __x64_sys_socket+0x7a/0x90 [ 1036.265995][T15566] do_syscall_64+0x166/0x520 [ 1036.266034][T15566] ? trace_irq_disable+0x3b/0x140 [ 1036.266060][T15566] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.266094][T15566] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1036.266120][T15566] RIP: 0033:0x7fe1fb79e159 [ 1036.266144][T15566] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1036.266166][T15566] RSP: 002b:00007fe1fc5b8028 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 1036.266195][T15566] RAX: ffffffffffffffda RBX: 00007fe1fba25fa0 RCX: 00007fe1fb79e159 [ 1036.266215][T15566] RDX: 0000000000000084 RSI: 0000000000000001 RDI: 000000000000000a [ 1036.266232][T15566] RBP: 00007fe1fb835024 R08: 0000000000000000 R09: 0000000000000000 [ 1036.266250][T15566] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1036.266267][T15566] R13: 00007fe1fba26038 R14: 00007fe1fba25fa0 R15: 00007fff41cebbb8 [ 1036.266317][T15566] [ 1037.897256][T15584] fuse: Bad value for 'fd' [ 1038.284632][T15603] FAULT_INJECTION: forcing a failure. [ 1038.284632][T15603] name failslab, interval 1, probability 0, space 0, times 0 [ 1038.284698][T15603] CPU: 1 UID: 0 PID: 15603 Comm: syz.5.2341 Tainted: G L syzkaller #0 PREEMPT(full) [ 1038.284733][T15603] Tainted: [L]=SOFTLOCKUP [ 1038.284742][T15603] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1038.284756][T15603] Call Trace: [ 1038.284767][T15603] [ 1038.284779][T15603] dump_stack_lvl+0xe8/0x150 [ 1038.284823][T15603] should_fail_ex+0x410/0x560 [ 1038.284869][T15603] should_failslab+0xa8/0x100 [ 1038.284900][T15603] ? ioctx_alloc+0xf6/0x830 [ 1038.284927][T15603] kmem_cache_alloc_noprof+0xa1/0x600 [ 1038.284971][T15603] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1038.285005][T15603] ? ioctx_alloc+0xf6/0x830 [ 1038.285038][T15603] ioctx_alloc+0xf6/0x830 [ 1038.285063][T15603] ? __might_fault+0xaf/0x130 [ 1038.285104][T15603] __se_sys_io_setup+0x7b/0x1d0 [ 1038.285145][T15603] do_syscall_64+0x166/0x520 [ 1038.285184][T15603] ? trace_irq_disable+0x3b/0x140 [ 1038.285210][T15603] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.285243][T15603] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1038.285271][T15603] RIP: 0033:0x7f61b2f9e159 [ 1038.285294][T15603] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1038.285316][T15603] RSP: 002b:00007f61b11f6028 EFLAGS: 00000246 ORIG_RAX: 00000000000000ce [ 1038.285344][T15603] RAX: ffffffffffffffda RBX: 00007f61b3226180 RCX: 00007f61b2f9e159 [ 1038.285364][T15603] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 1038.285382][T15603] RBP: 00007f61b3035024 R08: 0000000000000000 R09: 0000000000000000 [ 1038.285399][T15603] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1038.285415][T15603] R13: 00007f61b3226218 R14: 00007f61b3226180 R15: 00007ffdcfc783e8 [ 1038.285453][T15603] [ 1038.613593][T15607] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2344'. [ 1041.138355][T15631] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 1041.138393][T15631] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1041.147898][T15631] vhci_hcd vhci_hcd.0: Device attached [ 1041.526421][T15045] usb 51-1: new high-speed USB device number 2 using vhci_hcd [ 1041.701673][T15635] vhci_hcd: connection reset by peer [ 1041.948324][ T7207] vhci_hcd vhci_hcd.9: stop threads [ 1042.041930][ T7207] vhci_hcd vhci_hcd.9: release socket [ 1042.075207][ T7207] vhci_hcd vhci_hcd.9: disconnect device [ 1042.308089][T15641] hub 8-0:1.0: USB hub found [ 1042.313095][T15641] hub 8-0:1.0: 1 port detected [ 1042.770020][T15650] fuse: Bad value for 'fd' [ 1043.590804][T15672] netlink: 16 bytes leftover after parsing attributes in process `syz.9.2364'. [ 1044.079229][T15686] loop6: detected capacity change from 0 to 1024 [ 1044.611803][T15699] hub 8-0:1.0: USB hub found [ 1044.612079][T15699] hub 8-0:1.0: 1 port detected [ 1046.610219][T15045] vhci_hcd vhci_hcd.9: vhci_device speed not set [ 1047.812008][T15752] FAULT_INJECTION: forcing a failure. [ 1047.812008][T15752] name fail_futex, interval 1, probability 0, space 0, times 1 [ 1047.812076][T15752] CPU: 0 UID: 0 PID: 15752 Comm: syz.7.2389 Tainted: G L syzkaller #0 PREEMPT(full) [ 1047.812111][T15752] Tainted: [L]=SOFTLOCKUP [ 1047.812120][T15752] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1047.812135][T15752] Call Trace: [ 1047.812146][T15752] [ 1047.812158][T15752] dump_stack_lvl+0xe8/0x150 [ 1047.812201][T15752] should_fail_ex+0x410/0x560 [ 1047.812248][T15752] get_futex_key+0x1b4/0x1580 [ 1047.812279][T15752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.812314][T15752] ? kfree+0x4d/0x650 [ 1047.812350][T15752] ? import_iovec+0x73/0xa0 [ 1047.812384][T15752] ? __pfx_get_futex_key+0x10/0x10 [ 1047.812411][T15752] ? ___sys_sendmsg+0x2b5/0x360 [ 1047.812439][T15752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.812475][T15752] ? __lock_acquire+0x6df/0x2e50 [ 1047.812515][T15752] futex_wake+0x119/0x5f0 [ 1047.812560][T15752] ? __pfx_futex_wake+0x10/0x10 [ 1047.812617][T15752] do_futex+0x458/0x4e0 [ 1047.812653][T15752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.812686][T15752] ? __pfx_do_futex+0x10/0x10 [ 1047.812730][T15752] __se_sys_futex+0x3a8/0x450 [ 1047.812772][T15752] ? __pfx___se_sys_futex+0x10/0x10 [ 1047.812815][T15752] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1047.812845][T15752] ? __x64_sys_futex+0x21/0xf0 [ 1047.812883][T15752] do_syscall_64+0x166/0x520 [ 1047.812922][T15752] ? trace_irq_disable+0x3b/0x140 [ 1047.812948][T15752] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.812982][T15752] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1047.813009][T15752] RIP: 0033:0x7fa71259e159 [ 1047.813032][T15752] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1047.813055][T15752] RSP: 002b:00007fa7134290e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 1047.813082][T15752] RAX: ffffffffffffffda RBX: 00007fa712825fa8 RCX: 00007fa71259e159 [ 1047.813102][T15752] RDX: 00000000000f4240 RSI: 0000000000000081 RDI: 00007fa712825fac [ 1047.813120][T15752] RBP: 00007fa712825fa0 R08: 3fffffffffffffff R09: 0000000000000000 [ 1047.813153][T15752] R10: ffffffffffffffff R11: 0000000000000246 R12: 0000000000000000 [ 1047.813171][T15752] R13: 00007fa712826038 R14: 00007ffd88f3aed0 R15: 00007ffd88f3afb8 [ 1047.813211][T15752] [ 1048.110946][T15756] loop5: detected capacity change from 0 to 1024 [ 1050.378954][T15764] hub 8-0:1.0: USB hub found [ 1050.384589][T15764] hub 8-0:1.0: 1 port detected [ 1052.406564][T15776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1052.407259][T15776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1052.442351][T15767] jffs2: notice: (15767) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1053.660967][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.661061][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1060.534412][T15888] loop9: detected capacity change from 0 to 512 [ 1062.538633][T15045] usb 8-1: new high-speed USB device number 11 using dummy_hcd [ 1062.702112][T15045] usb 8-1: unable to get BOS descriptor or descriptor too short [ 1062.702188][T15045] usb 8-1: New USB device found, idVendor=05e1, idProduct=0408, bcdDevice=a4.d6 [ 1062.709848][T15045] usb 8-1: config 12 has an invalid interface number: 99 but max is 0 [ 1062.709877][T15045] usb 8-1: config 12 has no interface number 0 [ 1062.709923][T15045] usb 8-1: config 12 interface 99 altsetting 14 endpoint 0xD has invalid maxpacket 552, setting to 64 [ 1062.709982][T15045] usb 8-1: config 12 interface 99 has no altsetting 0 [ 1062.720446][T15045] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1062.720473][T15045] usb 8-1: Product: syz [ 1062.720491][T15045] usb 8-1: Manufacturer: syz [ 1062.720510][T15045] usb 8-1: SerialNumber: syz [ 1064.414884][T15926] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1065.937033][T15045] usb 8-1: no audio or video endpoints found [ 1065.956956][T15045] usb 8-1: USB disconnect, device number 11 [ 1065.978793][T15931] netlink: 168 bytes leftover after parsing attributes in process `syz.1.2423'. [ 1067.626773][T15951] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2425'. [ 1069.225540][T15966] netlink: 'syz.9.2441': attribute type 1 has an invalid length. [ 1069.225655][T15966] netlink: 'syz.9.2441': attribute type 1 has an invalid length. [ 1071.243835][T16004] loop5: detected capacity change from 0 to 512 [ 1071.272075][T16004] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1071.375325][T16004] EXT4-fs (loop5): 1 truncate cleaned up [ 1071.416461][T16004] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1072.458003][T16021] loop9: detected capacity change from 0 to 2048 [ 1073.363304][T16010] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1073.414721][T16010] EXT4-fs (loop5): Remounting filesystem read-only [ 1073.417847][T16007] md: array md0 already initialised! [ 1073.436137][T16021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1073.584387][T14414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1077.132834][T16080] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2465'. [ 1078.411629][T16085] loop5: detected capacity change from 0 to 512 [ 1078.437769][T16085] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1078.499668][T16085] EXT4-fs (loop5): 1 truncate cleaned up [ 1078.511385][T16085] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1079.050025][T14414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1083.048465][T16158] netlink: 'syz.9.2458': attribute type 29 has an invalid length. [ 1083.071785][T16158] netlink: 'syz.9.2458': attribute type 29 has an invalid length. [ 1083.075297][T16158] netlink: 'syz.9.2458': attribute type 29 has an invalid length. [ 1085.760450][T16171] loop5: detected capacity change from 0 to 512 [ 1085.801126][T16171] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 1087.337745][T16171] EXT4-fs (loop5): 1 truncate cleaned up [ 1087.368763][T16171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1088.041724][T14414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1088.775956][T16196] loop6: detected capacity change from 0 to 2048 [ 1089.786751][T16196] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1092.781951][T16241] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2505'. [ 1093.233004][T16243] loop5: detected capacity change from 0 to 2048 [ 1094.167278][T16243] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1094.635994][T16257] jffs2: notice: (16257) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1094.819275][T16255] syzkaller0: entered promiscuous mode [ 1094.819324][T16255] syzkaller0: entered allmulticast mode [ 1095.312607][ T5271] 8021q: adding VLAN 0 to HW filter on device eth12 [ 1097.196636][T16286] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2515'. [ 1099.685599][T16312] loop7: detected capacity change from 0 to 2048 [ 1100.629091][T16312] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1100.773843][T16314] tap0: tun_chr_ioctl cmd 1074025672 [ 1100.773900][T16314] tap0: ignored: set checksum disabled [ 1100.883078][T16322] loop9: detected capacity change from 0 to 512 [ 1103.318018][T16328] jffs2: notice: (16328) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1104.702267][T16342] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2532'. [ 1104.754114][T16344] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1104.794115][T16344] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1105.043472][T16349] netlink: 'syz.1.2534': attribute type 10 has an invalid length. [ 1105.326981][T16349] bond0: (slave bond_slave_0): Releasing backup interface [ 1105.345719][T16349] team0: Port device bond_slave_0 added [ 1106.182198][T16363] loop6: detected capacity change from 0 to 2048 [ 1107.099171][T16363] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1107.407271][T16370] mmap: syz.0.2540 (16370) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 1107.700775][T16372] syzkaller0: entered promiscuous mode [ 1107.706448][T16372] syzkaller0: entered allmulticast mode [ 1110.446056][ T5271] 8021q: adding VLAN 0 to HW filter on device eth13 [ 1110.765235][T16402] netlink: 'syz.5.2549': attribute type 29 has an invalid length. [ 1110.773815][T16402] netlink: 'syz.5.2549': attribute type 29 has an invalid length. [ 1110.818843][T16402] netlink: 'syz.5.2549': attribute type 29 has an invalid length. [ 1112.765220][T16419] jffs2: notice: (16419) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1115.207773][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.207866][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.591144][T16445] syzkaller0: entered promiscuous mode [ 1115.591197][T16445] syzkaller0: entered allmulticast mode [ 1116.203399][T16457] loop7: detected capacity change from 0 to 2048 [ 1117.138391][T16457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1117.545992][T16464] FAULT_INJECTION: forcing a failure. [ 1117.545992][T16464] name failslab, interval 1, probability 0, space 0, times 0 [ 1117.546065][T16464] CPU: 1 UID: 0 PID: 16464 Comm: syz.5.2566 Tainted: G L syzkaller #0 PREEMPT(full) [ 1117.546103][T16464] Tainted: [L]=SOFTLOCKUP [ 1117.546113][T16464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1117.546129][T16464] Call Trace: [ 1117.546140][T16464] [ 1117.546152][T16464] dump_stack_lvl+0xe8/0x150 [ 1117.546195][T16464] should_fail_ex+0x410/0x560 [ 1117.546243][T16464] should_failslab+0xa8/0x100 [ 1117.546277][T16464] __kmalloc_noprof+0xfe/0x720 [ 1117.546318][T16464] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1117.546355][T16464] ? udp_init_sock+0x198/0x3b0 [ 1117.546382][T16464] ? udp_init_sock+0x198/0x3b0 [ 1117.546416][T16464] udp_init_sock+0x198/0x3b0 [ 1117.546442][T16464] ? sock_init_data_uid+0x6e4/0x980 [ 1117.546483][T16464] inet_create+0xd1c/0xff0 [ 1117.546521][T16464] ? inet_create+0x9d/0xff0 [ 1117.546564][T16464] __sock_create+0x4b3/0x9d0 [ 1117.546617][T16464] udp_sock_create4+0xc5/0x480 [ 1117.546656][T16464] ? __pfx_udp_sock_create4+0x10/0x10 [ 1117.546697][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.546739][T16464] rxrpc_lookup_local+0xd16/0x15d0 [ 1117.546790][T16464] ? __pfx_rxrpc_lookup_local+0x10/0x10 [ 1117.546845][T16464] ? rxrpc_sendmsg+0x11e/0x6b0 [ 1117.546883][T16464] ? __local_bh_enable_ip+0xd6/0x140 [ 1117.546918][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.546954][T16464] rxrpc_sendmsg+0x34b/0x6b0 [ 1117.546997][T16464] ? __pfx_rxrpc_sendmsg+0x10/0x10 [ 1117.547036][T16464] sock_sendmsg_nosec+0x13a/0x180 [ 1117.547078][T16464] ____sys_sendmsg+0x54e/0x850 [ 1117.547114][T16464] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1117.547155][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.547187][T16464] ? import_iovec+0x73/0xa0 [ 1117.547221][T16464] ___sys_sendmsg+0x2a5/0x360 [ 1117.547249][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.547280][T16464] ? __lock_acquire+0x6df/0x2e50 [ 1117.547313][T16464] ? __pfx____sys_sendmsg+0x10/0x10 [ 1117.547349][T16464] ? futex_wait+0x2a2/0x390 [ 1117.547424][T16464] ? __fget_files+0x2a/0x420 [ 1117.547458][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.547489][T16464] ? __fget_files+0x3a2/0x420 [ 1117.547538][T16464] __x64_sys_sendmsg+0x1b1/0x290 [ 1117.547567][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.547602][T16464] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 1117.547643][T16464] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1117.547685][T16464] do_syscall_64+0x166/0x520 [ 1117.547723][T16464] ? trace_irq_disable+0x3b/0x140 [ 1117.547750][T16464] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.547785][T16464] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1117.547811][T16464] RIP: 0033:0x7f61b2f9e159 [ 1117.547835][T16464] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1117.547858][T16464] RSP: 002b:00007f61b3db2028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1117.547886][T16464] RAX: ffffffffffffffda RBX: 00007f61b3225fa0 RCX: 00007f61b2f9e159 [ 1117.547906][T16464] RDX: 00000000200008c0 RSI: 0000200000000280 RDI: 0000000000000005 [ 1117.547924][T16464] RBP: 00007f61b3035024 R08: 0000000000000000 R09: 0000000000000000 [ 1117.547941][T16464] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1117.547958][T16464] R13: 00007f61b3226038 R14: 00007f61b3225fa0 R15: 00007ffdcfc783e8 [ 1117.547999][T16464] [ 1117.652426][ T5271] 8021q: adding VLAN 0 to HW filter on device eth14 [ 1117.858640][T16467] netlink: 'syz.1.2568': attribute type 29 has an invalid length. [ 1117.945843][T16472] netlink: 'syz.1.2568': attribute type 29 has an invalid length. [ 1120.079097][T16494] jffs2: notice: (16494) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1122.309492][T16514] usbip-vudc usbip-vudc.0: gadget not bound [ 1124.090678][ T5271] 8021q: adding VLAN 0 to HW filter on device eth15 [ 1124.758444][T16557] jffs2: notice: (16557) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1125.062733][T16567] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 1125.185964][T16571] loop9: detected capacity change from 0 to 512 [ 1127.690758][T16613] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 1130.348181][T16636] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2619'. [ 1130.809017][T16654] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 1130.831495][T16656] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2627'. [ 1132.302038][T16679] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2631'. [ 1133.950312][T16666] loop7: detected capacity change from 0 to 32768 [ 1134.674866][T16666] workqueue: Failed to create a rescuer kthread for wq "ocfs2_wq": -EINTR [ 1134.685014][T16666] (syz.7.2629,16666,1):ocfs2_initialize_super:2225 ERROR: status = -12 [ 1134.686573][T16666] (syz.7.2629,16666,1):ocfs2_fill_super:1177 ERROR: status = -12 [ 1134.878336][T16716] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 1142.395920][T16765] loop9: detected capacity change from 0 to 2048 [ 1143.353728][T16765] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1143.902667][T16778] loop6: detected capacity change from 0 to 512 [ 1150.857346][T16822] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1151.816738][T16839] usbip-vudc usbip-vudc.0: Expecting SOCK_STREAM - found 3 [ 1152.226687][T16855] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2675'. [ 1158.942396][T16878] loop5: detected capacity change from 0 to 2048 [ 1159.885584][T16878] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1161.345550][T14693] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1161.351439][T14693] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1161.356850][T14693] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1161.371809][T14693] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1161.381099][T14693] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.431275][T13426] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1161.440256][T13426] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1161.447725][T13426] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1161.449804][T13426] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1161.450464][T13426] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1161.570527][T16895] usbip-vudc usbip-vudc.0: failed to lookup sock [ 1161.955813][T14693] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1161.964512][T14693] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1161.980130][T14693] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1161.991526][T14693] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1162.002612][T14693] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1163.519836][T13426] Bluetooth: hci3: command tx timeout [ 1164.053221][T13426] Bluetooth: hci7: command tx timeout [ 1164.259718][T10112] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1165.572894][T13426] Bluetooth: hci3: command tx timeout [ 1166.044669][T16938] Bluetooth: MGMT ver 1.23 [ 1166.223163][T13426] Bluetooth: hci7: command tx timeout [ 1166.457489][T10112] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1166.790884][T10112] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.087932][T10112] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1167.530300][ T31] audit: type=1804 audit(2000000303.256:221): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.5.2696" name="bus" dev="ramfs" ino=52319 res=1 errno=0 [ 1167.573512][ T31] audit: type=1804 audit(2000000303.306:222): pid=16964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.5.2696" name="bus" dev="ramfs" ino=52319 res=1 errno=0 [ 1167.653116][T13426] Bluetooth: hci3: command tx timeout [ 1168.293412][T13426] Bluetooth: hci7: command tx timeout [ 1168.955597][T16979] loop9: detected capacity change from 0 to 2048 [ 1169.922858][T13426] Bluetooth: hci3: command tx timeout [ 1169.953513][T16979] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1170.070605][T16977] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1170.070653][T16977] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 1170.168106][T16977] Bluetooth: hci7: Opcode 0x0c1a failed: -4 [ 1170.168154][T16977] Bluetooth: hci7: Error when powering off device on rfkill (-4) [ 1170.245913][T10112] bridge_slave_1: left allmulticast mode [ 1170.245969][T10112] bridge_slave_1: left promiscuous mode [ 1170.246190][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 1170.372566][T10112] bridge_slave_0: left allmulticast mode [ 1170.372605][T10112] bridge_slave_0: left promiscuous mode [ 1170.372844][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 1170.650750][T16989] usbip-vudc usbip-vudc.0: failed to lookup sock [ 1172.228892][T10112] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1172.311992][T10112] bond0 (unregistering): Released all slaves [ 1172.622945][T17000] loop6: detected capacity change from 0 to 512 [ 1176.680503][T17024] loop9: detected capacity change from 0 to 2048 [ 1177.729776][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.736437][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.803582][T17024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1179.199377][T16891] bridge0: port 1(bridge_slave_0) entered blocking state [ 1179.199509][T16891] bridge0: port 1(bridge_slave_0) entered disabled state [ 1179.199663][T16891] bridge_slave_0: entered allmulticast mode [ 1179.220383][T16891] bridge_slave_0: entered promiscuous mode [ 1179.373757][T10112] hsr_slave_0: left promiscuous mode [ 1179.379589][T10112] hsr_slave_1: left promiscuous mode [ 1179.380540][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1179.380564][T10112] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1179.394440][T10112] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1179.394462][T10112] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1179.431939][T10112] veth1_macvtap: left promiscuous mode [ 1179.437718][T10112] veth0_macvtap: left promiscuous mode [ 1179.437852][T10112] veth1_vlan: left promiscuous mode [ 1179.437925][T10112] veth0_vlan: left promiscuous mode [ 1179.552201][T17034] loop6: detected capacity change from 0 to 32768 [ 1179.572437][T17034] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.2713 (17034) [ 1179.606203][T17034] BTRFS info (device loop6): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1179.618927][T17034] BTRFS info (device loop6): using crc32c checksum algorithm [ 1179.720430][T17034] BTRFS info (device loop6): enabling ssd optimizations [ 1179.727693][T17034] BTRFS info (device loop6): turning on flush-on-commit [ 1179.735775][T17034] BTRFS info (device loop6): enabling free space tree [ 1179.735802][T17034] BTRFS info (device loop6): force zlib compression, level 3 [ 1179.735828][T17034] BTRFS info (device loop6): max_inline set to 4096 [ 1179.937687][T14475] BTRFS info (device loop6): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 1182.945067][T10112] team0 (unregistering): Port device team_slave_1 removed [ 1182.995988][T10112] team0 (unregistering): Port device team_slave_0 removed [ 1183.098682][T10112] team0 (unregistering): Port device bond_slave_0 removed [ 1184.933912][T16891] bridge0: port 2(bridge_slave_1) entered blocking state [ 1184.934047][T16891] bridge0: port 2(bridge_slave_1) entered disabled state [ 1184.934215][T16891] bridge_slave_1: entered allmulticast mode [ 1184.936365][T16891] bridge_slave_1: entered promiscuous mode [ 1185.040169][T17060] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1186.720378][T16891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1186.896739][T16901] bridge0: port 1(bridge_slave_0) entered blocking state [ 1186.897118][T16901] bridge0: port 1(bridge_slave_0) entered disabled state [ 1186.897278][T16901] bridge_slave_0: entered allmulticast mode [ 1186.910771][T16901] bridge_slave_0: entered promiscuous mode [ 1186.935306][T16891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1186.945471][T16901] bridge0: port 2(bridge_slave_1) entered blocking state [ 1186.945679][T16901] bridge0: port 2(bridge_slave_1) entered disabled state [ 1186.945815][T16901] bridge_slave_1: entered allmulticast mode [ 1186.956980][T16901] bridge_slave_1: entered promiscuous mode [ 1187.153453][T16891] team0: Port device team_slave_0 added [ 1187.158717][T16901] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1187.164174][T16891] team0: Port device team_slave_1 added [ 1187.253860][T16901] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1187.449146][T16891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.449191][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.449224][T16891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.462277][T16901] team0: Port device team_slave_0 added [ 1187.466304][T16891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.466320][T16891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.466353][T16891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1187.479683][T16901] team0: Port device team_slave_1 added [ 1187.744903][T16901] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1187.745051][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.745083][T16901] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1187.792164][T16891] hsr_slave_0: entered promiscuous mode [ 1187.800428][T16891] hsr_slave_1: entered promiscuous mode [ 1187.813204][T16901] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1187.813247][T16901] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1187.814000][T16901] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1188.169587][T16901] hsr_slave_0: entered promiscuous mode [ 1188.170709][T16901] hsr_slave_1: entered promiscuous mode [ 1188.187414][T16901] debugfs: 'hsr0' already exists in 'hsr' [ 1188.193607][T16901] Cannot create hsr debugfs directory [ 1189.575742][T17117] loop6: detected capacity change from 0 to 512 [ 1193.092921][T17134] loop5: detected capacity change from 0 to 2048 [ 1194.128083][T17134] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1194.639521][ T5271] 8021q: adding VLAN 0 to HW filter on device eth16 [ 1196.051340][T16901] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1196.151320][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1196.157402][T16901] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1196.225280][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1196.287153][T16901] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1196.377513][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1196.383262][T16901] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1196.481639][T16901] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1199.163951][T16901] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1199.319366][T16901] 8021q: adding VLAN 0 to HW filter on device team0 [ 1199.424374][ T9802] bridge0: port 1(bridge_slave_0) entered blocking state [ 1199.424532][ T9802] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1199.516884][ T174] bridge0: port 2(bridge_slave_1) entered blocking state [ 1199.517037][ T174] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1199.667969][T17194] loop9: detected capacity change from 0 to 512 [ 1201.161827][T17195] loop5: detected capacity change from 0 to 2048 [ 1201.195213][T17195] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1203.974469][T16891] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1204.011131][T16891] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1204.012045][T16891] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1204.094628][T16891] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1204.125825][T16891] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1204.224692][T16891] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1204.240992][T16891] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1204.276053][T16891] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1204.836901][T16891] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1204.895353][T16891] 8021q: adding VLAN 0 to HW filter on device team0 [ 1204.937574][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1204.937728][T10112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1204.984870][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1204.984987][T10112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1206.540644][T16901] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1206.802429][T16901] veth0_vlan: entered promiscuous mode [ 1206.849985][T16901] veth1_vlan: entered promiscuous mode [ 1206.912975][T17250] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2754'. [ 1207.074253][T16901] veth0_macvtap: entered promiscuous mode [ 1207.128660][T16901] veth1_macvtap: entered promiscuous mode [ 1207.260255][T16901] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1207.313858][T16901] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1207.370957][ T1468] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.371034][ T1468] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.371097][ T1468] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.371145][ T1468] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1207.485808][T16891] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1208.277579][T17271] loop5: detected capacity change from 0 to 2048 [ 1209.198232][T17271] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1209.337222][T17272] vlan3: entered promiscuous mode [ 1209.337264][T17272] hsr0: entered promiscuous mode [ 1209.360962][T17272] vlan3: entered allmulticast mode [ 1209.361002][T17272] hsr0: entered allmulticast mode [ 1209.361041][T17272] hsr_slave_0: entered allmulticast mode [ 1209.361067][T17272] hsr_slave_1: entered allmulticast mode [ 1209.387920][T16891] veth0_vlan: entered promiscuous mode [ 1209.556329][ T6716] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.556374][ T6716] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1209.577058][T16891] veth1_vlan: entered promiscuous mode [ 1209.909032][ T174] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1209.909078][ T174] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1210.132756][T16891] veth0_macvtap: entered promiscuous mode [ 1210.157760][T16891] veth1_macvtap: entered promiscuous mode [ 1210.286015][T16891] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1210.345673][T16891] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1210.459095][ T7645] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.522020][ T5959] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.523661][ T7645] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1210.523707][ T7645] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1211.996251][T10112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1211.996290][T10112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1212.350496][ T7207] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1212.358461][ T7207] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1213.184563][T17312] loop6: detected capacity change from 0 to 512 [ 1216.134685][T17323] loop6: detected capacity change from 0 to 2048 [ 1217.087521][T17323] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1217.194766][T17317] kAFS: unable to lookup cell 'syz0' [ 1221.544377][ T30] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 1221.930116][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1221.947125][ T30] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1221.960867][ T30] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1221.960919][ T30] usb 6-1: config 179 has no interface number 0 [ 1221.960981][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1221.961020][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1221.961060][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1221.961099][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1221.961134][ T30] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1221.961174][ T30] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1221.961219][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1222.156787][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input33 [ 1222.322101][ T30] usb 6-1: USB disconnect, device number 26 [ 1222.322208][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1222.780977][T17375] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2783'. [ 1224.361753][T17383] loop2: detected capacity change from 0 to 2048 [ 1225.408376][T17383] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1226.259776][T17392] FAULT_INJECTION: forcing a failure. [ 1226.259776][T17392] name failslab, interval 1, probability 0, space 0, times 0 [ 1226.259840][T17392] CPU: 1 UID: 0 PID: 17392 Comm: syz.0.2785 Tainted: G L syzkaller #0 PREEMPT(full) [ 1226.259881][T17392] Tainted: [L]=SOFTLOCKUP [ 1226.259892][T17392] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1226.259908][T17392] Call Trace: [ 1226.259918][T17392] [ 1226.259930][T17392] dump_stack_lvl+0xe8/0x150 [ 1226.259972][T17392] should_fail_ex+0x410/0x560 [ 1226.260020][T17392] should_failslab+0xa8/0x100 [ 1226.260053][T17392] ? security_file_alloc+0x34/0x310 [ 1226.260092][T17392] kmem_cache_alloc_noprof+0xa1/0x600 [ 1226.260130][T17392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.260162][T17392] ? rcu_is_watching+0x16/0xb0 [ 1226.260194][T17392] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1226.260224][T17392] ? security_file_alloc+0x34/0x310 [ 1226.260270][T17392] security_file_alloc+0x34/0x310 [ 1226.260310][T17392] init_file+0x90/0x2b0 [ 1226.260343][T17392] alloc_empty_file+0x74/0x1d0 [ 1226.260377][T17392] dentry_open+0x44/0xa0 [ 1226.260407][T17392] vfs_open_tree+0x311/0x3d0 [ 1226.260437][T17392] ? __pfx_vfs_open_tree+0x10/0x10 [ 1226.260475][T17392] __x64_sys_open_tree+0x96/0x110 [ 1226.260512][T17392] do_syscall_64+0x166/0x520 [ 1226.260552][T17392] ? trace_irq_disable+0x3b/0x140 [ 1226.260577][T17392] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.260617][T17392] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1226.260645][T17392] RIP: 0033:0x7f2df619e159 [ 1226.260668][T17392] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1226.260690][T17392] RSP: 002b:00007f2df7080028 EFLAGS: 00000246 ORIG_RAX: 00000000000001ac [ 1226.260718][T17392] RAX: ffffffffffffffda RBX: 00007f2df6425fa0 RCX: 00007f2df619e159 [ 1226.260739][T17392] RDX: 0000000000000000 RSI: 00002000000003c0 RDI: ffffffffffffff9c [ 1226.260757][T17392] RBP: 00007f2df6235024 R08: 0000000000000000 R09: 0000000000000000 [ 1226.260775][T17392] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1226.260792][T17392] R13: 00007f2df6426038 R14: 00007f2df6425fa0 R15: 00007ffdb8963958 [ 1226.260832][T17392] [ 1226.299492][T15037] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 1226.429558][T15037] usb 6-1: device descriptor read/64, error -71 [ 1226.670803][T15037] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1226.799501][T15037] usb 6-1: device descriptor read/64, error -71 [ 1226.909951][T15037] usb usb6-port1: attempt power cycle [ 1227.249675][T15037] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1227.270504][T15037] usb 6-1: device descriptor read/8, error -71 [ 1227.512576][T15037] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 1227.534286][T15037] usb 6-1: device descriptor read/8, error -71 [ 1227.640059][T15037] usb usb6-port1: unable to enumerate USB device [ 1228.156571][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.169987][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1228.298286][T17430] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1228.304358][T17430] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1233.287148][ T31] audit: type=1804 audit(2000000369.010:223): pid=17481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2809" name="bus" dev="ramfs" ino=54801 res=1 errno=0 [ 1233.322720][ T31] audit: type=1804 audit(2000000369.050:224): pid=17481 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2809" name="bus" dev="ramfs" ino=54801 res=1 errno=0 [ 1235.379858][T15037] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 1235.509722][T15037] usb 3-1: device descriptor read/64, error -71 [ 1235.688582][T17505] loop9: detected capacity change from 0 to 512 [ 1235.717041][T17505] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #17: comm syz.9.2815: iget: immutable or append flags not allowed on symlinks [ 1235.731792][T17505] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1235.737366][T17505] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.2815: couldn't read orphan inode 17 (err -117) [ 1235.737424][T17505] loop9: lost filesystem error report for type 5 error -117 [ 1235.746795][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 1235.746823][ C1] EXT4-fs (loop9): initial error at time 2000000371: ext4_orphan_get:1403: inode 17 [ 1235.746860][ C1] EXT4-fs (loop9): last error at time 2000000371: ext4_orphan_get:1408 [ 1235.749111][T15037] usb 3-1: new high-speed USB device number 18 using dummy_hcd [ 1235.818052][T17505] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1235.898926][T15037] usb 3-1: device descriptor read/64, error -71 [ 1235.938907][ T30] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 1235.977874][ T9906] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1236.037364][T15037] usb usb3-port1: attempt power cycle [ 1236.109851][ T30] usb 4-1: Using ep0 maxpacket: 8 [ 1236.124894][ T30] usb 4-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1236.156708][ T30] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 1236.156760][ T30] usb 4-1: config 179 has no interface number 0 [ 1236.156826][ T30] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1236.156866][ T30] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1236.156908][ T30] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1236.156948][ T30] usb 4-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1236.156983][ T30] usb 4-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1236.157025][ T30] usb 4-1: config 179 interface 65 has no altsetting 0 [ 1236.157072][ T30] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1236.274227][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:179.65/input/input34 [ 1236.389191][T15037] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 1236.516771][ T9] usb 4-1: USB disconnect, device number 16 [ 1236.516886][ C1] xpad 4-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1236.665690][T15037] usb 3-1: device descriptor read/8, error -71 [ 1236.714757][T17523] PF_CAN: dropped non conform CAN XL skbuff: dev type 280, len 40 [ 1237.630490][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2828'. [ 1237.630614][T17547] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2828'. [ 1237.797618][ T31] audit: type=1804 audit(2000000373.520:225): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.2829" name="bus" dev="ramfs" ino=54878 res=1 errno=0 [ 1237.816178][ T31] audit: type=1804 audit(2000000373.540:226): pid=17554 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.2829" name="bus" dev="ramfs" ino=54878 res=1 errno=0 [ 1237.989304][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1237.989410][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.202607][T17560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2833'. [ 1240.748757][ T9] usb 3-1: new high-speed USB device number 21 using dummy_hcd [ 1240.835325][T17576] loop3: detected capacity change from 0 to 512 [ 1240.878610][ T9] usb 3-1: device descriptor read/64, error -71 [ 1242.528577][ T30] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 1242.598790][ T9] usb 3-1: new high-speed USB device number 22 using dummy_hcd [ 1242.689020][ T30] usb 6-1: Using ep0 maxpacket: 8 [ 1242.696273][ T30] usb 6-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1242.711261][ T30] usb 6-1: config 179 has an invalid interface number: 65 but max is 0 [ 1242.711308][ T30] usb 6-1: config 179 has no interface number 0 [ 1242.711373][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1242.711414][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1242.711455][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1242.711494][ T30] usb 6-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1242.711530][ T30] usb 6-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1242.711569][ T30] usb 6-1: config 179 interface 65 has no altsetting 0 [ 1242.711613][ T30] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1242.729070][ T9] usb 3-1: device descriptor read/64, error -71 [ 1242.847736][ T9] usb usb3-port1: attempt power cycle [ 1242.863300][ T30] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:179.65/input/input35 [ 1242.956544][T17589] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.2842'. [ 1243.043403][ T30] usb 6-1: USB disconnect, device number 31 [ 1243.043497][ C1] xpad 6-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1243.195528][ T9] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 1243.251016][ T9] usb 3-1: device descriptor read/8, error -71 [ 1243.476398][T17602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2845'. [ 1243.476513][T17602] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2845'. [ 1244.108497][ T5848] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 1244.269124][ T5848] usb 7-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1244.270202][ T5848] usb 7-1: config 0 has an invalid interface number: 50 but max is 0 [ 1244.270255][ T5848] usb 7-1: config 0 has no interface number 0 [ 1244.270307][ T5848] usb 7-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1244.282402][ T5848] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1244.282429][ T5848] usb 7-1: Product: syz [ 1244.282447][ T5848] usb 7-1: Manufacturer: syz [ 1244.282465][ T5848] usb 7-1: SerialNumber: syz [ 1244.308751][ T5848] usb 7-1: config 0 descriptor?? [ 1245.155661][ T5848] yurex 7-1:0.50: USB YUREX device now attached to Yurex #0 [ 1245.206417][ T31] audit: type=1804 audit(2000000380.931:227): pid=17622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2850" name="bus" dev="ramfs" ino=55463 res=1 errno=0 [ 1245.230362][ T31] audit: type=1804 audit(2000000380.961:228): pid=17622 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.2850" name="bus" dev="ramfs" ino=55463 res=1 errno=0 [ 1245.639695][T10757] usb 7-1: USB disconnect, device number 13 [ 1245.650738][T10757] yurex 7-1:0.50: USB YUREX #0 now disconnected [ 1248.639432][T17649] mac80211_hwsim hwsim3 wlan1: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 1249.208551][T15045] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 1249.462723][ T9] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 1249.539471][T15045] usb 7-1: Using ep0 maxpacket: 8 [ 1249.540304][T15045] usb 7-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 1249.541964][T15045] usb 7-1: config 179 has an invalid interface number: 65 but max is 0 [ 1249.542002][T15045] usb 7-1: config 179 has no interface number 0 [ 1249.542064][T15045] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 1249.542104][T15045] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 1249.542144][T15045] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1249.542189][T15045] usb 7-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1249.542223][T15045] usb 7-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 1249.542262][T15045] usb 7-1: config 179 interface 65 has no altsetting 0 [ 1249.542307][T15045] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1249.595272][T15045] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:179.65/input/input36 [ 1249.598299][ T9] usb 6-1: device descriptor read/64, error -71 [ 1249.726187][T17673] netlink: 916 bytes leftover after parsing attributes in process `syz.9.2863'. [ 1249.726224][T17673] netlink: 916 bytes leftover after parsing attributes in process `syz.9.2863'. [ 1249.839068][ T9] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 1249.864517][T15045] usb 7-1: USB disconnect, device number 14 [ 1249.864581][ C0] xpad 7-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 1249.969589][ T9] usb 6-1: device descriptor read/64, error -71 [ 1250.078391][ T9] usb usb6-port1: attempt power cycle [ 1250.338913][ T31] audit: type=1804 audit(2000000386.061:229): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2865" name="bus" dev="ramfs" ino=55037 res=1 errno=0 [ 1250.365196][ T31] audit: type=1804 audit(2000000386.091:230): pid=17685 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2865" name="bus" dev="ramfs" ino=55037 res=1 errno=0 [ 1250.428379][ T9] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 1250.450701][ T9] usb 6-1: device descriptor read/8, error -71 [ 1250.688894][ T9] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 1250.709506][ T9] usb 6-1: device descriptor read/8, error -71 [ 1250.971708][T17693] loop6: detected capacity change from 0 to 32768 [ 1250.977889][ T9] usb usb6-port1: unable to enumerate USB device [ 1251.028441][T17693] XFS (loop6): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1251.273462][T17693] XFS (loop6): Ending clean mount [ 1251.285841][T17693] XFS (loop6): Quotacheck needed: Please wait. [ 1252.700226][T17713] loop2: detected capacity change from 0 to 512 [ 1252.897819][T17693] XFS (loop6): Quotacheck: Done. [ 1254.830344][T14475] XFS (loop6): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1254.850837][T17722] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2872'. [ 1255.402853][T17730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2876'. [ 1255.504573][T17734] netlink: 908 bytes leftover after parsing attributes in process `syz.9.2877'. [ 1255.513861][T17734] netlink: 908 bytes leftover after parsing attributes in process `syz.9.2877'. [ 1258.825497][T17769] @0Ł: renamed from dummy0 [ 1259.052883][T17776] loop3: detected capacity change from 0 to 512 [ 1261.730153][ T31] audit: type=1804 audit(2000000397.462:231): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.2902" name="bus" dev="ramfs" ino=55212 res=1 errno=0 [ 1261.735590][ T31] audit: type=1804 audit(2000000397.462:232): pid=17816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.2902" name="bus" dev="ramfs" ino=55212 res=1 errno=0 [ 1261.873664][T17818] jffs2: notice: (17818) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1262.708442][T17834] device-mapper: ioctl: Invalid data size in the ioctl structure: 1866006840 [ 1262.768590][T17835] loop3: detected capacity change from 0 to 2048 [ 1262.786198][T17835] ext4: Unknown parameter 'measure' [ 1263.077026][T17842] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2910'. [ 1265.072617][T17857] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2915'. [ 1265.445870][T17867] loop9: detected capacity change from 0 to 128 [ 1265.516337][T17867] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 1265.540873][T17867] ext4 filesystem being mounted at /363/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 1266.139854][T14693] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1266.147604][T14693] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1266.342825][T14693] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1266.871587][T14693] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1266.886775][T14693] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1266.957215][T13426] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1266.964633][T13426] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1266.981056][T13426] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1266.993981][T13426] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1267.008822][T13426] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1267.091050][ T31] audit: type=1804 audit(2000000402.812:233): pid=17885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2922" name="bus" dev="ramfs" ino=56352 res=1 errno=0 [ 1267.116935][ T9906] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 1267.447515][T17894] @0Ł: renamed from dummy0 (while UP) [ 1267.627629][T17897] loop2: detected capacity change from 0 to 128 [ 1267.642030][T17897] FAT-fs (loop2): data area starts beyond volume (33 > 0) [ 1267.642079][T17897] FAT-fs (loop2): Can't find a valid FAT filesystem [ 1268.560805][T17911] binder: 17910:17911 ioctl c0306201 0 returned -14 [ 1268.814773][T17914] binder: 17910:17914 ioctl c0306201 0 returned -14 [ 1268.868849][T17902] loop9: detected capacity change from 0 to 256 [ 1268.873291][T17902] vfat: Unknown parameter 'rų¶°' [ 1269.087387][T13426] Bluetooth: hci1: command tx timeout [ 1271.177421][T13426] Bluetooth: hci1: command tx timeout [ 1271.499520][T17960] loop2: detected capacity change from 0 to 1024 [ 1271.535522][T17960] hfsplus: failed to load extents file [ 1271.558741][T17961] loop3: detected capacity change from 0 to 512 [ 1271.688491][T17961] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1271.884297][T17961] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1272.258598][ T5271] 8021q: adding VLAN 0 to HW filter on device eth6 [ 1272.362286][T16901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.809761][T17986] binder: 17983:17986 ioctl c0306201 0 returned -14 [ 1272.884811][T17991] binder: 17983:17991 ioctl c0306201 0 returned -14 [ 1273.259283][T13426] Bluetooth: hci1: command tx timeout [ 1274.044888][T13751] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1275.346867][T13426] Bluetooth: hci1: command tx timeout [ 1275.508332][T17877] bridge0: port 1(bridge_slave_0) entered blocking state [ 1275.508467][T17877] bridge0: port 1(bridge_slave_0) entered disabled state [ 1275.508643][T17877] bridge_slave_0: entered allmulticast mode [ 1275.515767][T17877] bridge_slave_0: entered promiscuous mode [ 1275.535292][T17877] bridge0: port 2(bridge_slave_1) entered blocking state [ 1275.537287][T17877] bridge0: port 2(bridge_slave_1) entered disabled state [ 1275.537443][T17877] bridge_slave_1: entered allmulticast mode [ 1275.562567][T17877] bridge_slave_1: entered promiscuous mode [ 1276.266158][T18033] loop9: detected capacity change from 0 to 128 [ 1276.316175][T17877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1276.355176][T17877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1276.372326][T18037] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2960'. [ 1276.667599][T18037] bridge0: port 2(bridge_slave_1) entered disabled state [ 1276.668576][T18037] bridge0: port 1(bridge_slave_0) entered disabled state [ 1277.461801][T18047] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1279.031551][T17877] team0: Port device team_slave_0 added [ 1279.034813][T17877] team0: Port device team_slave_1 added [ 1279.185840][T17877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1279.185884][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.185942][T17877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1279.573199][T17877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1279.581659][T17877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1279.608267][T17877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1279.751136][T17877] hsr_slave_0: entered promiscuous mode [ 1279.765001][T17877] hsr_slave_1: entered promiscuous mode [ 1279.772474][T17877] debugfs: 'hsr0' already exists in 'hsr' [ 1279.778412][T17877] Cannot create hsr debugfs directory [ 1280.086126][T13426] block nbd0: Receive control failed (result -32) [ 1281.410669][ T13] bridge_slave_1: left allmulticast mode [ 1281.418043][ T13] bridge_slave_1: left promiscuous mode [ 1281.425126][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1282.323896][ T13] bridge_slave_0: left allmulticast mode [ 1282.323948][ T13] bridge_slave_0: left promiscuous mode [ 1282.324181][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1283.201282][T18103] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1285.334224][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1285.377608][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1285.411586][ T13] bond0 (unregistering): Released all slaves [ 1285.487542][T18118] FAULT_INJECTION: forcing a failure. [ 1285.487542][T18118] name failslab, interval 1, probability 0, space 0, times 0 [ 1285.500828][T18118] CPU: 1 UID: 0 PID: 18118 Comm: syz.3.2983 Tainted: G L syzkaller #0 PREEMPT(full) [ 1285.500871][T18118] Tainted: [L]=SOFTLOCKUP [ 1285.500882][T18118] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1285.500898][T18118] Call Trace: [ 1285.500909][T18118] [ 1285.500921][T18118] dump_stack_lvl+0xe8/0x150 [ 1285.500964][T18118] should_fail_ex+0x410/0x560 [ 1285.501014][T18118] should_failslab+0xa8/0x100 [ 1285.501048][T18118] __kmalloc_node_track_caller_noprof+0xfb/0x720 [ 1285.501093][T18118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.501124][T18118] ? key_alloc+0x35c/0x1020 [ 1285.501150][T18118] ? key_alloc+0x35c/0x1020 [ 1285.501191][T18118] kmemdup_noprof+0x2b/0x70 [ 1285.501220][T18118] key_alloc+0x35c/0x1020 [ 1285.501263][T18118] keyring_alloc+0x45/0xb0 [ 1285.501300][T18118] join_session_keyring+0x13b/0x440 [ 1285.501331][T18118] lookup_user_key+0x4e6/0x1150 [ 1285.501356][T18118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.501394][T18118] ? __pfx_lookup_user_key+0x10/0x10 [ 1285.501424][T18118] ? __pfx_lookup_user_key_possessed+0x10/0x10 [ 1285.501462][T18118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.501493][T18118] ? strncpy_from_user+0x150/0x2c0 [ 1285.501538][T18118] __se_sys_add_key+0x315/0x420 [ 1285.501577][T18118] ? __pfx___se_sys_add_key+0x10/0x10 [ 1285.501614][T18118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.501653][T18118] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1285.501687][T18118] ? __x64_sys_add_key+0x20/0xc0 [ 1285.501726][T18118] do_syscall_64+0x166/0x520 [ 1285.501766][T18118] ? trace_irq_disable+0x3b/0x140 [ 1285.501792][T18118] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.501826][T18118] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1285.501854][T18118] RIP: 0033:0x7fe52319e159 [ 1285.501879][T18118] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1285.501901][T18118] RSP: 002b:00007fe5240d8028 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 1285.501929][T18118] RAX: ffffffffffffffda RBX: 00007fe523425fa0 RCX: 00007fe52319e159 [ 1285.501949][T18118] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000200 [ 1285.501967][T18118] RBP: 00007fe523235024 R08: fffffffffffffffd R09: 0000000000000000 [ 1285.501986][T18118] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1285.502003][T18118] R13: 00007fe523426038 R14: 00007fe523425fa0 R15: 00007ffd55805658 [ 1285.502044][T18118] [ 1285.524795][ T5271] 8021q: adding VLAN 0 to HW filter on device eth7 [ 1286.497251][T18134] loop9: detected capacity change from 0 to 1024 [ 1286.554603][T18134] EXT4-fs (loop9): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 1286.554660][T18134] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (38281!=20869) [ 1286.554779][T18134] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 1286.568000][T18134] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #3: comm syz.9.2986: pblk 82 bad header/extent: invalid extent entries - magic f30a, entries 2, max 4(4), depth 0(0) [ 1286.568044][T18134] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1286.571992][T18134] EXT4-fs (loop9): no journal found [ 1286.572013][T18134] EXT4-fs (loop9): can't get journal size [ 1286.576007][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 1286.576028][ C0] EXT4-fs (loop9): initial error at time 2000000422: ext4_ext_check_inode:521: inode 3 [ 1286.576063][ C0] EXT4-fs (loop9): last error at time 2000000422: ext4_ext_check_inode:521: inode 3 [ 1286.589737][T18134] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1286.862370][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1287.199519][ T9906] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1287.851223][T18154] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1289.096495][T18157] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2991'. [ 1290.189037][T18171] loop5: detected capacity change from 0 to 1024 [ 1290.213230][T18171] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1290.516744][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1290.961946][T14414] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1290.976201][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1291.770804][T18179] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1293.062028][ T5271] 8021q: adding VLAN 0 to HW filter on device eth8 [ 1294.249051][T17877] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1294.279224][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1294.287455][T17877] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1295.042459][T18200] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1296.831627][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1296.850869][T17877] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1296.918522][T14693] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1296.928403][T14693] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1296.936246][T14693] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1296.939552][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1296.951892][T17877] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1296.964323][T14693] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1296.972042][T14693] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1297.051026][T17877] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1297.514284][T17877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1297.601187][T17877] 8021q: adding VLAN 0 to HW filter on device team0 [ 1297.653064][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 1297.653185][T10112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1297.674630][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 1297.674757][T10112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1297.833829][T18232] netlink: 'syz.5.3008': attribute type 4 has an invalid length. [ 1297.935590][T13900] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 1297.980721][ T5271] 8021q: adding VLAN 0 to HW filter on device eth9 [ 1298.090238][T13900] usb 7-1: Using ep0 maxpacket: 32 [ 1298.102107][T13900] usb 7-1: New USB device found, idVendor=2c42, idProduct=1202, bcdDevice=85.40 [ 1298.116583][T13900] usb 7-1: config 0 has no interfaces? [ 1298.132417][T13900] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1298.132466][T13900] usb 7-1: Product: syz [ 1298.132492][T13900] usb 7-1: Manufacturer: syz [ 1298.132517][T13900] usb 7-1: SerialNumber: syz [ 1298.173308][T13900] usb 7-1: config 0 descriptor?? [ 1298.543618][T15037] usb 7-1: USB disconnect, device number 15 [ 1299.090332][T18250] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1300.175368][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1300.185579][T14693] Bluetooth: hci2: command tx timeout [ 1300.191590][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1301.182947][T13900] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 1301.336611][T13900] usb 7-1: New USB device found, idVendor=1d50, idProduct=614d, bcdDevice= 1.00 [ 1301.347034][T13900] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1301.357825][T13900] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1301.368075][T13900] usb 7-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 1301.377901][T13900] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1301.391992][T13900] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1301.768879][T18204] bridge0: port 1(bridge_slave_0) entered blocking state [ 1301.769011][T18204] bridge0: port 1(bridge_slave_0) entered disabled state [ 1301.769173][T18204] bridge_slave_0: entered allmulticast mode [ 1301.775008][T18204] bridge_slave_0: entered promiscuous mode [ 1301.800190][T17877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1301.817080][ T5271] 8021q: adding VLAN 0 to HW filter on device eth10 [ 1301.824518][T18204] bridge0: port 2(bridge_slave_1) entered blocking state [ 1301.824736][T18204] bridge0: port 2(bridge_slave_1) entered disabled state [ 1301.824877][T18204] bridge_slave_1: entered allmulticast mode [ 1301.829856][T18204] bridge_slave_1: entered promiscuous mode [ 1302.046547][T13900] gud 7-1:1.0: Failed to add properties (error=-71) [ 1302.046605][T13900] gud 7-1:1.0: probe with driver gud failed with error -71 [ 1302.086838][ T7207] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.106088][T13900] usb 7-1: USB disconnect, device number 16 [ 1302.178676][T18204] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1302.192269][T18204] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1302.207045][T14693] Bluetooth: hci2: command tx timeout [ 1302.397306][ T7207] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1302.439891][T18204] team0: Port device team_slave_0 added [ 1302.465019][T18204] team0: Port device team_slave_1 added [ 1302.642117][T18204] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1302.651659][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1302.651738][T18204] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1302.793476][T18301] loop6: detected capacity change from 0 to 16 [ 1302.802885][T18301] MTD: Attempt to mount non-MTD device "/dev/loop6" [ 1303.814383][ T7207] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1304.285354][T14693] Bluetooth: hci2: command tx timeout [ 1305.105720][T18315] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1306.283523][T18204] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1306.293048][T18204] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1306.293115][T18204] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1306.365074][T14693] Bluetooth: hci2: command tx timeout [ 1306.562313][T18323] jffs2: notice: (18323) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1306.565679][ T7207] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1306.722924][T17877] veth0_vlan: entered promiscuous mode [ 1306.875742][T18204] hsr_slave_0: entered promiscuous mode [ 1306.876837][T18204] hsr_slave_1: entered promiscuous mode [ 1306.881201][T18204] debugfs: 'hsr0' already exists in 'hsr' [ 1306.881229][T18204] Cannot create hsr debugfs directory [ 1306.982891][T17877] veth1_vlan: entered promiscuous mode [ 1307.642317][T18342] vlan2: entered promiscuous mode [ 1307.642370][T18342] hsr0: entered promiscuous mode [ 1307.642703][T18342] vlan2: entered allmulticast mode [ 1307.642722][T18342] hsr0: entered allmulticast mode [ 1307.642738][T18342] hsr_slave_0: entered allmulticast mode [ 1307.642757][T18342] hsr_slave_1: entered allmulticast mode [ 1307.966834][ T5271] 8021q: adding VLAN 0 to HW filter on device eth11 [ 1308.055021][T18352] loop9: detected capacity change from 0 to 512 [ 1308.081771][T18352] EXT4-fs error (device loop9): ext4_orphan_get:1403: inode #17: comm syz.9.3019: iget: bogus i_mode (0) [ 1308.095650][T18352] loop9: lost file I/O error report for ino 17 type 5 pos 0x0 len 0x0 error -117 [ 1308.097830][T18352] EXT4-fs error (device loop9): ext4_orphan_get:1408: comm syz.9.3019: couldn't read orphan inode 17 (err -117) [ 1308.097886][T18352] loop9: lost filesystem error report for type 5 error -117 [ 1308.107166][ C1] EXT4-fs (loop9): error count since last fsck: 2 [ 1308.107189][ C1] EXT4-fs (loop9): initial error at time 2000000443: ext4_orphan_get:1403: inode 17 [ 1308.107225][ C1] EXT4-fs (loop9): last error at time 2000000443: ext4_orphan_get:1408 [ 1308.161961][T18352] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1308.222642][T18353] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(5) [ 1308.222677][T18353] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1308.222801][T18353] vhci_hcd vhci_hcd.0: Device attached [ 1308.229553][ T9906] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1308.333010][T18357] vhci_hcd: connection closed [ 1308.337476][ T6927] vhci_hcd vhci_hcd.6: stop threads [ 1308.337528][ T6927] vhci_hcd vhci_hcd.6: release socket [ 1308.337552][ T6927] vhci_hcd vhci_hcd.6: disconnect device [ 1308.468650][ T7207] bridge_slave_1: left allmulticast mode [ 1308.468705][ T7207] bridge_slave_1: left promiscuous mode [ 1308.468936][ T7207] bridge0: port 2(bridge_slave_1) entered disabled state [ 1308.492414][ T7207] bridge_slave_0: left allmulticast mode [ 1308.492466][ T7207] bridge_slave_0: left promiscuous mode [ 1308.493075][ T7207] bridge0: port 1(bridge_slave_0) entered disabled state [ 1308.823092][ T7207] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1308.844447][ T7207] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1308.856074][ T7207] bond0 (unregistering): Released all slaves [ 1308.950419][T17877] veth0_macvtap: entered promiscuous mode [ 1309.079333][T17877] veth1_macvtap: entered promiscuous mode [ 1309.229113][T18360] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1309.229240][T18360] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1309.301342][T18360] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1309.324438][T18360] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1309.324549][T18360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1309.368681][T18360] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1311.004915][T14693] Bluetooth: hci1: command 0x0c1a tx timeout [ 1311.278720][T18375] jffs2: notice: (18375) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1311.324728][T13426] Bluetooth: hci2: command 0x0c1a tx timeout [ 1311.335903][T17877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1311.626904][T17877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1311.657497][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1311.732694][ T7207] hsr_slave_0: left promiscuous mode [ 1311.742795][ T7207] hsr_slave_1: left promiscuous mode [ 1311.743762][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1311.743785][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1311.768333][ T7207] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1311.768384][ T7207] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1311.820090][ T7207] veth1_macvtap: left promiscuous mode [ 1311.820185][ T7207] veth0_macvtap: left promiscuous mode [ 1311.820305][ T7207] veth1_vlan: left promiscuous mode [ 1311.820381][ T7207] veth0_vlan: left promiscuous mode [ 1312.638244][T18405] vhci_hcd vhci_hcd.0: pdev(3) rhport(0) sockfd(5) [ 1312.638281][T18405] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1312.638392][T18405] vhci_hcd vhci_hcd.0: Device attached [ 1312.676409][T18407] vhci_hcd: connection closed [ 1312.683016][ T5865] vhci_hcd vhci_hcd.3: stop threads [ 1312.683806][ T5865] vhci_hcd vhci_hcd.3: release socket [ 1312.683832][ T5865] vhci_hcd vhci_hcd.3: disconnect device [ 1312.874110][ T7207] team0 (unregistering): Port device team_slave_1 removed [ 1312.940932][ T7207] team0 (unregistering): Port device team_slave_0 removed [ 1313.084820][T13426] Bluetooth: hci1: command 0x0c1a tx timeout [ 1313.404554][T13426] Bluetooth: hci2: command 0x0c1a tx timeout [ 1313.676474][T13900] usb 6-1: new low-speed USB device number 36 using dummy_hcd [ 1313.888316][T13900] usb 6-1: unable to get BOS descriptor or descriptor too short [ 1313.888384][T13900] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice=fd.97 [ 1313.893167][T13900] usb 6-1: config 2 has an invalid interface number: 8 but max is 0 [ 1313.893195][T13900] usb 6-1: config 2 has no interface number 0 [ 1313.893227][T13900] usb 6-1: config 2 interface 8 has no altsetting 0 [ 1313.900808][T13900] usb 6-1: string descriptor 0 read error: -22 [ 1313.900945][T13900] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1313.948648][T13900] usbtest 6-1:2.8: Linux user mode ISO test driver [ 1313.948703][T13900] usbtest 6-1:2.8: low-speed {control} tests [ 1314.151709][ T6897] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.224856][ T6716] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.225076][ T6716] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1314.352539][T18424] jffs2: notice: (18424) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1315.432025][T18204] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1315.451814][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1315.458580][T18204] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1315.484649][T13426] Bluetooth: hci2: command 0x0c1a tx timeout [ 1315.494779][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1315.502130][T18204] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1315.562432][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1315.574873][T18204] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1315.589068][T18420] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1315.589280][T18420] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1315.627965][T18204] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1316.096605][T13900] usb 6-1: USB disconnect, device number 36 [ 1316.284456][T13426] Bluetooth: hci1: command 0x0c1a tx timeout [ 1318.502548][T13426] Bluetooth: hci2: command 0x0c1a tx timeout [ 1318.779483][ T184] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.779529][ T184] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1318.953398][ T6716] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1318.953463][ T6716] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1319.236944][T18467] binder: 18466:18467 ioctl c0306201 0 returned -14 [ 1319.255265][T18204] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1319.301560][T18470] binder: 18466:18470 ioctl c0306201 0 returned -14 [ 1319.348105][T18204] 8021q: adding VLAN 0 to HW filter on device team0 [ 1319.394055][ T6897] bridge0: port 1(bridge_slave_0) entered blocking state [ 1319.394252][ T6897] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1319.439714][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 1319.439848][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1319.780508][T18204] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1319.791088][T18204] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1321.439999][T18503] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1321.442551][T18503] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1321.809972][T18484] loop6: detected capacity change from 0 to 32768 [ 1321.894268][T18484] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.3065 (18484) [ 1322.000263][T18518] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3073'. [ 1322.087407][T18515] jffs2: notice: (18515) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1322.144669][T18484] BTRFS info (device loop6): first mount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1322.144730][T18484] BTRFS info (device loop6): using sha256 checksum algorithm [ 1322.422374][T18484] BTRFS info (device loop6): enabling ssd optimizations [ 1322.422434][T18484] BTRFS info (device loop6): turning on async discard [ 1322.426056][T18484] BTRFS info (device loop6): enabling free space tree [ 1322.558831][T18542] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3074'. [ 1322.689249][T14475] BTRFS info (device loop6): last unmount of filesystem 395ef67a-297e-477c-816d-cd80a5b93e5d [ 1323.031670][T18204] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1323.071701][T18556] loop5: detected capacity change from 0 to 128 [ 1323.093072][T18555] binder: 18553:18555 ioctl c0306201 0 returned -14 [ 1323.163443][T18559] binder: 18553:18559 ioctl c0306201 0 returned -14 [ 1325.636581][ T4937] usb 6-1: new full-speed USB device number 37 using dummy_hcd [ 1325.896778][ T4937] usb 6-1: New USB device found, idVendor=13d8, idProduct=0001, bcdDevice=30.62 [ 1326.076767][ T4937] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1326.076900][ T4937] usb 6-1: Product: syz [ 1326.077077][ T4937] usb 6-1: Manufacturer: syz [ 1326.077148][ T4937] usb 6-1: SerialNumber: syz [ 1326.249849][ T4937] usb 6-1: config 0 descriptor?? [ 1326.485323][ T4937] usb 6-1: selecting invalid altsetting 3 [ 1326.485374][ T4937] comedi comedi5: could not set alternate setting 3 in high speed [ 1326.523663][ T4937] usbdux 6-1:0.0: driver 'usbdux' failed to auto-configure device. [ 1326.590958][ T4937] usbdux 6-1:0.0: probe with driver usbdux failed with error -22 [ 1326.662838][T18590] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3086'. [ 1326.704124][ T4937] usb 6-1: USB disconnect, device number 37 [ 1326.751345][T18204] veth0_vlan: entered promiscuous mode [ 1326.816329][T18204] veth1_vlan: entered promiscuous mode [ 1326.878197][T18594] loop9: detected capacity change from 0 to 256 [ 1326.879209][T18594] vfat: Unknown parameter 'rų¶°' [ 1326.894337][T18596] netlink: 'syz.3.3089': attribute type 4 has an invalid length. [ 1326.953270][T18204] veth0_macvtap: entered promiscuous mode [ 1326.969089][T18204] veth1_macvtap: entered promiscuous mode [ 1327.011907][T18204] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1327.027245][T18204] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1327.880411][T18603] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3088'. [ 1328.060668][ T39] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.061833][ T39] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.061878][ T39] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1328.061919][ T39] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1329.409423][ T5959] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1329.409477][ T5959] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.020111][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1330.020159][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1330.535250][T18641] loop4: detected capacity change from 0 to 2048 [ 1330.549375][T18641] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1330.728781][T18650] overlayfs: failed to resolve './file1/file0': -2 [ 1330.822423][T18646] veth1_to_bond: entered promiscuous mode [ 1330.840803][T18646] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3103'. [ 1330.973179][T18646] veth1_to_bond (unregistering): left promiscuous mode [ 1331.129453][T18646] bond0: (slave bond_slave_1): Releasing backup interface [ 1335.010869][T18693] overlayfs: failed to resolve './file1/file0': -2 [ 1335.307664][T18702] loop9: detected capacity change from 0 to 2048 [ 1335.324770][T18702] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1335.463042][T18706] bond1: option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 1335.705671][T18706] bond1 (unregistering): Released all slaves [ 1337.016910][T18728] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1338.038892][T18747] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3131'. [ 1338.077037][T18746] loop6: detected capacity change from 0 to 1024 [ 1338.091297][T18746] EXT4-fs (loop6): stripe (4) is not aligned with cluster size (4096), stripe is disabled [ 1338.130163][T18746] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 2: comm syz.6.3133: lblock 2 mapped to illegal pblock 2 (length 1) [ 1338.130256][T18746] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1338.144461][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 1338.144481][ C1] EXT4-fs (loop6): initial error at time 2000000473: ext4_map_blocks:790: inode 3: block 2 [ 1338.144515][ C1] EXT4-fs (loop6): last error at time 2000000473: ext4_map_blocks:790: inode 3: block 2 [ 1338.181006][T18746] Quota error (device loop6): qtree_write_dquot: dquota write failed [ 1338.181066][T18746] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 48: comm syz.6.3133: lblock 0 mapped to illegal pblock 48 (length 1) [ 1338.181103][T18746] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1338.181897][T18746] Quota error (device loop6): v2_write_file_info: Can't write info structure [ 1338.181921][T18746] EXT4-fs error (device loop6): ext4_acquire_dquot:7069: comm syz.6.3133: Failed to acquire dquot type 0 [ 1338.181948][T18746] loop6: lost filesystem error report for type 5 error -117 [ 1338.189550][T18746] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1338.189577][T18746] loop6: lost filesystem error report for type 5 error -117 [ 1338.189889][T18746] EXT4-fs error (device loop6): ext4_evict_inode:269: inode #11: comm syz.6.3133: mark_inode_dirty error [ 1338.189920][T18746] loop6: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 1338.190179][T18746] EXT4-fs warning (device loop6): ext4_evict_inode:272: couldn't mark inode dirty (err -117) [ 1338.190284][T18746] EXT4-fs (loop6): 1 orphan inode deleted [ 1338.192369][T18746] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1338.218173][ T5959] EXT4-fs error (device loop6): ext4_map_blocks:790: inode #3: block 1: comm kworker/u8:10: lblock 1 mapped to illegal pblock 1 (length 1) [ 1338.285662][T18746] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz.6.3133: Invalid inode table block 1 in block_group 0 [ 1338.288853][T18746] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1338.294892][ T5959] Quota error (device loop6): remove_tree: Can't read quota data block 1 [ 1338.294933][ T5959] EXT4-fs error (device loop6): ext4_release_dquot:7105: comm kworker/u8:10: Failed to release dquot type 0 [ 1340.000212][T18754] overlayfs: failed to resolve './file1/file0': -2 [ 1340.100759][T14475] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1340.110042][T14475] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1340.110075][T14475] loop6: lost filesystem error report for type 5 error -117 [ 1340.173438][T14475] EXT4-fs error (device loop6) in ext4_reserve_inode_write:6517: Corrupt filesystem [ 1340.173497][T14475] loop6: lost filesystem error report for type 5 error -117 [ 1340.199654][T14475] EXT4-fs error (device loop6): ext4_quota_off:7353: inode #3: comm syz-executor: mark_inode_dirty error [ 1340.199716][T14475] loop6: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1340.241065][T14475] EXT4-fs error (device loop6): __ext4_get_inode_loc:4916: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1340.241142][T14475] loop6: lost filesystem error report for type 5 error -117 [ 1342.838229][T18781] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1344.270025][T18791] loop6: detected capacity change from 0 to 128 [ 1344.600118][T18799] bridge1: entered promiscuous mode [ 1344.605688][T18799] bridge1: entered allmulticast mode [ 1347.758062][T18825] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1348.883577][T18824] loop0: detected capacity change from 0 to 2048 [ 1349.084003][T18827] NILFS (loop0): segctord starting. Construction interval = 5 seconds, CP frequency < 30 seconds [ 1349.192190][T18824] NILFS error (device loop0): nilfs_check_folio: bad entry in directory #2: rec_len is smaller than minimal - offset=0, inode=0, rec_len=0, name_len=0 [ 1349.236185][T18824] Remounting filesystem read-only [ 1349.250248][T18824] NILFS error (device loop0): nilfs_readdir: bad page in #2 [ 1349.783881][T18839] loop3: detected capacity change from 0 to 128 [ 1350.894310][T18852] loop4: detected capacity change from 0 to 16 [ 1350.910932][T18852] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 1351.274619][T18859] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3166'. [ 1353.208035][T18886] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1354.347409][T18881] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1354.347446][T18881] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1354.347579][T18881] vhci_hcd vhci_hcd.0: Device attached [ 1354.416358][T18888] vhci_hcd: connection closed [ 1354.419344][ T5959] vhci_hcd vhci_hcd.4: stop threads [ 1354.419422][ T5959] vhci_hcd vhci_hcd.4: release socket [ 1354.419446][ T5959] vhci_hcd vhci_hcd.4: disconnect device [ 1354.485276][T18893] loop0: detected capacity change from 0 to 64 [ 1358.857191][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3183'. [ 1360.117512][T18938] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1361.163778][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1361.163866][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1361.429300][T18943] loop0: detected capacity change from 0 to 256 [ 1361.452822][T18943] vfat: Unknown parameter 'rų¶°' [ 1361.775241][T18453] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 1361.952952][T18453] usb 4-1: Using ep0 maxpacket: 8 [ 1361.959472][T18453] usb 4-1: New USB device found, idVendor=0810, idProduct=0001, bcdDevice= 0.00 [ 1361.971010][T18453] usb 4-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1361.971055][T18453] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1361.971107][T18453] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1362.022004][T18453] usb 4-1: config 0 descriptor?? [ 1362.307327][T18945] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1362.344466][T18945] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1362.428862][T18453] usbhid 4-1:0.0: can't add hid device: -71 [ 1362.437204][T18453] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 1362.499352][T18453] usb 4-1: USB disconnect, device number 17 [ 1362.802808][T18963] netlink: 55631 bytes leftover after parsing attributes in process `syz.0.3194'. [ 1363.373495][T18975] loop0: detected capacity change from 0 to 64 [ 1365.807416][T18992] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1368.796259][T19011] syzkaller0: entered promiscuous mode [ 1368.796322][T19011] syzkaller0: entered allmulticast mode [ 1369.343592][T19021] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(5) [ 1369.343630][T19021] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1369.345593][T19021] vhci_hcd vhci_hcd.0: Device attached [ 1369.370131][T19025] vhci_hcd: connection closed [ 1369.385753][ T9802] vhci_hcd vhci_hcd.4: stop threads [ 1369.385801][ T9802] vhci_hcd vhci_hcd.4: release socket [ 1369.386287][ T9802] vhci_hcd vhci_hcd.4: disconnect device [ 1371.166745][T19052] rtc_cmos PNP0B00:00: Alarms can be up to one day in the future [ 1372.648873][T19060] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3222'. [ 1375.491619][T19083] ubi0: attaching mtd0 [ 1375.517693][T19083] ubi0: scanning is finished [ 1375.518521][T19083] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 1375.874179][T19084] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 1376.114438][T19083] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 1376.676510][T19095] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(5) [ 1376.676547][T19095] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 1376.676665][T19095] vhci_hcd vhci_hcd.0: Device attached [ 1376.704914][T19098] vhci_hcd: connection closed [ 1376.716060][ T6635] vhci_hcd vhci_hcd.0: stop threads [ 1376.716230][ T6635] vhci_hcd vhci_hcd.0: release socket [ 1376.716322][ T6635] vhci_hcd vhci_hcd.0: disconnect device [ 1377.715408][T19090] syzkaller0: entered promiscuous mode [ 1377.715458][T19090] syzkaller0: entered allmulticast mode [ 1377.879059][T19108] netlink: 'syz.6.3233': attribute type 29 has an invalid length. [ 1378.052508][T19107] tipc: Enabled bearer , priority 0 [ 1378.073988][T19088] tipc: Resetting bearer [ 1378.285355][T19088] tipc: Disabling bearer [ 1381.277996][T19125] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3238'. [ 1381.773945][T19135] netlink: 10 bytes leftover after parsing attributes in process `syz.6.3240'. [ 1383.546689][T19137] syzkaller0: entered promiscuous mode [ 1383.546742][T19137] syzkaller0: entered allmulticast mode [ 1384.326595][T19156] netlink: 'syz.4.3247': attribute type 29 has an invalid length. [ 1385.214479][T19168] netlink: 32 bytes leftover after parsing attributes in process `syz.9.3251'. [ 1386.029929][T19176] loop1: detected capacity change from 0 to 204800 [ 1386.145158][T19176] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1386.372593][T19164] syz.5.3248 (19164): drop_caches: 2 [ 1388.121888][T19176] md/raid10:md0: not clean -- starting background reconstruction [ 1388.121932][T19176] md/raid10:md0: active with 1 out of 2 devices [ 1388.165664][T19176] md_update_sb: can't update sb for read-only array md0 [ 1388.165847][T19176] md0: detected capacity change from 0 to 2048 [ 1388.203810][T19195] md_update_sb: can't update sb for read-only array md0 [ 1389.147751][T19207] netlink: 'syz.9.3264': attribute type 29 has an invalid length. [ 1391.129107][T19204] loop6: detected capacity change from 0 to 32768 [ 1391.159077][T19204] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 1391.159126][T19204] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 1391.237664][T19204] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 1391.260660][ T5769] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 1391.260700][ T5769] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 1391.341406][T19251] loop9: detected capacity change from 0 to 512 [ 1391.348448][T19249] syzkaller0: entered promiscuous mode [ 1391.348498][T19249] syzkaller0: entered allmulticast mode [ 1391.361146][T19251] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 1391.415827][T19251] EXT4-fs (loop9): 1 truncate cleaned up [ 1391.505831][T19251] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1392.927562][ T5769] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1666ms [ 1392.969952][ T5769] gfs2: fsid=syz:syz.0: jid=0: Done [ 1392.992747][T19204] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 1393.049658][ T9906] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1393.051612][T19204] gfs2: fsid=syz:syz.0: can't create logd thread: -4 [ 1393.258048][ T5271] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1394.892026][T19279] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3276'. [ 1395.280106][ T5769] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 1395.435500][ T5769] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 1395.466959][ T5769] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1395.467021][ T5769] usb 7-1: Product: syz [ 1395.467063][ T5769] usb 7-1: Manufacturer: syz [ 1395.467090][ T5769] usb 7-1: SerialNumber: syz [ 1396.861131][ T5769] rtl8150 7-1:1.0: eth5: rtl8150 is detected [ 1397.032617][ T5769] usb 7-1: USB disconnect, device number 17 [ 1397.090017][T19318] netlink: 'syz.0.3289': attribute type 29 has an invalid length. [ 1397.347554][T19320] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1397.819218][T19319] netlink: 'syz.0.3289': attribute type 29 has an invalid length. [ 1397.976478][T19322] loop0: detected capacity change from 0 to 204800 [ 1398.046681][T19322] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1399.352553][T19346] loop0: detected capacity change from 0 to 64 [ 1399.438073][T19351] loop5: detected capacity change from 0 to 256 [ 1399.459082][T19351] vfat: Unknown parameter 'rų¶°' [ 1399.473565][T19352] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3300'. [ 1400.513109][T19350] loop3: detected capacity change from 0 to 4096 [ 1401.550453][ T5271] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1401.972816][ T31] audit: type=1800 audit(2000000536.714:234): pid=19350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.3299" name="file1" dev="loop3" ino=34 res=0 errno=0 [ 1402.219172][T19379] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3306'. [ 1406.783401][T19413] binder: 19412:19413 ioctl c0306201 0 returned -14 [ 1407.476523][T19420] netlink: 'syz.3.3317': attribute type 29 has an invalid length. [ 1407.495835][T19420] netlink: 'syz.3.3317': attribute type 29 has an invalid length. [ 1409.651078][ T5271] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1409.778509][T19435] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3324'. [ 1410.199648][T18453] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 1410.353132][T18453] usb 6-1: New USB device found, idVendor=04fc, idProduct=504a, bcdDevice=43.02 [ 1410.376081][T18453] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1410.376128][T18453] usb 6-1: Product: syz [ 1410.376164][T18453] usb 6-1: Manufacturer: syz [ 1410.376184][T18453] usb 6-1: SerialNumber: syz [ 1410.412615][T18453] usb 6-1: config 0 descriptor?? [ 1410.430038][T18453] gspca_main: sunplus-2.14.0 probing 04fc:504a [ 1410.687795][T19448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1411.743939][T18453] gspca_sunplus: reg_w_riv err -110 [ 1411.744051][T18453] sunplus 6-1:0.0: probe with driver sunplus failed with error -110 [ 1414.006760][ T5769] usb 6-1: USB disconnect, device number 38 [ 1415.000312][T19485] fuse: Unknown parameter 'group_i00000000000000000000' [ 1415.812919][T19489] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3338'. [ 1416.444728][T19494] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3340'. [ 1420.435263][ T5271] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1420.657789][T19517] netlink: 55631 bytes leftover after parsing attributes in process `syz.6.3348'. [ 1421.854168][T19539] fuse: Bad value for 'fd' [ 1422.295064][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1422.301575][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1422.642613][T19555] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3357'. [ 1423.182978][T19568] binder: 19565:19568 ioctl 402c5828 2000000003c0 returned -22 [ 1424.048684][T19570] netlink: 67 bytes leftover after parsing attributes in process `syz.9.3362'. [ 1424.971311][T19585] fuse: Unknown parameter 'group_i00000000000000000000' [ 1425.227350][ T5769] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 1427.205068][T19595] Cannot find del_set index 4 as target [ 1427.217145][ T5769] usb 10-1: New USB device found, idVendor=072f, idProduct=2200, bcdDevice= 1.00 [ 1427.677412][ T5769] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1427.677483][ T5769] usb 10-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1427.677558][ T5769] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1427.749027][T19595] overlayfs: conflicting options: nfs_export=on,index=off [ 1427.889864][T19594] loop3: detected capacity change from 0 to 512 [ 1428.938859][ T5769] usb 10-1: can't set config #1, error -71 [ 1428.972819][ T5769] usb 10-1: USB disconnect, device number 24 [ 1429.071546][ T31] audit: type=1804 audit(2000000563.815:235): pid=19602 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.6.3374" name="bus" dev="ramfs" ino=62709 res=1 errno=0 [ 1429.296236][ T12] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1429.524215][T19607] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1429.534056][T19604] netlink: 16402 bytes leftover after parsing attributes in process `syz.5.3372'. [ 1429.966365][ T12] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.895485][ T12] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1433.997427][T19650] binder: 19647:19650 ioctl 402c5828 2000000003c0 returned -22 [ 1434.064206][T19653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1434.079904][T19653] netlink: 60 bytes leftover after parsing attributes in process `syz.0.3385'. [ 1434.355100][T19661] 9p: Bad value for 'wfdno' [ 1434.357924][ T12] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1434.692137][T19668] evm: overlay not supported [ 1435.415247][T19675] loop3: detected capacity change from 0 to 512 [ 1435.433901][T19675] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 1435.454061][T19675] EXT4-fs (loop3): 1 truncate cleaned up [ 1435.472254][T19675] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1435.706159][T19682] syz_tun: entered allmulticast mode [ 1435.817483][T19682] dvmrp6: entered allmulticast mode [ 1435.983132][T19680] syz_tun: left allmulticast mode [ 1437.288464][T19693] Cannot find del_set index 4 as target [ 1437.533941][T19696] overlayfs: conflicting options: nfs_export=on,index=off [ 1438.298498][T15045] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 1438.612240][T15045] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1438.633635][T15045] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1438.633711][T15045] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1438.633742][T15045] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1438.633784][T15045] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1438.695434][T15045] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1438.695543][T15045] usb 7-1: Product: syz [ 1438.695582][T15045] usb 7-1: Manufacturer: syz [ 1438.753948][T15045] cdc_wdm 7-1:1.0: skipping garbage [ 1438.760557][T15045] cdc_wdm 7-1:1.0: skipping garbage [ 1438.770206][T15045] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1438.777556][T15045] cdc_wdm 7-1:1.0: Unknown control protocol [ 1438.858430][T16901] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1439.035236][ T12] bridge_slave_1: left allmulticast mode [ 1439.035317][ T12] bridge_slave_1: left promiscuous mode [ 1439.036052][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 1439.103145][ T12] bridge_slave_0: left allmulticast mode [ 1439.103196][ T12] bridge_slave_0: left promiscuous mode [ 1439.103483][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 1439.351307][T19715] binder: 19711:19715 ioctl 402c5828 2000000003c0 returned -22 [ 1440.730139][T18044] usb 7-1: USB disconnect, device number 18 [ 1441.788737][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1441.850591][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1441.885386][ T12] bond0 (unregistering): Released all slaves [ 1442.349682][T19738] tipc: Enabled bearer , priority 0 [ 1442.387603][T19756] tipc: Resetting bearer [ 1442.963465][T19735] tipc: Disabling bearer [ 1444.028935][T19775] loop4: detected capacity change from 0 to 512 [ 1444.072930][T19775] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1444.110671][T19775] EXT4-fs (loop4): 1 truncate cleaned up [ 1444.201318][T19775] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1444.297255][T13900] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 1444.746380][T13900] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1444.771737][T13900] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1444.771769][T13900] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1444.771794][T13900] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1444.771847][T13900] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1444.866417][ T12] hsr_slave_0: left promiscuous mode [ 1444.885904][T13900] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1444.885952][T13900] usb 10-1: Product: syz [ 1444.885979][T13900] usb 10-1: Manufacturer: syz [ 1445.191668][ T12] hsr_slave_1: left promiscuous mode [ 1445.291080][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1445.291567][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1445.362373][T13900] cdc_wdm 10-1:1.0: skipping garbage [ 1445.362415][T13900] cdc_wdm 10-1:1.0: skipping garbage [ 1445.364295][T13900] cdc_wdm 10-1:1.0: cdc-wdm0: USB WDM device [ 1445.364315][T13900] cdc_wdm 10-1:1.0: Unknown control protocol [ 1445.404834][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1445.412933][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1445.496171][ T12] veth1_macvtap: left promiscuous mode [ 1445.496227][ T12] veth0_macvtap: left promiscuous mode [ 1445.496402][ T12] veth1_vlan: left promiscuous mode [ 1445.496517][ T12] veth0_vlan: left promiscuous mode [ 1445.649898][T18204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1445.683433][T13900] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 1445.840316][T13900] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1445.847816][T13900] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1445.847845][T13900] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1445.847868][T13900] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1445.847918][T13900] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1445.851929][T19776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1445.852445][T19776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1445.852831][T13900] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1445.852858][T13900] usb 6-1: Product: syz [ 1445.852876][T13900] usb 6-1: Manufacturer: syz [ 1445.924643][T13900] cdc_wdm 6-1:1.0: skipping garbage [ 1445.924685][T13900] cdc_wdm 6-1:1.0: skipping garbage [ 1445.947616][T13900] cdc_wdm 6-1:1.0: cdc-wdm1: USB WDM device [ 1445.947662][T13900] cdc_wdm 6-1:1.0: Unknown control protocol [ 1446.135423][T19803] loop0: detected capacity change from 0 to 204800 [ 1446.387659][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.387827][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.389528][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.389551][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.390617][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.390640][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.391248][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.391269][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.391486][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.391507][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.391708][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.391730][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.391939][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.391960][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.392163][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.392184][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.392381][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.392406][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.392610][ C1] cdc_wdm 10-1:1.0: nonzero urb status received: -71 [ 1446.392632][ C1] cdc_wdm 10-1:1.0: wdm_int_callback - 0 bytes [ 1446.439817][T18044] usb 6-1: USB disconnect, device number 39 [ 1446.468187][T19809] netlink: 20 bytes leftover after parsing attributes in process `syz.3.3424'. [ 1446.533178][ T9] usb 10-1: USB disconnect, device number 25 [ 1446.849484][T19815] binder: 19812:19815 ioctl 402c5828 2000000003c0 returned -22 [ 1448.405262][T19826] Cannot find del_set index 4 as target [ 1449.301041][T19827] netlink: 'syz.9.3431': attribute type 29 has an invalid length. [ 1449.566038][ T12] team0 (unregistering): Port device team_slave_1 removed [ 1449.592296][ T12] team0 (unregistering): Port device team_slave_0 removed [ 1449.644278][T19835] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 1451.526564][T19850] Bluetooth: MGMT ver 1.23 [ 1451.539078][T19850] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3437'. [ 1452.625245][T19855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.638119][T19855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1452.729040][T19855] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1452.729559][T19855] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1454.714103][T19892] jffs2: notice: (19892) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 1455.501528][T19871] syzkaller0: entered promiscuous mode [ 1455.501569][T19871] syzkaller0: entered allmulticast mode [ 1456.536172][T19907] loop0: detected capacity change from 0 to 1024 [ 1456.544445][T19907] EXT4-fs: Ignoring removed bh option [ 1456.561216][T19907] EXT4-fs (loop0): stripe (5) is not aligned with cluster size (16), stripe is disabled [ 1456.649274][T19907] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1457.079321][T19919] overlayfs: failed to resolve './bus': -2 [ 1458.238080][T17877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1460.149056][T19917] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -4 [ 1460.158796][T19917] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -4 [ 1460.158825][T19917] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1460.845150][T19951] loop4: detected capacity change from 0 to 512 [ 1460.874293][T19951] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1460.932154][T19951] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1461.136435][T18044] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 1461.373537][T18044] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1461.427091][T18044] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1461.436580][T18044] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1461.437204][T18044] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1461.450874][T18044] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1461.556390][T18044] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1461.566078][T18044] usb 7-1: Product: syz [ 1461.566292][T18044] usb 7-1: Manufacturer: syz [ 1461.743934][T18044] cdc_wdm 7-1:1.0: skipping garbage [ 1461.752636][T18044] cdc_wdm 7-1:1.0: skipping garbage [ 1461.766329][T18044] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1461.773121][T18044] cdc_wdm 7-1:1.0: Unknown control protocol [ 1461.875133][T18204] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1461.904816][T19969] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3457'. [ 1461.929955][T19969] bridge0: port 2(bridge_slave_1) entered disabled state [ 1461.932060][T19969] bridge0: port 1(bridge_slave_0) entered disabled state [ 1462.079330][T15045] usb 10-1: new high-speed USB device number 26 using dummy_hcd [ 1463.098032][T15045] usb 10-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1463.100352][T15045] usb 10-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1463.100381][T15045] usb 10-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1463.100405][T15045] usb 10-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1463.100454][T15045] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1463.103135][T15045] usb 10-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1463.103162][T15045] usb 10-1: Product: syz [ 1463.103180][T15045] usb 10-1: Manufacturer: syz [ 1464.839098][T15045] usb 10-1: can't set config #1, error -71 [ 1464.860816][T15045] usb 10-1: USB disconnect, device number 26 [ 1464.877642][T19981] loop4: detected capacity change from 0 to 256 [ 1464.905155][T15037] usb 7-1: USB disconnect, device number 19 [ 1464.986157][T19981] exFAT-fs (loop4): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 1465.070910][T19984] md: couldn't update array info. -22 [ 1465.082695][T19195] md_update_sb: can't update sb for read-only array md0 [ 1465.253652][ T31] audit: type=1804 audit(2000000599.997:236): pid=19990 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3466" name="bus" dev="ramfs" ino=63200 res=1 errno=0 [ 1466.259125][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.259125][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.261006][T15045] loop4: writeback error on inode 1049151, offset 28672, sector 34359738480 [ 1466.261887][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.261887][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.262015][T15045] loop4: writeback error on inode 1049151, offset 32768, sector 34359738480 [ 1466.262275][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.262275][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.262403][T15045] loop4: writeback error on inode 1049151, offset 36864, sector 34359738480 [ 1466.262708][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.262708][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.262782][T15045] loop4: writeback error on inode 1049151, offset 40960, sector 34359738480 [ 1466.263086][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.263086][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.263210][T15045] loop4: writeback error on inode 1049151, offset 45056, sector 34359738480 [ 1466.263638][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.263638][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.263712][T15045] loop4: writeback error on inode 1049151, offset 49152, sector 34359738480 [ 1466.264022][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.264022][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.264149][T15045] loop4: writeback error on inode 1049151, offset 53248, sector 34359738480 [ 1466.264403][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.264403][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.264527][T15045] loop4: writeback error on inode 1049151, offset 57344, sector 34359738480 [ 1466.264829][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.264829][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.264909][T15045] loop4: writeback error on inode 1049151, offset 61440, sector 34359738480 [ 1466.265211][T19981] syz.4.3458: attempt to access beyond end of device [ 1466.265211][T19981] loop4: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1466.265335][T15045] loop4: writeback error on inode 1049151, offset 65536, sector 34359738480 [ 1467.240039][T20009] Cannot find del_set index 4 as target [ 1467.390606][T20011] overlayfs: conflicting options: nfs_export=on,index=off [ 1470.840039][T20028] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3473'. [ 1470.841224][T20028] bridge0: port 2(bridge_slave_1) entered disabled state [ 1470.841955][T20028] bridge0: port 1(bridge_slave_0) entered disabled state [ 1471.195769][T18453] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 1471.403816][T18453] usb 7-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 1471.415540][T18453] usb 7-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 1471.424449][T18453] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1471.424494][T18453] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 1471.424554][T18453] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1471.471414][T18453] usb 7-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 1471.471462][T18453] usb 7-1: Product: syz [ 1471.471499][T18453] usb 7-1: Manufacturer: syz [ 1471.510552][T18453] cdc_wdm 7-1:1.0: skipping garbage [ 1471.519461][T18453] cdc_wdm 7-1:1.0: skipping garbage [ 1471.537099][T18453] cdc_wdm 7-1:1.0: cdc-wdm0: USB WDM device [ 1471.537141][T18453] cdc_wdm 7-1:1.0: Unknown control protocol [ 1471.706808][T20040] netlink: 55631 bytes leftover after parsing attributes in process `syz.5.3478'. [ 1471.801730][ T31] audit: type=1804 audit(2000000606.548:237): pid=20041 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.3479" name="bus" dev="ramfs" ino=62403 res=1 errno=0 [ 1471.994905][T20043] md: couldn't update array info. -22 [ 1472.042329][T19195] md_update_sb: can't update sb for read-only array md0 [ 1473.221684][T20059] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3484'. [ 1474.372153][ T5769] usb 7-1: USB disconnect, device number 20 [ 1474.738449][T20074] loop0: detected capacity change from 0 to 256 [ 1474.772533][T20074] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0xa9436649, utbl_chksum : 0xe619d30d) [ 1475.187286][T20085] fuse: Unknown parameter 'group_i00000000000000000000' [ 1475.980967][T20091] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3491'. [ 1476.000195][T20074] bio_check_eod: 265 callbacks suppressed [ 1476.001780][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.001780][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.002805][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.002805][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.002935][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.002935][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003041][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003041][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003146][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003146][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003249][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003249][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003354][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003354][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003458][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003458][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003561][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003561][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.003666][T20074] syz.0.3487: attempt to access beyond end of device [ 1476.003666][T20074] loop0: rw=2049, sector=34359738480, nr_sectors = 8 limit=256 [ 1476.096161][ T5769] iomap_finish_ioend_buffered_write: 265 callbacks suppressed [ 1476.096182][ T5769] loop0: writeback error on inode 1049152, offset 28672, sector 34359738480 [ 1476.096294][ T5769] loop0: writeback error on inode 1049152, offset 32768, sector 34359738480 [ 1476.096393][ T5769] loop0: writeback error on inode 1049152, offset 36864, sector 34359738480 [ 1476.096496][ T5769] loop0: writeback error on inode 1049152, offset 40960, sector 34359738480 [ 1476.096596][ T5769] loop0: writeback error on inode 1049152, offset 45056, sector 34359738480 [ 1476.096692][ T5769] loop0: writeback error on inode 1049152, offset 49152, sector 34359738480 [ 1476.096789][ T5769] loop0: writeback error on inode 1049152, offset 53248, sector 34359738480 [ 1476.096912][ T5769] loop0: writeback error on inode 1049152, offset 57344, sector 34359738480 [ 1476.097015][ T5769] loop0: writeback error on inode 1049152, offset 61440, sector 34359738480 [ 1476.097115][ T5769] loop0: writeback error on inode 1049152, offset 65536, sector 34359738480 [ 1477.385450][T20102] Cannot find del_set index 4 as target [ 1479.027821][T20121] netlink: 68 bytes leftover after parsing attributes in process `syz.6.3499'. [ 1479.228883][T20116] md: couldn't update array info. -22 [ 1479.229305][T19195] md_update_sb: can't update sb for read-only array md0 [ 1479.522154][T20133] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1479.535815][T20133] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1479.680831][T20139] fuse: Unknown parameter 'group_i00000000000000000000' [ 1479.908208][T20141] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3506'. [ 1480.437271][T20170] netlink: 68 bytes leftover after parsing attributes in process `syz.0.3515'. [ 1481.527174][T20167] bridge0: port 2(bridge_slave_1) entered disabled state [ 1481.527384][T20167] bridge0: port 1(bridge_slave_0) entered disabled state [ 1482.233013][T20212] ip_tables: iptables: counters copy to user failed while replacing table [ 1482.327420][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1482.362042][T20167] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1482.474934][T20216] loop9: detected capacity change from 0 to 16 [ 1482.503470][T20216] erofs (device loop9): mounted with root inode @ nid 36. [ 1482.795210][T20201] virtio_blk virtio3: 1/0/0 default/read/poll queues [ 1482.800620][T20201] virtio_blk virtio3: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 1483.428332][T20201] Dev vda: unable to read RDB block 8 [ 1483.434398][T20201] vda: unable to read partition table [ 1483.946578][ T1303] ieee802154 phy0 wpan0: encryption failed: -22 [ 1483.953124][ T1303] ieee802154 phy1 wpan1: encryption failed: -22 [ 1484.055151][ T6716] netdevsim netdevsim5 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.055232][ T6716] netdevsim netdevsim5 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.055352][ T6716] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.073391][ T6716] netdevsim netdevsim5 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1484.739541][T20218] loop3: detected capacity change from 0 to 32768 [ 1484.836803][T20218] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1484.840421][T20240] netlink: 68 bytes leftover after parsing attributes in process `syz.9.3531'. [ 1485.147724][T20218] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 1485.272969][T20218] XFS (loop3): Starting recovery (logdev: internal) [ 1485.432033][T20218] XFS (loop3): Ending recovery (logdev: internal) [ 1485.788258][T16901] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 1487.560493][T20280] loop0: detected capacity change from 0 to 4096 [ 1487.671454][T20280] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1488.023441][T20297] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3548'. [ 1488.239592][T20300] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3536'. [ 1488.452930][T17877] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.891368][T20315] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1489.907265][T20315] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1597.118563][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1597.125530][ C0] rcu: (detected by 0, t=10502 jiffies, g=132725, q=769 ncpus=2) [ 1597.133331][ C0] rcu: All QSes seen, last rcu_preempt kthread activity 10503 (4295096910-4295086407), jiffies_till_next_fqs=1, root ->qsmask 0x0 [ 1597.146693][ C0] rcu: rcu_preempt kthread starved for 10504 jiffies! g132725 f0x2 RCU_GP_WAIT_FQS(5) ->state=R ->cpu=0 [ 1597.157800][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1597.167761][ C0] rcu: RCU grace-period kthread stack dump: [ 1597.173638][ C0] task:rcu_preempt state:R running task stack:28016 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1597.187166][ C0] Call Trace: [ 1597.190442][ C0] [ 1597.193372][ C0] __schedule+0x17db/0x58f0 [ 1597.197929][ C0] ? __pfx___schedule+0x10/0x10 [ 1597.202795][ C0] ? lock_acquire+0x115/0x350 [ 1597.207485][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.213138][ C0] ? schedule+0x90/0x2b0 [ 1597.217400][ C0] schedule+0x164/0x2b0 [ 1597.221576][ C0] schedule_timeout+0x152/0x2c0 [ 1597.226438][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1597.231819][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1597.237126][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.242768][ C0] ? _raw_spin_unlock_irqrestore+0x4c/0x80 [ 1597.248590][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.254232][ C0] ? prepare_to_swait_event+0x322/0x350 [ 1597.259798][ C0] rcu_gp_fqs_loop+0x30c/0x11f0 [ 1597.264658][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.270302][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.275947][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.281594][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1597.286883][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1597.292103][ C0] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 1597.297927][ C0] rcu_gp_kthread+0x9e/0x2b0 [ 1597.302530][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1597.307732][ C0] ? __kthread_parkme+0x71/0x1f0 [ 1597.312689][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.318329][ C0] ? __kthread_parkme+0x199/0x1f0 [ 1597.323376][ C0] kthread+0x38b/0x480 [ 1597.327451][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1597.332657][ C0] ? __pfx_kthread+0x10/0x10 [ 1597.337251][ C0] ret_from_fork+0x514/0xb70 [ 1597.341846][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1597.346979][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.352618][ C0] ? __switch_to+0xc89/0x1420 [ 1597.357314][ C0] ? __pfx_kthread+0x10/0x10 [ 1597.361911][ C0] ret_from_fork_asm+0x1a/0x30 [ 1597.366717][ C0] [ 1597.369729][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1597.376054][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Tainted: G L syzkaller #0 PREEMPT(full) [ 1597.386558][ C0] Tainted: [L]=SOFTLOCKUP [ 1597.390871][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/05/2026 [ 1597.400925][ C0] RIP: 0010:_raw_spin_unlock_irqrestore+0x47/0x80 [ 1597.407355][ C0] Code: f7 e8 5d c5 bc f5 f7 c3 00 02 00 00 74 05 e8 50 02 e9 f5 9c 58 a9 00 02 00 00 75 29 f7 c3 00 02 00 00 74 01 fb bf 01 00 00 00 f4 de ad f5 65 48 8b 05 9c 71 ad 07 48 85 c0 74 18 5b 41 5e e9 [ 1597.426962][ C0] RSP: 0018:ffffc90000007e10 EFLAGS: 00000206 [ 1597.433034][ C0] RAX: 0000000000000006 RBX: 0000000000000283 RCX: 8000000000000102 [ 1597.441007][ C0] RDX: 0000000000000000 RSI: ffffffff8e474a01 RDI: 0000000000000001 [ 1597.448978][ C0] RBP: ffff888029bad410 R08: ffffffff907a167f R09: 1ffffffff20f42cf [ 1597.456949][ C0] R10: dffffc0000000000 R11: fffffbfff20f42d0 R12: ffff8880b8628280 [ 1597.464924][ C0] R13: ffffffff87c39980 R14: ffff8880b8628280 R15: 1ffff110170c50aa [ 1597.472902][ C0] FS: 0000000000000000(0000) GS:ffff888124cd9000(0000) knlGS:0000000000000000 [ 1597.481831][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1597.488413][ C0] CR2: 00007ffe8fea6ff8 CR3: 0000000060b51000 CR4: 0000000000350ef0 [ 1597.496383][ C0] Call Trace: [ 1597.499657][ C0] [ 1597.502502][ C0] __hrtimer_run_queues+0x2bf/0xa10 [ 1597.507742][ C0] hrtimer_run_softirq+0x1e3/0x2e0 [ 1597.512879][ C0] handle_softirqs+0x226/0x860 [ 1597.517659][ C0] ? __irq_exit_rcu+0xcb/0x220 [ 1597.522441][ C0] __irq_exit_rcu+0xcb/0x220 [ 1597.527049][ C0] irq_exit_rcu+0x9/0x30 [ 1597.531307][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1597.536956][ C0] [ 1597.539881][ C0] [ 1597.542810][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1597.548793][ C0] RIP: 0010:pv_native_safe_halt+0xf/0x20 [ 1597.554443][ C0] Code: 2c 90 02 e9 5e 00 2c f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d d3 40 25 00 fb f4 37 00 2c f5 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 [ 1597.574045][ C0] RSP: 0018:ffffffff8ea07ca0 EFLAGS: 00000246 [ 1597.580115][ C0] RAX: 00000000029ca8dd RBX: ffffffff819ba090 RCX: 8000000000000001 [ 1597.588085][ C0] RDX: 0000000000000001 RSI: ffffffff8e474a01 RDI: ffffffff8c6d9480 [ 1597.596056][ C0] RBP: ffffffff8ea07d78 R08: ffff8880b8633a1b R09: 1ffff110170c6743 [ 1597.604031][ C0] R10: dffffc0000000000 R11: ffffed10170c6744 R12: 0000000000000000 [ 1597.612003][ C0] R13: 1ffffffff1d51df0 R14: 1ffffffff1d40f9c R15: dffffc0000000000 [ 1597.619980][ C0] ? do_idle+0x2e0/0x540 [ 1597.624251][ C0] default_idle+0x9/0x20 [ 1597.628498][ C0] default_idle_call+0x72/0xb0 [ 1597.633273][ C0] do_idle+0x2e0/0x540 [ 1597.637362][ C0] ? __pfx_do_idle+0x10/0x10 [ 1597.641972][ C0] ? do_idle+0x11/0x540 [ 1597.646153][ C0] cpu_startup_entry+0x43/0x60 [ 1597.650937][ C0] rest_init+0x378/0x3a0 [ 1597.655192][ C0] ? __pfx_rest_init+0x10/0x10 [ 1597.659972][ C0] ? __pfx_kernel_init+0x10/0x10 [ 1597.664921][ C0] ? __pfx_acpi_hw_get_mode+0x10/0x10 [ 1597.670307][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.675946][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1597.681231][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.686869][ C0] ? acpi_ut_status_exit+0x120/0x1f0 [ 1597.692160][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1597.697803][ C0] ? acpi_enable_subsystem+0x286/0x3c0 [ 1597.703274][ C0] start_kernel+0x392/0x3e0 [ 1597.707793][ C0] x86_64_start_reservations+0x24/0x30 [ 1597.713271][ C0] x86_64_start_kernel+0x137/0x1b0 [ 1597.718401][ C0] common_startup_64+0x13e/0x157 [ 1597.723371][ C0]