last executing test programs: 13m13.481097884s ago: executing program 4 (id=16): openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x28100, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket(0x10, 0x3, 0x0) write(r1, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) r2 = socket$inet(0xa, 0x801, 0x84) listen(r2, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x1) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r1, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) 13m10.237275163s ago: executing program 4 (id=22): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f00007ff000/0x4000)=nil, 0x4000, 0x4000, 0x3, &(0x7f0000580000/0x4000)=nil) mremap(&(0x7f0000580000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f00007ff000/0x2000)=nil) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000040)=@sack_info={r4, 0x0, 0x4}, &(0x7f0000000140)=0xc) 13m9.21803021s ago: executing program 4 (id=25): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x2, 0xc}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @alu={0x6, 0x0, 0x3, 0xa, 0x0, 0x2}, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000200)={r4, r3}, 0xc) 13m4.680822577s ago: executing program 4 (id=33): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) socket$unix(0x1, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) socket$alg(0x26, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000003c0)) r0 = syz_io_uring_setup(0x462, &(0x7f0000000280)={0x0, 0x40000020, 0x10, 0x2, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000000)=0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000200)=@IORING_OP_SENDMSG={0x9, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x54, 0x1}) openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_TEE={0x21, 0x3d, 0x0, @fd, 0x0, 0x0, 0xffff, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 13m3.967029648s ago: executing program 4 (id=36): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000280)={0x2, 0x40000105, 0x0, 0x0}) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) getresuid(0x0, &(0x7f00000001c0), 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1) ioctl$KVM_PRE_FAULT_MEMORY(0xffffffffffffffff, 0xc040aed5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x3) 12m51.118147005s ago: executing program 4 (id=56): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x9, 0x66c5, 0xa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000480)={0x4, 0x3, 0x1, 0x40, 0x4, 0x101, 0xc}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) close_range(r3, r0, 0x0) 12m35.683843557s ago: executing program 32 (id=56): r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) pwritev2(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x9, 0x66c5, 0xa) r1 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) r2 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000240), 0xa2003, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r2, 0xc0184800, &(0x7f0000000100)={0x20004, r1, 0x2}) syz_open_dev$dri(&(0x7f0000000280), 0x1ff, 0x140) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$VIDIOC_ENUM_FREQ_BANDS(r3, 0xc0405665, &(0x7f0000000480)={0x4, 0x3, 0x1, 0x40, 0x4, 0x101, 0xc}) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xa, 0x0, 0x0) openat$sw_sync(0xffffff9c, &(0x7f0000000080), 0x80800, 0x0) close_range(r3, r0, 0x0) 2m23.151412508s ago: executing program 3 (id=1418): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) futex(0x0, 0x85, 0x1, 0x0, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_CLIENT(0xffffffffffffffff, 0x404c534a, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(0xffffffffffffffff, 0x40605346, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='oom_adj\x00') writev(r4, &(0x7f00000001c0)=[{&(0x7f0000000140)='1', 0x1}], 0x1) 2m21.854304795s ago: executing program 2 (id=1420): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1, 0x0}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r3, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_GETPLANE(r1, 0xc02064b6, &(0x7f0000000240)={0x0, r2, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, r4, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0xffffffff, 0x85}) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r6, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r6, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) sendto$inet(r6, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 2m21.363347257s ago: executing program 2 (id=1422): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r2, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 2m20.945332262s ago: executing program 2 (id=1423): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r1, 0x0, 0x0, 0x5}) accept$netrom(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 2m18.496212812s ago: executing program 2 (id=1427): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000097cfb5b6808151f6000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nodiscard}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x490, &(0x7f0000001300)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 2m18.449022914s ago: executing program 3 (id=1430): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r4, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 2m17.418749619s ago: executing program 2 (id=1431): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r4, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 2m15.852614988s ago: executing program 2 (id=1435): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000005f40)=""/160, 0xa0}], 0x3}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044010}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @empty, 0x4}}, 0x0, 0x0, 0x26, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m15.554755625s ago: executing program 33 (id=1435): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x34}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="04"], 0x14}, 0x1, 0x0, 0x0, 0x4044020}, 0x4000000) recvmmsg(r1, &(0x7f0000001700)=[{{0x0, 0x0, &(0x7f00000060c0)=[{&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f00000000c0)=""/127, 0x7f}, {&(0x7f0000005f40)=""/160, 0xa0}], 0x3}, 0x9}], 0x1, 0x40030002, 0x0) sendmsg$nl_generic(r1, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000002b40)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x6, @remote, 0x2}}, 0x0, 0x0, 0x6, 0x0, "3f114438efdaca16d374b49a365be44d5e860ea3ba676c0b5047b80e2c3535d5bd9db3c8572560f4d1be5cd41f7716082ee3589f099942e6f1c395ddb8160381baadf27900"}, 0xd8) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r1) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r3, &(0x7f00000013c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r4, 0x100, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x1d}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x4f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}]}, 0x38}, 0x1, 0x0, 0x0, 0x4044010}, 0x80) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000100)={@in6={{0xa, 0x0, 0x20000000, @empty, 0x4}}, 0x0, 0x0, 0x26, 0x0, "ddfd3b7ed7c6a1c172a987ae5ce3cafd64c9a736831a5912d606798fb75c9981c4b3ac0e06891ff18bc5543ed57215a3c45f9154dfa319e52a15a2b9acf80c07fb1a854dad742eef6187f2304844c296"}, 0xd8) sendto$inet6(r2, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m14.396124358s ago: executing program 3 (id=1440): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x100, 0x5) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) sendto(r4, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 2m13.266896535s ago: executing program 3 (id=1442): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, 0x6}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) socket$igmp6(0xa, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0600000097cfb5b6808151f6000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000180)='veth0_macvtap\x00', 0x10) fcntl$dupfd(r0, 0x0, r0) syz_mount_image$ext4(&(0x7f0000000ac0)='ext4\x00', &(0x7f0000000440)='./file0\x00', 0x3810744, &(0x7f0000000480)={[{@noauto_da_alloc}, {@nobh}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x4}}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x2}}, {@nodiscard}, {@sysvgroups}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}}, {@noauto_da_alloc}, {@test_dummy_encryption}]}, 0x1, 0x490, &(0x7f0000001300)="$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") r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f00000001c0)=0x10) 2m10.877500017s ago: executing program 3 (id=1448): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r4, 0x731, 0x80000004, 0x0, {0x38}}, 0x14}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 2m9.428676227s ago: executing program 3 (id=1451): mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8800, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) userfaultfd(0x80801) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000011c000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c4e2952b64e100440f20c0350a000000440f22c0b99f0a00000f3266baa10066ed430f22a3430f01ca0f01c366ba2100b077ee420f3066baf80cb848b9258def66bafc0cec", 0x45}], 0x1, 0xd, &(0x7f0000000280), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 2m8.513269853s ago: executing program 34 (id=1451): mount_setattr(0xffffffffffffffff, &(0x7f0000001d80)='.\x00', 0x8800, 0x0, 0x0) mlock2(&(0x7f0000247000/0x1000)=nil, 0x1000, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) userfaultfd(0x80801) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f000011c000/0x18000)=nil, &(0x7f0000000240)=[@text64={0x40, &(0x7f00000001c0)="c4e2952b64e100440f20c0350a000000440f22c0b99f0a00000f3266baa10066ed430f22a3430f01ca0f01c366ba2100b077ee420f3066baf80cb848b9258def66bafc0cec", 0x45}], 0x1, 0xd, &(0x7f0000000280), 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) socket(0x10, 0x3, 0x0) r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r2, 0xae60) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, &(0x7f0000000040)={0x1, 0x0, [{0x4b564d02, 0xec000000, 0xcd}]}) munlockall() madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x19) 39.570907475s ago: executing program 5 (id=1601): r0 = socket(0x2, 0x80805, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140), 0x8) 30.144476525s ago: executing program 5 (id=1619): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r3, 0x0, 0x0, 0x2}, 0x20) r4 = syz_open_dev$tty1(0xc, 0x4, 0x2) write(r4, &(0x7f00000008c0)="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", 0xb77) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x40) syz_mount_image$vfat(&(0x7f0000003880), &(0x7f00000000c0)='./file1\x00', 0x200000, &(0x7f00000004c0)=ANY=[@ANYBLOB="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", @ANYRES32], 0x88, 0x2a9, &(0x7f0000000c00)="$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") open(0x0, 0x80242, 0x1df2a23c5997fa5f) 27.77648851s ago: executing program 5 (id=1622): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 23.962274556s ago: executing program 5 (id=1631): socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x80000000b49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000900), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x1000, &(0x7f0000000600)={0xffffffffffffffff}, 0x106, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_LISTEN(r2, &(0x7f00000000c0)={0x7, 0x8, 0xfa00, {r3}}, 0x10) ioctl$MEDIA_IOC_REQUEST_ALLOC(0xffffffffffffffff, 0x80047c05, &(0x7f0000000940)) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) setregid(0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x3c) writev(r4, &(0x7f00000000c0), 0x0) ioctl$DRM_IOCTL_DMA(0xffffffffffffffff, 0xc0406429, &(0x7f0000000440)={0x0, 0x6, &(0x7f0000000340)=[0x20000000, 0x9, 0x9, 0xfffffff3, 0x6, 0x401], 0x0, 0x50, 0x8, 0x7, &(0x7f00000003c0)=[0x5, 0xffffffd6, 0xcdc5, 0x7, 0x10, 0x8, 0x40, 0x5], &(0x7f0000000400)=[0x1, 0x599, 0x0, 0x4469]}) ioctl$USBDEVFS_RELEASE_PORT(0xffffffffffffffff, 0x80045519, &(0x7f0000000280)=0xffff7fff) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_ATOMIC(0xffffffffffffffff, 0xc03864bc, 0x0) 20.536918932s ago: executing program 1 (id=1638): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) openat$nullb(0xffffffffffffff9c, 0x0, 0x4000000004002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000008c0), 0xffffffffffffffff) r4 = syz_open_dev$usbmon(&(0x7f0000000180), 0x5, 0x0) ioctl$MON_IOCT_RING_SIZE(r4, 0x9204, 0x68555) keyctl$session_to_parent(0x12) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x3, r0, 0x0, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000003c0)=ANY=[@ANYBLOB, @ANYRESDEC=r3], 0x84}, 0x1, 0x0, 0x0, 0x40008d0}, 0xc0cc810) sendmsg$NFT_BATCH(r5, 0x0, 0x40) 19.320497114s ago: executing program 1 (id=1639): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = fcntl$dupfd(r0, 0x0, r0) ioctl$SG_SET_DEBUG(r1, 0x227e, &(0x7f00000000c0)) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) ioctl$DRM_IOCTL_MODE_CREATEPROPBLOB(0xffffffffffffffff, 0xc01064bd, &(0x7f0000000000)={&(0x7f00000001c0)=';', 0x1}) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, 0x0) ioctl$DRM_IOCTL_MODE_GETCRTC(r2, 0xc06864a1, &(0x7f00000003c0)={0x0}) ioctl$DRM_IOCTL_MODE_SETPLANE(r1, 0xc03064b7, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x80000001, 0x4, 0x9, 0x7c7d2876, 0x4b, 0x2, 0x0, 0xffffffff, 0x85}) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @broadcast}, 0x2f) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000001c0)=0xa3, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}, 0x10) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 19.261313403s ago: executing program 0 (id=1641): r0 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x40) setsockopt$inet_sctp_SCTP_NODELAY(r0, 0x84, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000600)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x4) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid_for_children\x00') bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000940)=@bpf_lsm={0x1e, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e21, 0x679, @dev={0xfe, 0x80, '\x00', 0x3a}, 0x1}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000005400)=[{{&(0x7f0000000040)={0xa, 0x4e27, 0xfff, @remote, 0x2}, 0x1c, 0x0}}], 0x40000000000016d, 0x1000) pwrite64(r0, 0x0, 0x0, 0xfecc) 16.436139807s ago: executing program 0 (id=1643): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 16.100663137s ago: executing program 5 (id=1645): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x116e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r4 = fanotify_init(0x81, 0x40000) fanotify_mark(r4, 0x105, 0x40001032, r3, 0x0) read$FUSE(r4, &(0x7f0000002300)={0x2020}, 0x2020) r5 = openat$sndseq(0xffffff9c, &(0x7f0000000200), 0x80080) ioctl$SNDRV_SEQ_IOCTL_PVERSION(r5, 0x80045300, &(0x7f0000002000)) r6 = syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x12) setsockopt$sock_int(r0, 0x1, 0x9, &(0x7f0000000480)=0x7, 0x4) ioctl$VIDIOC_S_INPUT(r6, 0xc0045627, &(0x7f00000001c0)=0x2) 15.84095031s ago: executing program 7 (id=1646): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r3, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) setsockopt$inet6_opts(r3, 0x29, 0x37, &(0x7f0000000000)=ANY=[], 0x18) connect$inet6(r3, &(0x7f0000000240)={0xa, 0x6e23, 0x2, @mcast1, 0x9}, 0x1c) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmmsg$inet6(r3, &(0x7f0000001840), 0x3b, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f00000021c0)={0x2020}, 0x2020) openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8, 0x0, 0x0, 0xffd0}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x66, 0x8}, @initr0, @exit, @printk={@x, {}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x94) 13.817133637s ago: executing program 7 (id=1648): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000001000)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r3 = syz_open_dev$video(0x0, 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205647, &(0x7f0000000100)={0xf000000, 0x8, 0x0, 0xffffffffffffffff, 0x0, 0x0}) timer_create(0x0, 0x0, 0x0) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x149002, 0x0) write$P9_RSTATu(r4, &(0x7f0000000540)={0x41c, 0x7d, 0x0, {{0x500, 0x2db, 0x0, 0x5000000, {0xcdb74b01717932d9, 0x400}, 0x10000000, 0x0, 0x0, 0x8000fe, 0x1f, '\x04nodev{cvfox\x92\xff\xff\xff\x81\x02\x00\x00\xff\xff\xff0\xff\xce\xbc\x92\x00\x00\x00', 0x120, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05>\x00\x1e\x00\x00\x18{\x82O^\x97\xe5p\xbeg\xb0^\xb0V\xca|=9\x00\xb5\x00\x00;Y_\xcb\x14\x03\x03\x00\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x1a\xb4\x94\xcc\xe37A\x95\xcc\x90U\xd1\xc8~x\xcdY\x96\xd9\x967\x87\xe7\xb6\x98\"l5\xf0\x17K\r\xf3\xf8\x91\xcf\x99lI\b\xe889d\x01,\xe2\x15]\xd6\xb3\xf4kb\xcay$\xeba\x13\x90\x98\xb2\"\xbc\xf4/\xeah1Z\x81ju\x16i\xd6%\xe5\xe4\xe4_\x96?\x1e\xe2\x1e\xb7N\xf3\xcd\xf9\x8f7\xb2?\r\xac\xc9\xd9\xe5\xd4\xbe\xbf\x91J\x8d,\x9f\x19fxu\xd1\r\xeb\xddkT\x03\xf6j\xe8}\x8a/\x067\xcdH\x82\x8f,W\xc3,\x19\xc3#9(O\xa5\x14\xa9#l\x1b\x17\xe7R\x93^J\xf4v\x86\xa6\xcfHC\x10\xec\xd1\xe8\x98l\x12_\xb7B\xfd2\xfc]\x87\xe0\x8aj\x8e\r\x94X\x02\xd7\x7f\x15\xb4G\t\x8b\xd5c\x9c\x0e\xba\\o\xd2\x132\xf6\xddX\x8b\x17\"=\xa7l-\xf5\x91\v_\xf9\xfc\x01\x9f\xd9&', 0x12, '\xcf\xc2\x00\x10\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3\x13\xf6\x00', 0x157, '\xf8\xf6i\xfbqm\xcf1^\xca\xf3\x85+\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xd4\x89\xdad\x9a7\x00\xd0\x02\xaf\x02k\x9en\r\xca\x00\x89\xfdL\xd0\x9c\xf8\r\xbb\xe9Q\xb2\x1f5y\x8b\n\xb6hx\xc0\x9d\"\x8b7\x88\\\x10\x8a\xcb\xee\xcd\xbe\x06Kz\xd8\xd79\x9f\xd5\x18j\'t\x8f$\x88\'\x06\x8f\x89\x0fOPZ\x04\xc4$\xd7%\xc8\x1exa\xe1 --\xc4\xc94\x1dWH\xff\x9eS\x9e\rIT\x8fz\x1c\xcf^\xac\x9a\xa0\x92L\a\x00\x00\x00\xf3|c\xccjn1\xa7}\x1f\xad\x05\x83h\xae\xd5\xe3\xc1M\x89\x96\x87\n\v\t\xd0l\x97\x04\x98\v\xb4GxB\xb1\xed.\x8f%\x01\xb2_\xbc\\^\xe6}\x8bnN\xc7G\xe9]\x03\xf6x\xd7\x1a-\xa34\x92\xf8\xd4\x87\xeeB|Y\xf6\xe7\ni\xa9J}\x987\xd6\x02c\xd68\aM\xfa\x04\xa4V\x04\tD\xb7\x02\"gFh\xc7D\xb7\xba\xda\xad4uXO 5|\x84 \xc1IO\x8d\r4 *\xfb5\xccVp\xe2@\xbe\xba\x96SS\xaf\xe9F\xc0\xc1\xb5\t\x1d9U\xc8\xc8_\xf1\xc7q|\n'}, 0x12c, 'odev-n\xb1{#\x00\xf9\xda\xa5\xee#&n\xcf\x85\xfe\xa6^B\xd9y\xa3\xfd\xe5\xf4u\xda\xf0;\x11r\xd9{\xad\xc7\tZ\xfdv\xfeO\x04A\xf7\xf7t\x1e\xac\x03\x00\x00\xec\xff\x00\x00\xdb\xa0\xc2\xf7\xf0\x9f\xf5<~M\x1a\xd6n-\a\x01\x98\x01\x9f0\x11\x84G\xaa\x9at\xf5\x16\x85\xf5\x06\xae\x89H\x06\x87\x82g\xd5\xa1)\x8dy,J7\xf2\xe1\xcb\xbd$\x82\x92\x9a\r\x89r\xb5\xcf\x01.\xa5\xb0\xd7#\x85\x9d\xba?\x93\xae\xd3\xb49\xe7\xca\xc0}\xe0\x9d\x1dh\xa6\x033\xa8\x82F}+1\xaa\xcd\xf9\x18\x85I\xb1\x12]lL\x9b\x18\xc2\xfbV\xc5}}\xc6&\xe49\a\x96\xa1\xebH\'Fi\xab\x13\xf8\xb1\x1d\x14`Y\xf3\x10\xe2cMY?\xece\xd5)\xf3\x82\x06fd\xdf$NL\x90W\np\x04\x9f9\x9f\x06\x1fu\xb7y|\xe1\xfe\x11\xea\x91\x96\t\xd5\x1aA\xdd=\xe3\x04\xbd|~\xd0\xa4V\xf0\xae\x12Qa\x05\xc9\xce\x88}\xf5\xa6\xe0\xb6\xa7}Yl\xf8\x8b\xa6\xe5\xc69|}P!\xd7\x98\x95(\xfd\x179\xe1\xc2\xd8\x7f\xff\x00'/300, 0xffffffffffffffff, 0xee00}}, 0x41c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB], &(0x7f0000000180)='GPL\x00'}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$inet(r5, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0x0) close(r6) 13.551022749s ago: executing program 1 (id=1650): r0 = socket(0x2, 0x80805, 0x0) openat$sndseq(0xffffffffffffff9c, 0x0, 0xe0c81) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000540)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x91, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, &(0x7f0000000400)={0x3fb, 0x8000, 0x400000000001, 0x9, 0x40000000800000, 0xf, 0x80000002, 0x2}, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r4, 0x9c3fa077fa966179, 0x0, 0x0, {{0x7e}, {@void, @void}}}, 0x14}}, 0x4000054) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4000}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000810}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x83, &(0x7f0000000140), 0x8) 12.309973117s ago: executing program 7 (id=1651): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x61, 0x100001}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) open(0x0, 0x84242, 0x1df2a23c5997fa7f) syz_io_uring_setup(0x76b9, 0x0, &(0x7f0000000340), 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) open$dir(&(0x7f00000001c0)='./file0\x00', 0x4000, 0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) shutdown(0xffffffffffffffff, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r2, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, 0x0, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000000)='net/softnet_stat\x00') preadv(r3, &(0x7f00000007c0)=[{0x0}], 0x1, 0x8e, 0x80) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f00000000c0)={0x84, @private=0xa010101, 0x11, 0x3, 'lblc\x00', 0x22, 0x0, 0x7e}, 0x2c) r4 = socket$kcm(0xa, 0x2, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r0, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010101, 0x4e21, 0x3, 'wrr\x00', 0x3, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x4, 0x1cb, 0x12d60, 0x12d58}}, 0x44) sendmsg$sock(r4, &(0x7f0000000400)={&(0x7f0000000580)=@in6={0x2, 0x4e22, 0x0, @dev}, 0x80, 0x0, 0x0, &(0x7f0000000000)=[@mark={{0x14, 0x1, 0x24, 0x3}}], 0x18}, 0x0) 11.933346369s ago: executing program 5 (id=1652): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, 0x0, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_SYNC_FILE_RANGE={0x8, 0x40, 0x0, @fd=r1, 0x0, 0x0, 0x5}) accept$netrom(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 11.188199076s ago: executing program 6 (id=1653): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 10.221121232s ago: executing program 6 (id=1654): socket$inet6_udp(0xa, 0x2, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x6048800) socketpair$unix(0x1, 0x5, 0x0, 0x0) socket$phonet_pipe(0x23, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r3, 0x114, 0x8, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000003, 0x13, 0xffffffffffffffff, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) r4 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80002, 0x0) ioctl$SNDCTL_DSP_SETFMT(r4, 0xc0045005, &(0x7f0000000080)=0x40000) 9.401240675s ago: executing program 0 (id=1655): fsopen(&(0x7f0000000000)='erofs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x8b}, 0x0) setxattr$incfs_size(&(0x7f0000000180)='./file0\x00', &(0x7f00000001c0), &(0x7f0000000280)=0xfffffffffffffff9, 0x8, 0x1) ptrace$ARCH_SHSTK_ENABLE(0x1e, 0x0, 0x3, 0x5001) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000140)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@noblock_validity}, {}, {@sysvgroups}, {@resuid={'resuid', 0x3d, 0xee01}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@nodelalloc}, {@grpid}, {@noauto_da_alloc}, {@nomblk_io_submit}]}, 0x3, 0x56a, &(0x7f00000015c0)="$eJzs3c9rHFUcAPDvbJL+1qZQinqQQA9WajdN4o8KQutRtFjQe12SaSjZdEt2U5pYaHuwFy9SBBEL4h/g3WPxH/CvKGihSAl68BKZzWy7TbL5uXW3zucD0743M5s3b998335nZ5cNoLBGsn9KEa9GxDdJxOG2bYORbxxZ2W/p8Y3JbEliefmzP5NI8nWt/ZP8/4N55ZWI+PWriJOlte3WFxZnKtVqOpfXRxuzV0frC4unLs9WptPp9Mr4xMSZdybG33/v3a719c0Lf3//6f2Pznx9fOm7nx8euZvEuTiUb2vvxy7caq+MxEj+nAzFuVU7jnWhsX6S9PoA2JGBPM6HIpsDDsdAHvXA/9/NiFgGCioR/1BQrTygdW3fpevgF8ajD1cugNb2f3DlvZHY17w2OrCUPHNllF3vDneh/ayNX/64dzdbYpP3IW52oT2Allu3I+L04ODa+S/J57+dO91883hjq9so2usP9NL9LP95a738p/Qk/4l18p+D68TuTmwe/6WHXWimoyz/+2Dd/PfJ1DU8kNdeauZ8Q8mly9X0dES8HBEnYmhvVt/ofs6ZpQfLnba153/ZkrXfygXz43g4uPfZx0xVGpXd9Lndo9sRrz3Nf5NYM//va+a6q8c/ez4ubLGNY+m91ztt27z/7bqfAS//FPHGuuP/9I5WsvH9ydHm+TDaOivW+uvOsd86tb+9/ndfNv4HNu7/cNJ+v7a+/TZ+3PdP2mnbTs//PcnnzfKefN31SqMxNxaxJ/lk7frxp49t1Vv7Z/0/cXzj+W+9839/RHyxxf7fOXqn4679MP5T2xr/7RcefPzlD53a39r4v90sncjXbGX+2+oB7ua5AwAAAAAAgH5TiohDkZTKT8qlUrm88vmOo3GgVK3VGycv1eavTEXzu7LDMVRq3ek+3PZ5iLH887Ct+viq+kREHImIbwf2N+vlyVp1qtedBwAAAAAAAAAAAAAAAAAAgD5xsMP3/zO/D/T66IDnzk9+Q3FtGv/d+KUnoC95/YfiEv9QXOIfikv8Q3GJfygu8Q/FJf6huMQ/AAAAAAAAAAAAAAAAAAAAAAAAAAAAdNWF8+ezZXnp8Y3JrD51bWF+pnbt1FRanynPzk+WJ2tzV8vTtdp0NS1P1mY3+3vVWu3q2HjMXx9tpPXGaH1h8eJsbf5K4+Ll2cp0ejEd+k96BQAAAAAAAAAAAAAAAAAAAC+W+sLiTKVaTecUOhbORl8cxo4LyWajfDY/GXbUxGDvO6jwHAo9npgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoM2/AQAA///fKTPH") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x4004, &(0x7f0000000340)={[{@jqfmt_vfsv1}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x6}}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}], [{@smackfsdef}, {@fsmagic={'fsmagic', 0x3d, 0x5}}, {@fsuuid={'fsuuid', 0x3d, {[0x64, 0x34, 0x63, 0x38, 0x66, 0x30, 0x32, 0x63], 0x2d, [0x62, 0x33, 0x61, 0x35], 0x2d, [0x38, 0x61, 0x31, 0x38], 0x2d, [0x36, 0x35, 0x30, 0x30], 0x2d, [0x62, 0x6, 0x63, 0x30, 0x34, 0x34, 0x34, 0x37]}}}]}, 0x0, 0x260, &(0x7f0000000bc0)="$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") prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000940)='./file1\x00', 0x2fffffd) sendfile(r0, r0, 0x0, 0xe3aa6ea) 9.381807882s ago: executing program 1 (id=1656): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000040), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'ip6_vti0\x00', &(0x7f00000000c0)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x5, 0xe54, 0x26, @dev={0xfe, 0x80, '\x00', 0x17}, @rand_addr=' \x01\x00', 0x8000, 0x8, 0x7b91, 0x9}}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0xd40, 0xd2) close(r2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) mount$9p_fd(0x0, &(0x7f0000000080)='./file1\x00', &(0x7f00000000c0), 0x200000, &(0x7f0000000000)={'trans=fd,', {'rfdno', 0x3d, r2}, 0x2c, {'wfdno', 0x3d, r3}}) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000440)={0xffffffffffffffff, 0x0, 0x0}, 0x20) 8.375148571s ago: executing program 6 (id=1657): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeeb, 0x8031, 0xffffffffffffffff, 0xc36e5000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r4 = accept4(r3, 0x0, 0x0, 0x80800) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x8040010) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x10, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2, 0x0, 0x0, 0xf5000000}, 0x0) 7.817886061s ago: executing program 0 (id=1658): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) mq_timedsend(0xffffffffffffffff, 0x0, 0x0, 0x10000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x1d) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket(0x10, 0x803, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[@ANYBLOB="9feb010018000000000000003400000034000000020000000000000002000004000000000000000002000000000000000000000002000000000000000100000000000001"], 0x0, 0x4e}, 0x20) preadv(0xffffffffffffffff, &(0x7f00000002c0)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x35, 0x88) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x1000, 0x0, 0x1, 0x0, '\x00', 0x0, r3, 0x1, 0x1}, 0x50) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_DEFER_SETUP(r4, 0x112, 0x10, &(0x7f0000000040)=0xfffffffc, 0x4) 7.816269881s ago: executing program 7 (id=1659): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(&(0x7f0000000340), &(0x7f00000002c0)={'syz', 0x3}, 0x0, 0x0, 0xffffffffffffffff) keyctl$restrict_keyring(0xa, r3, &(0x7f0000000300)='asymmetric\x00', 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key$keyring(0x0, &(0x7f0000000240)={'syz', 0x1}, 0x0, 0x0, 0xfffffffffffffffe) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x6a, 0x4) bind$inet(r4, &(0x7f0000001c00)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x41, &(0x7f0000000040)=0x100, 0x5) connect$inet(r4, &(0x7f0000001bc0)={0x2, 0x4e23, @loopback}, 0x10) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000080)={0x0, 0x0}, 0x10) sendto(r4, &(0x7f0000000900)="50fbdf12a30d7a48b2c5c84948f3426077a9f0ca1475183db3ae52a6b2cdb77ef9af2a603a3e78e0355c09f3bdec242443011f0101251bcef800000000000000006dd50205000000a335445845ad1eaedbe2a4242113527efa170af26f1725", 0x5f, 0x4008044, 0x0, 0x0) sendto$inet(r4, &(0x7f00000002c0)="01a4acc7cf28ab9f6c7fc745c30bfc165466072a660bbf56352083db9d40454a67f8010000004bd29585885c89773ca3ba28a1e85ffe2a9220e0ecd440e345b745bf2146835ad015c801f95be5b890e44fb3dfbe8e88a1e5176e584c970207f23b0073ca5375abddf56331be396eaa2398ea66b93a74fd4147e826abed1b5d1de578682288c19ac23c1ccc1cdd936d2571c3510b0000000000000000000000000000000000f32bb3874c926a8944caa4677d2eae3bc831e748000000", 0xfffffffffffffe88, 0x0, 0x0, 0x0) 7.240656498s ago: executing program 6 (id=1660): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000010) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x110, &(0x7f0000000380)={0x0, 0x10, 0x0, 0x5, 0x80}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r3, 0x9, 0x0, 0x0) syz_io_uring_submit(r4, r5, 0x0) accept$netrom(0xffffffffffffffff, 0x0, 0x0) io_uring_enter(r3, 0x47f6, 0x0, 0x0, 0x0, 0x0) 6.043581313s ago: executing program 7 (id=1661): r0 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$btrfs_control(0xffffffffffffff9c, 0x0, 0xa8c1, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) sendto$inet(r4, &(0x7f00000013c0), 0x0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r5, 0x40946400, 0x0) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000007, 0x12, r5, 0xbc7ae000) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0x228, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x70, 0xd8, 0x0, {0xff0f000000000000}}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) 4.844800858s ago: executing program 6 (id=1662): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$full(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) write$cgroup_pid(r0, 0x0, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @broadcast}, 0x10, &(0x7f0000000380), 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0], 0x38}, 0x4000000) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x51) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r5, &(0x7f0000000180)=ANY=[@ANYBLOB='SYNTH \'Mic\' 00000000000000000000\nIGAIN \'Capture Volume\' 00000000000000000000\nVOLUME\nLINE\nMONITOR\nCD \'CD Capture'], 0x86) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card2/oss_mixer\x00', 0x0, 0x0) dup3(r6, r5, 0x0) 4.691242321s ago: executing program 1 (id=1663): syz_usb_connect(0x1, 0x2d, 0x0, 0x0) epoll_create1(0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) timer_create(0x3, 0x0, &(0x7f00000002c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$kcm(0x29, 0x5, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r3, 0x119, 0x1, 0xffffffffffffffff, 0xfffffffffffffe84) socket$nl_route(0x10, 0x3, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r4, 0xffffffffffffffff, 0x0) 4.028535262s ago: executing program 7 (id=1664): prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$bt_BT_VOICE(r0, 0x112, 0x13, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, 0x0, 0x845) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) socket$kcm(0xa, 0x2, 0x0) socket(0x2, 0x80805, 0x0) syz_open_dev$tty20(0xc, 0x4, 0x1) setsockopt$IP_VS_SO_SET_ADDDEST(0xffffffffffffffff, 0x0, 0x487, &(0x7f0000000000)={{0x84, @multicast1, 0x4e24, 0x3, 'lc\x00', 0x8, 0x323c, 0x55}, {@remote, 0x4e21, 0x10000, 0x0, 0x12d5c, 0x12d5c}}, 0x44) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e20, @remote}}, 0x80, 0x0, 0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r2, &(0x7f0000000140)={&(0x7f0000000440)=@rxrpc=@in4={0x21, 0xffff, 0x2, 0x10, {0x2, 0x4e21, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb718aef932f38"], 0x10b8}, 0x20000000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000019680)=""/102392, 0x18ff8) 1.290764651s ago: executing program 6 (id=1665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) add_key(&(0x7f0000000000)='rxrpc\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) inotify_init() pread64(0xffffffffffffffff, &(0x7f0000001480)=""/4080, 0xff0, 0x7) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x2, 0x0, 0x40000c1}, 0x1c810) 1.22989169s ago: executing program 1 (id=1666): socket(0x26, 0x800, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0xc}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000640000/0x2000)=nil, 0x2000, 0x0, 0xfffffffffffffffd, 0x20000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) io_setup(0x2, 0xffffffffffffffff) gettid() madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) syz_clone(0x21011, 0x0, 0x0, 0x0, 0x0, 0x0) lseek(0xffffffffffffffff, 0x2, 0x5) 1.224124429s ago: executing program 0 (id=1667): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) read$alg(0xffffffffffffffff, 0x0, 0x0) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000340)=0x6) r3 = socket$rds(0x15, 0x5, 0x0) bind$rds(r3, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f00000000c0)={&(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@mask_fadd={0x58, 0x118, 0x8, {{0x0, 0x3}, 0x0, 0x0, 0x8, 0x8}}], 0x58}, 0x0) r4 = openat$vicodec0(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$VIDIOC_G_OUTPUT(r4, 0x8004562e, &(0x7f0000000340)) pselect6(0x40, &(0x7f0000000200)={0x9, 0x93, 0x5, 0x0, 0x6200000000000000, 0x4, 0x8, 0x7fff}, 0x0, 0x0, 0x0, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r5, 0x0, 0x81, &(0x7f0000000200)={'nat\x00', 0x0, 0x0, 0x0, [0x3, 0x8, 0x9bc6, 0x8, 0x4, 0x7fffffff], 0x1, 0x0, 0x0, [{}]}, 0x88) getsockopt$IP_SET_OP_GET_FNAME(r1, 0x1, 0x53, &(0x7f0000000380)={0x8, 0x7, 0x0, 'syz0\x00'}, 0x0) 0s ago: executing program 0 (id=1668): r0 = creat(0x0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000700)=ANY=[@ANYBLOB="120110010a016f40392a8c3f249401020b01090212000100"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x1fffffd, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x7, 0xa}, {0x0, 0xf}}}, 0x24}}, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0xfe, 0x7fff0006}]}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x8, 0x2, 0xbfdffffc, 0x0, r0}, 0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, r5, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) ioctl$KVM_XEN_HVM_CONFIG(0xffffffffffffffff, 0x4038ae7a, &(0x7f0000000180)={0x1, 0xaa4, 0x0, &(0x7f0000000340)}) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x82042, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) close_range(r6, r6, 0x0) io_uring_register$IORING_REGISTER_NAPI(r4, 0x1b, 0x0, 0x1) socket$phonet_pipe(0x23, 0x5, 0x2) kernel console output (not intermixed with test programs): tadv: link becomes ready [ 85.993718][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.020898][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.059793][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.089840][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.117538][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.137679][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.157215][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.168047][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.178454][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.190395][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.200578][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.211458][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.230959][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.244061][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.448398][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.562000][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.597663][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.621960][ T4273] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.661444][ T4273] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.709195][ T4273] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.858473][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.867644][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.877018][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.887495][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.915036][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.948041][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.958014][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.975652][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.988939][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.021308][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.031329][ T4268] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.047634][ T4268] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.061074][ T4268] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.090949][ T4273] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.101722][ T4273] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.111096][ T4273] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.126136][ T4273] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.139392][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.161130][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.182357][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 87.191355][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 87.242893][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.254486][ T4268] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.276195][ T4268] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.294268][ T4268] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.310388][ T4268] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.531026][ T4297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.567998][ T4297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.826691][ T4374] loop3: detected capacity change from 0 to 32768 [ 88.893260][ T4374] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop3 scanned by syz.3.7 (4374) [ 88.999401][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 89.007946][ T4374] BTRFS info (device loop3): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 89.018778][ T4374] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 89.027658][ T4374] BTRFS info (device loop3): enabling disk space caching [ 89.034789][ T4374] BTRFS info (device loop3): force clearing of disk cache [ 89.042226][ T4374] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 89.051940][ T4374] BTRFS info (device loop3): use zstd compression, level 3 [ 89.059203][ T4374] BTRFS info (device loop3): disk space caching is enabled [ 89.947945][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.028565][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.893679][ T4374] BTRFS error (device loop3): open_ctree failed: -22 [ 91.938327][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.025573][ T952] cfg80211: failed to load regulatory.db [ 92.062509][ T4297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.070941][ T4297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.281125][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 92.294180][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.364070][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.930389][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.998052][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.453742][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.573506][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 93.951337][ T4420] loop4: detected capacity change from 0 to 512 [ 94.038514][ T4420] EXT4-fs (loop4): mounting ext3 file system using the ext4 subsystem [ 94.096672][ T4420] EXT4-fs (loop4): invalid journal inode [ 94.116372][ T4420] EXT4-fs (loop4): can't get journal size [ 94.147465][ T4424] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 94.203543][ T4420] EXT4-fs (loop4): 1 truncate cleaned up [ 94.377213][ T4420] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 95.294711][ T4440] overlayfs: overlapping lowerdir path [ 95.639639][ T4267] EXT4-fs (loop4): unmounting filesystem. [ 98.401527][ T4480] loop0: detected capacity change from 0 to 32768 [ 98.455781][ T4483] loop2: detected capacity change from 0 to 256 [ 98.588703][ T4480] XFS (loop0): Mounting V5 Filesystem [ 98.670647][ T4483] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3967cd3a, utbl_chksum : 0xe619d30d) [ 99.051398][ T4480] XFS (loop0): Ending clean mount [ 99.071563][ T4480] XFS (loop0): Quotacheck needed: Please wait. [ 99.765568][ T4480] XFS (loop0): Quotacheck: Done. [ 100.002018][ T4466] sctp: failed to load transform for md5: -2 [ 100.589595][ T4275] XFS (loop0): Unmounting Filesystem [ 110.385233][ T4588] loop3: detected capacity change from 0 to 4096 [ 110.490509][ T4599] ipt_REJECT: ECHOREPLY no longer supported. [ 113.649926][ T4612] netlink: 4 bytes leftover after parsing attributes in process `syz.3.44'. [ 115.263143][ T4335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 115.507501][ T4335] usb 1-1: config 0 has no interfaces? [ 115.541287][ T4335] usb 1-1: New USB device found, idVendor=0525, idProduct=a481, bcdDevice= 0.40 [ 115.629533][ T4335] usb 1-1: New USB device strings: Mfr=2, Product=0, SerialNumber=1 [ 115.709371][ T4335] usb 1-1: Manufacturer: syz [ 115.758532][ T4335] usb 1-1: SerialNumber: syz [ 116.023552][ T4335] usb 1-1: config 0 descriptor?? [ 117.372280][ T4314] usb 1-1: USB disconnect, device number 2 [ 121.663615][ T4669] loop3: detected capacity change from 0 to 512 [ 121.670788][ T4669] ======================================================= [ 121.670788][ T4669] WARNING: The mand mount option has been deprecated and [ 121.670788][ T4669] and is ignored by this kernel. Remove the mand [ 121.670788][ T4669] option from the mount to silence this warning. [ 121.670788][ T4669] ======================================================= [ 122.534471][ T4669] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 122.544489][ T4669] ext4 filesystem being mounted at /17/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 122.896276][ T4680] hugetlbfs: syz.0.59 (4680): Using mlock ulimits for SHM_HUGETLB is obsolete [ 126.617759][ T4698] process 'syz.2.63' launched './file1' with NULL argv: empty string added [ 129.400555][ T4710] random: crng reseeded on system resumption [ 131.473337][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 131.550021][ T4728] syz.0.71 sent an empty control message without MSG_MORE. [ 132.359109][ T4281] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 132.368263][ T4281] Bluetooth: hci1: Injecting HCI hardware error event [ 132.377158][ T4281] Bluetooth: hci1: hardware error 0x00 [ 133.125942][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.133397][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.532122][ T4281] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 134.973597][ T4746] device syzkaller0 entered promiscuous mode [ 135.077396][ T4747] 0: reclassify loop, rule prio 0, protocol 800 [ 135.639650][ T4758] virtio-fs: tag not found [ 136.632987][ T4764] netlink: 8 bytes leftover after parsing attributes in process `syz.2.83'. [ 138.961874][ C1] sched: RT throttling activated [ 143.885320][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 143.894963][ T48] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 143.903549][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 143.916430][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 143.924904][ T4282] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 143.934196][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 146.023176][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 147.903935][ T4828] netlink: 48 bytes leftover after parsing attributes in process `syz.3.99'. [ 148.152080][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 148.912011][ T4693] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 149.122066][ T4693] usb 1-1: Using ep0 maxpacket: 16 [ 149.132838][ T4693] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 149.182657][ T4693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 149.211971][ T4693] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 149.248790][ T4693] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 149.282978][ T4693] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 149.341054][ T4693] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 149.401828][ T4693] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 149.446311][ T4693] usb 1-1: Manufacturer: syz [ 149.463532][ T4693] usb 1-1: config 0 descriptor?? [ 150.203583][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 150.820635][ T4795] chnl_net:caif_netlink_parms(): no params data found [ 151.528810][ T4693] rc_core: IR keymap rc-hauppauge not found [ 151.536763][ T4693] Registered IR keymap rc-empty [ 151.542674][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.572157][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.632384][ T4693] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 151.659056][ T4693] input: Conexant Hybrid TV (cx231xx) MCE IR no TX (2040:b138) as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input5 [ 151.717274][ T75] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.777284][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.842176][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.872383][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 151.886592][ T75] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.905542][ T4859] netlink: 'syz.3.105': attribute type 1 has an invalid length. [ 153.113432][ T48] Bluetooth: hci0: command 0x0419 tx timeout [ 153.168607][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.372996][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.512464][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.583911][ T4859] device bond1 entered promiscuous mode [ 153.616465][ T4859] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.692146][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.800125][ T4870] bond1: (slave erspan1): making interface the new active one [ 153.808384][ T4870] device erspan1 entered promiscuous mode [ 153.819337][ T4870] bond1: (slave erspan1): Enslaving as an active interface with an up link [ 153.824420][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 153.836235][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 153.889969][ T4859] netlink: 4 bytes leftover after parsing attributes in process `syz.3.105'. [ 153.919672][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 154.023189][ T4693] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 154.062155][ T4693] mceusb 1-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 154.071509][ T4693] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 154.108627][ T4693] usb 1-1: USB disconnect, device number 3 [ 154.495230][ T4870] syz.3.105 (4870) used greatest stack depth: 20592 bytes left [ 155.052858][ T4889] loop1: detected capacity change from 0 to 128 [ 155.172190][ T4889] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 155.224385][ T4859] bond1 (unregistering): (slave erspan1): Releasing active interface [ 155.233166][ T4859] device erspan1 left promiscuous mode [ 155.256992][ T4859] bond1 (unregistering): Released all slaves [ 155.272252][ T4889] ext4 filesystem being mounted at /20/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 155.371365][ T75] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.637097][ T4795] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.140827][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 156.210776][ T4795] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.274967][ T4795] device bridge_slave_0 entered promiscuous mode [ 156.373168][ T75] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.397930][ T4795] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.940859][ T4795] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.124624][ T4795] device bridge_slave_1 entered promiscuous mode [ 161.788070][ T4795] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.819408][ T4929] capability: warning: `syz.2.121' uses deprecated v2 capabilities in a way that may be insecure [ 161.907321][ T4795] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.065992][ T4911] kvm [4910]: vcpu0, guest rIP: 0x18e Unhandled WRMSR(0x187) = 0xc100 [ 162.172624][ T4795] team0: Port device team_slave_0 added [ 162.242926][ T4795] team0: Port device team_slave_1 added [ 163.313253][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.328772][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.445273][ T4795] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.273131][ T4795] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.280163][ T4795] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.370061][ T4795] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.468948][ T4941] netlink: 8 bytes leftover after parsing attributes in process `syz.3.123'. [ 164.488356][ T4941] netlink: 4 bytes leftover after parsing attributes in process `syz.3.123'. [ 165.498183][ T4795] device hsr_slave_0 entered promiscuous mode [ 165.540732][ T4795] device hsr_slave_1 entered promiscuous mode [ 166.235780][ T4795] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 166.301215][ T4795] Cannot create hsr debugfs directory [ 167.646049][ T4968] IPv6: NLM_F_REPLACE set, but no existing node found! [ 171.633863][ T4986] sctp: failed to load transform for md5: -4 [ 171.682483][ T4992] sctp: failed to load transform for md5: -4 [ 171.689076][ T4990] sctp: failed to load transform for md5: -4 [ 171.722220][ T4988] sctp: failed to load transform for md5: -4 [ 171.782460][ T4984] sctp: failed to load transform for md5: -2 [ 172.844725][ T4795] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 172.925813][ T4795] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 173.195957][ T4795] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 173.272650][ T4795] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 173.426170][ T75] device hsr_slave_0 left promiscuous mode [ 173.446326][ T75] device hsr_slave_1 left promiscuous mode [ 173.461311][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.473080][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.482752][ T75] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.490262][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.498480][ T75] device bridge_slave_1 left promiscuous mode [ 173.506652][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.520651][ T75] device bridge_slave_0 left promiscuous mode [ 173.552141][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.307450][ T75] device veth1_macvtap left promiscuous mode [ 174.334823][ T75] device veth0_macvtap left promiscuous mode [ 174.367717][ T75] device veth1_vlan left promiscuous mode [ 174.382912][ T75] device veth0_vlan left promiscuous mode [ 179.960536][ T5076] ipt_ECN: cannot use operation on non-tcp rule [ 180.048664][ T75] team0 (unregistering): Port device team_slave_1 removed [ 181.514340][ T75] team0 (unregistering): Port device team_slave_0 removed [ 181.623114][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 181.742825][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.427782][ T5087] loop1: detected capacity change from 0 to 256 [ 183.472974][ T5087] exfat: Deprecated parameter 'namecase' [ 183.498498][ T5087] exfat: Deprecated parameter 'utf8' [ 183.553385][ T5087] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xbe675ead, utbl_chksum : 0xe619d30d) [ 183.654196][ T75] bond0 (unregistering): Released all slaves [ 184.221323][ T5014] netlink: 4 bytes leftover after parsing attributes in process `syz.3.132'. [ 185.542538][ T4795] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.154645][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 186.175468][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 186.235946][ T4795] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.329322][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 186.390017][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 186.449920][ T4472] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.457211][ T4472] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.542392][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 186.575388][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 186.725766][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 187.561006][ T4472] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.568355][ T4472] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.641693][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 187.670182][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 187.694987][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 187.727354][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 187.773035][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 187.833250][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 187.873181][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 188.059961][ T5142] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 188.126613][ T5142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.357549][ T5142] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 189.002048][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 189.042331][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.089576][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 189.125185][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 189.299313][ T4795] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 189.872378][ T5164] loop0: detected capacity change from 0 to 128 [ 190.581808][ T26] audit: type=1800 audit(1772681978.953:2): pid=5164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.162" name="file1" dev="loop0" ino=1048622 res=0 errno=0 [ 190.967969][ T4478] kworker/u4:14: attempt to access beyond end of device [ 190.967969][ T4478] loop0: rw=1, sector=145, nr_sectors = 896 limit=128 [ 192.096464][ T5176] netlink: 277 bytes leftover after parsing attributes in process `syz.0.163'. [ 194.631782][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.638350][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.391995][ T4411] usb 4-1: new full-speed USB device number 2 using dummy_hcd [ 197.583815][ T4411] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 197.620732][ T4411] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 197.671593][ T4411] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 197.706631][ T4411] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 198.616522][ T4411] usb 4-1: usb_control_msg returned -32 [ 198.622726][ T4411] usbtmc 4-1:16.0: can't read capabilities [ 198.747135][ T4281] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 198.758852][ T4281] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 198.768311][ T4281] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 198.777332][ T4281] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 198.786366][ T4281] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 198.793804][ T4281] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 199.046875][ T5223] netlink: 'syz.3.170': attribute type 10 has an invalid length. [ 199.219908][ T5223] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 199.821154][ T4693] usb 4-1: USB disconnect, device number 2 [ 200.347048][ T26] audit: type=1326 audit(1772681988.743:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5234 comm="syz.1.174" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f536b19c799 code=0x0 [ 200.831932][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 201.622031][ T4281] Bluetooth: hci2: command 0x0406 tx timeout [ 201.628166][ T4281] Bluetooth: hci4: command 0x0406 tx timeout [ 201.896386][ T5214] chnl_net:caif_netlink_parms(): no params data found [ 201.903763][ T48] Bluetooth: hci3: command 0x0406 tx timeout [ 202.910855][ T4281] Bluetooth: hci0: command 0x041b tx timeout [ 204.388613][ T5214] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.397706][ T5214] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.443262][ T5214] device bridge_slave_0 entered promiscuous mode [ 204.982885][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 205.382473][ T5214] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.390355][ T5214] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.419454][ T5214] device bridge_slave_1 entered promiscuous mode [ 205.579417][ T5214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.641686][ T5214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.063245][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 207.227844][ T5214] team0: Port device team_slave_0 added [ 208.864205][ T5214] team0: Port device team_slave_1 added [ 208.962295][ T5313] vcan0: tx drop: invalid da for name 0x000000000000000c [ 210.383878][ T4416] device hsr_slave_0 left promiscuous mode [ 211.602989][ T4416] device hsr_slave_1 left promiscuous mode [ 211.619214][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.627513][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.638548][ T4416] device bridge_slave_1 left promiscuous mode [ 211.652042][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.671047][ T4416] device bridge_slave_0 left promiscuous mode [ 211.692025][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.001944][ T27] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 212.392240][ T27] usb 1-1: Using ep0 maxpacket: 16 [ 212.408093][ T27] usb 1-1: unable to get BOS descriptor or descriptor too short [ 212.563120][ T27] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 212.921679][ T27] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 212.932267][ T27] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 212.941259][ T27] usb 1-1: config 1 interface 0 has no altsetting 0 [ 212.957134][ T27] usb 1-1: string descriptor 0 read error: -71 [ 212.963563][ T27] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 213.011238][ T27] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=15 [ 213.072690][ T27] usb 1-1: can't set config #1, error -71 [ 213.115408][ T27] usb 1-1: USB disconnect, device number 4 [ 213.955917][ T5344] loop0: detected capacity change from 0 to 4096 [ 213.982429][ T5344] ntfs3: loop0: Different NTFS' sector size (1024) and media sector size (512) [ 213.997904][ T5344] ntfs3: loop0: mft corrupted [ 214.002840][ T5344] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 214.014180][ T5344] ntfs3: loop0: Failed to load $AttrDef -> 0 [ 214.174939][ T5346] Zero length message leads to an empty skb [ 217.972158][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 218.628073][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 219.291570][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.369677][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 221.244999][ T5382] loop3: detected capacity change from 0 to 256 [ 221.274248][ T5382] UDF-fs: bad mount option "d ÐFÿÝUf" or missing value [ 221.515161][ T4416] bond0 (unregistering): Released all slaves [ 222.131357][ T5387] sctp: failed to load transform for md5: -2 [ 222.429769][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.436860][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.532836][ T5214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.569167][ T5214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.576397][ T5214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.639151][ T5214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.970230][ T5404] netlink: 8 bytes leftover after parsing attributes in process `syz.1.207'. [ 223.825921][ T5404] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.834619][ T5404] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.963907][ T5420] loop3: detected capacity change from 0 to 128 [ 224.876171][ T5420] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 224.914069][ T5420] ext4 filesystem being mounted at /51/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 226.061554][ T5214] device hsr_slave_0 entered promiscuous mode [ 226.218486][ T5436] "syz.3.209" (5436) uses obsolete ecb(arc4) skcipher [ 226.795477][ T5214] device hsr_slave_1 entered promiscuous mode [ 226.836887][ T5439] netlink: 48 bytes leftover after parsing attributes in process `syz.2.213'. [ 226.885782][ T5214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 226.927980][ T5214] Cannot create hsr debugfs directory [ 227.412845][ T5452] loop1: detected capacity change from 0 to 128 [ 227.420267][ T5452] FAT-fs (loop1): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 227.561193][ T5452] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.404456][ T4496] FAT-fs (loop1): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 229.515059][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 229.895135][ T5459] loop0: detected capacity change from 0 to 32768 [ 229.970193][ T5459] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by syz.0.218 (5459) [ 230.349317][ T5459] BTRFS info (device loop0): first mount of filesystem ed167579-eb65-4e76-9a50-61ac97e9b59d [ 230.362110][ T5459] BTRFS info (device loop0): using sha256 (sha256-avx2) checksum algorithm [ 230.370836][ T5459] BTRFS info (device loop0): using free space tree [ 230.761513][ T5487] loop3: detected capacity change from 0 to 256 [ 231.775471][ T5487] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 231.775717][ T5487] FAT-fs (loop3): Filesystem has been set read-only [ 231.776590][ T5487] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 231.777071][ T5487] FAT-fs (loop3): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 231.787715][ T5487] FAT-fs (loop3): error, invalid access to FAT (entry 0x00000001) [ 232.013263][ T26] audit: type=1800 audit(1772682020.173:4): pid=5487 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.220" name="file1" dev="loop3" ino=1048625 res=0 errno=0 [ 232.344688][ T5487] syz.3.220 (5487) used greatest stack depth: 20496 bytes left [ 234.086726][ T5459] BTRFS error (device loop0): open_ctree failed: -12 [ 237.975293][ T5098] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop0 scanned by udevd (5098) [ 238.576454][ T5214] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 238.815773][ T5537] loop3: detected capacity change from 0 to 128 [ 238.940854][ T5214] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 239.059092][ T5214] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 239.955898][ T5214] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 240.378080][ T4323] kworker/u4:6: attempt to access beyond end of device [ 240.378080][ T4323] loop3: rw=1, sector=145, nr_sectors = 896 limit=128 [ 240.451723][ T5553] pci 0000:00:05.0: vgaarb: changed VGA decodes: olddecodes=io+mem,decodes=none:owns=io+mem [ 241.090556][ T5553] loop1: detected capacity change from 0 to 4096 [ 242.300243][ T5553] ntfs: (device loop1): check_mft_mirror(): $MFT and $MFTMirr (record 1) do not match. Run ntfsfix or chkdsk. [ 242.312287][ T5553] ntfs: (device loop1): load_system_files(): $MFTMirr does not match $MFT. Mounting read-only. Run ntfsfix and/or chkdsk. [ 242.326840][ T5553] ntfs: (device loop1): ntfs_read_locked_inode(): First extent of $DATA attribute has non zero lowest_vcn. [ 242.338382][ T5553] ntfs: (device loop1): ntfs_read_locked_inode(): Failed with error code -5. Marking corrupt inode 0xa as bad. Run chkdsk. [ 242.351656][ T5553] ntfs: (device loop1): load_and_init_upcase(): Failed to load $UpCase from the volume. Using default. [ 242.364984][ T5553] ntfs: volume version 3.1. [ 242.371686][ T5553] ntfs: (device loop1): ntfs_check_logfile(): Did not find any restart pages in $LogFile and it was not empty. [ 242.384085][ T5553] ntfs: (device loop1): load_system_files(): Failed to load $LogFile. Will not be able to remount read-write. Mount in Windows. [ 242.403795][ T5553] ntfs: (device loop1): ntfs_lookup_inode_by_name(): Index entry out of bounds in directory inode 0x5. [ 242.415020][ T5553] ntfs: (device loop1): check_windows_hibernation_status(): Failed to find inode number for hiberfil.sys. [ 242.426590][ T5553] ntfs: (device loop1): load_system_files(): Failed to determine if Windows is hibernated. Will not be able to remount read-write. Run chkdsk. [ 242.934071][ T5214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 243.045902][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 243.301098][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 244.453604][ T5214] 8021q: adding VLAN 0 to HW filter on device team0 [ 244.474454][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 244.490440][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 244.520277][ T4477] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.527596][ T4477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 244.573594][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 244.602634][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 244.630214][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 244.678686][ T4477] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.685990][ T4477] bridge0: port 2(bridge_slave_1) entered forwarding state [ 245.278207][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 245.331130][ T5569] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 245.428817][ T5567] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.485347][ T5567] bond0: (slave rose0): Enslaving as an active interface with an up link [ 245.524636][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 245.547815][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 248.409597][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 248.430731][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 248.490455][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 248.683354][ T5214] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 248.700240][ T5214] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 248.715325][ T5589] netlink: 4 bytes leftover after parsing attributes in process `syz.0.242'. [ 248.732385][ T5589] device bridge_slave_1 left promiscuous mode [ 248.741338][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.755065][ T5589] device bridge_slave_0 left promiscuous mode [ 248.761479][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.687640][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 250.713011][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 250.763030][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 250.912772][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 250.961465][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 250.982544][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 250.991460][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 251.046781][ T5615] loop0: detected capacity change from 0 to 256 [ 251.285391][ T5615] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 255.866125][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.872631][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.896901][ T4281] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 260.145641][ T4281] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 260.155043][ T4281] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 260.223822][ T4281] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 260.231702][ T4281] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 260.239514][ T4281] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 260.251722][ T5680] lo speed is unknown, defaulting to 1000 [ 260.258133][ T5680] lo speed is unknown, defaulting to 1000 [ 260.267324][ T5680] lo speed is unknown, defaulting to 1000 [ 260.279226][ T5680] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 260.295731][ T5680] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 260.634741][ T5680] lo speed is unknown, defaulting to 1000 [ 260.642230][ T5680] lo speed is unknown, defaulting to 1000 [ 260.649282][ T5680] lo speed is unknown, defaulting to 1000 [ 260.656263][ T5680] lo speed is unknown, defaulting to 1000 [ 260.664713][ T5680] lo speed is unknown, defaulting to 1000 [ 260.677848][ T5689] netlink: 104 bytes leftover after parsing attributes in process `syz.1.261'. [ 260.918338][ T5687] loop3: detected capacity change from 0 to 40427 [ 260.929833][ T5689] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 260.968475][ T5687] F2FS-fs (loop3): invalid crc value [ 260.994893][ T5687] F2FS-fs (loop3): Found nat_bits in checkpoint [ 261.040480][ T5687] F2FS-fs (loop3): Start checkpoint disabled! [ 261.186579][ T5687] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e6 [ 261.603277][ T5674] lo speed is unknown, defaulting to 1000 [ 261.880671][ T5695] netlink: 'syz.1.261': attribute type 4 has an invalid length. [ 262.466180][ T5702] capability: warning: `syz.0.263' uses 32-bit capabilities (legacy support in use) [ 262.791740][ T48] Bluetooth: hci5: command 0x0409 tx timeout [ 263.380257][ T4412] kworker/u4:10: attempt to access beyond end of device [ 263.380257][ T4412] loop3: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 264.965621][ T5717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 264.973868][ T5717] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 265.013442][ T4281] Bluetooth: hci5: command 0x041b tx timeout [ 265.130416][ T5722] loop3: detected capacity change from 0 to 512 [ 265.224147][ T5727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.268'. [ 265.844484][ T5727] bridge1: port 1(vlan2) entered blocking state [ 265.878008][ T5727] bridge1: port 1(vlan2) entered disabled state [ 266.266513][ T5727] device vlan2 entered promiscuous mode [ 266.333389][ T5727] device vlan0 entered promiscuous mode [ 266.341371][ T5722] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 267.310300][ T5674] chnl_net:caif_netlink_parms(): no params data found [ 267.365124][ T4472] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x61000000 (sector = 1) [ 267.382383][ T4281] Bluetooth: hci5: command 0x040f tx timeout [ 270.493221][ T4281] Bluetooth: hci5: command 0x0419 tx timeout [ 270.800908][ T5674] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.842276][ T5674] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.871068][ T5674] device bridge_slave_0 entered promiscuous mode [ 272.603262][ T5674] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.610441][ T5674] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.673198][ T5674] device bridge_slave_1 entered promiscuous mode [ 272.706060][ T5674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 272.719128][ T5674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 272.829715][ T5766] skbuff: bad partial csum: csum=65506/2 headroom=144 headlen=65526 [ 273.772044][ T5674] team0: Port device team_slave_0 added [ 275.503987][ T5674] team0: Port device team_slave_1 added [ 275.793324][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.800467][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.982979][ T5674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.273037][ T5674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.280067][ T5674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.389556][ T5674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 279.456005][ T5674] device hsr_slave_0 entered promiscuous mode [ 279.552473][ T5674] device hsr_slave_1 entered promiscuous mode [ 279.567300][ T5674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 279.592326][ T5674] Cannot create hsr debugfs directory [ 283.146300][ T5834] loop0: detected capacity change from 0 to 32768 [ 283.248253][ T5834] XFS (loop0): Mounting V5 Filesystem [ 283.280253][ T5834] XFS (loop0): Ending clean mount [ 283.295076][ T5834] XFS (loop0): Quotacheck needed: Please wait. [ 283.357329][ T5834] XFS (loop0): Quotacheck: Done. [ 284.346550][ T4275] XFS (loop0): Unmounting Filesystem [ 284.478791][ T4478] device hsr_slave_0 left promiscuous mode [ 284.522710][ T4478] device hsr_slave_1 left promiscuous mode [ 284.532796][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.582797][ T4478] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.613726][ T4478] device bridge_slave_1 left promiscuous mode [ 284.620142][ T4478] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.243418][ T4478] device bridge_slave_0 left promiscuous mode [ 285.588827][ T4478] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.611073][ T5857] loop1: detected capacity change from 0 to 4096 [ 291.027736][ T4478] team0 (unregistering): Port device team_slave_1 removed [ 291.911520][ T5915] loop3: detected capacity change from 0 to 32768 [ 292.149659][ T4478] team0 (unregistering): Port device team_slave_0 removed [ 292.226083][ T4478] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 292.285198][ T4478] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 292.412077][ T5915] XFS (loop3): Mounting V5 Filesystem [ 293.038837][ T5915] XFS (loop3): Ending clean mount [ 293.047693][ T5915] XFS (loop3): Quotacheck needed: Please wait. [ 293.226162][ T5915] XFS (loop3): Quotacheck: Done. [ 295.181005][ T4279] XFS (loop3): Unmounting Filesystem [ 295.447588][ T5952] loop6: detected capacity change from 0 to 7 [ 295.472209][ T5758] Dev loop6: unable to read RDB block 7 [ 295.503417][ T5758] loop6: unable to read partition table [ 295.578880][ T5758] loop6: partition table beyond EOD, truncated [ 297.198197][ T5952] Dev loop6: unable to read RDB block 7 [ 297.204269][ T5952] loop6: unable to read partition table [ 297.211057][ T5952] loop6: partition table beyond EOD, truncated [ 297.217482][ T5952] loop_reread_partitions: partition scan of loop6 (úùƒå¡™‰ü¾SêjÌ–ã¢P=ý?ã}X‹ºÐ œëÜ%õ«`ÉæÖ€ù…ˆŠ5) failed (rc=-5) [ 298.560545][ T5959] loop3: detected capacity change from 0 to 128 [ 298.597957][ T5959] EXT4-fs warning (device loop3): ext4_init_metadata_csum:4556: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 298.639905][ T5959] EXT4-fs (loop3): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 298.656665][ T5935] udevd[5935]: incorrect jbd checksum on /dev/loop3 [ 298.692546][ T4478] bond0 (unregistering): Released all slaves [ 298.963012][ T5935] udevd[5935]: incorrect jbd checksum on /dev/loop3 [ 301.804100][ T5986] loop1: detected capacity change from 0 to 32768 [ 301.816985][ T5985] loop0: detected capacity change from 0 to 256 [ 302.476023][ T5986] XFS (loop1): Mounting V5 Filesystem [ 302.573195][ T5986] XFS (loop1): Ending clean mount [ 302.581114][ T5986] XFS (loop1): Quotacheck needed: Please wait. [ 302.688118][ T5986] XFS (loop1): Quotacheck: Done. [ 303.568403][ T6008] hub 8-0:1.0: USB hub found [ 303.582673][ T6008] hub 8-0:1.0: 1 port detected [ 303.697800][ T4268] XFS (loop1): Unmounting Filesystem [ 310.367359][ T5674] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 310.433474][ T5674] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 310.694250][ T6050] loop3: detected capacity change from 0 to 32768 [ 310.724690][ T5674] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 312.041466][ T26] kauditd_printk_skb: 4 callbacks suppressed [ 312.041483][ T26] audit: type=1800 audit(1772682100.433:5): pid=6059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.334" name="file1" dev="loop3" ino=4 res=0 errno=0 [ 312.293086][ T5674] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 315.905633][ T5674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.964404][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 315.998366][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 316.031187][ T5674] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.064411][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 316.087132][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 316.119946][ T4416] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.127215][ T4416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.498072][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 316.764191][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 317.075090][ T4416] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 317.115418][ T4416] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.122754][ T4416] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.838360][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.844892][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.254057][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 319.285853][ T4412] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 319.372130][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 319.408826][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 319.461705][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 321.065557][ T48] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 321.075628][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 321.085178][ T48] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 321.094031][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 321.103442][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 321.110828][ T48] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 322.189388][ T6111] lo speed is unknown, defaulting to 1000 [ 323.453999][ T4282] Bluetooth: hci0: command 0x0409 tx timeout [ 326.696350][ T4282] Bluetooth: hci0: command 0x041b tx timeout [ 328.782128][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 330.202136][ T6111] chnl_net:caif_netlink_parms(): no params data found [ 331.124135][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 332.407835][ T6219] loop3: detected capacity change from 0 to 128 [ 332.653199][ T6219] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 332.975107][ T6219] ext4 filesystem being mounted at /88/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 334.159042][ T6111] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.402006][ T6111] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.479401][ T6111] device bridge_slave_0 entered promiscuous mode [ 335.213614][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 335.220617][ T6111] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.241935][ T6111] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.291863][ T6111] device bridge_slave_1 entered promiscuous mode [ 335.654079][ T6111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.900400][ T6246] loop3: detected capacity change from 0 to 1764 [ 336.438070][ T6111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 340.031606][ T6111] team0: Port device team_slave_0 added [ 340.095234][ T6111] team0: Port device team_slave_1 added [ 343.228095][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.240729][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.273905][ T6111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.366786][ T6111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.404825][ T6111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.501331][ T6111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 344.585534][ T4416] device hsr_slave_0 left promiscuous mode [ 344.836367][ T4416] device hsr_slave_1 left promiscuous mode [ 344.843317][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.341656][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.391392][ T4416] device bridge_slave_1 left promiscuous mode [ 345.400289][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.684391][ T4416] device bridge_slave_0 left promiscuous mode [ 345.692922][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.489330][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 347.946633][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 348.033450][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 348.140496][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 348.434433][ T4416] bond0 (unregistering): Released all slaves [ 348.800136][ T6111] device hsr_slave_0 entered promiscuous mode [ 348.905796][ T6111] device hsr_slave_1 entered promiscuous mode [ 348.913196][ T6111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 348.920823][ T6111] Cannot create hsr debugfs directory [ 352.315102][ T6399] loop0: detected capacity change from 0 to 128 [ 352.891944][ T6399] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 352.901190][ T6399] ext4 filesystem being mounted at /105/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 353.827304][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 353.893210][ T6412] loop3: detected capacity change from 0 to 1024 [ 353.987181][ T6412] EXT4-fs: Ignoring removed nobh option [ 354.408730][ T6412] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 355.770609][ T4279] EXT4-fs (loop3): unmounting filesystem. [ 356.032756][ T6434] netlink: 'syz.0.414': attribute type 1 has an invalid length. [ 359.867034][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 359.905311][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 360.158172][ T6450] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.174472][ T6450] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.190734][ T6450] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.202457][ T6450] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.317996][ T6434] bond1: (slave gretap1): making interface the new active one [ 360.344445][ T6434] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 360.362620][ T6434] syz.0.414 (6434) used greatest stack depth: 19920 bytes left [ 360.382146][ T6441] device macvlan2 entered promiscuous mode [ 360.389256][ T6441] device bond1 entered promiscuous mode [ 360.403705][ T6441] device gretap1 entered promiscuous mode [ 360.442284][ T6441] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 360.462909][ T6441] bond1: (slave macvlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 360.532966][ T6493] loop1: detected capacity change from 0 to 128 [ 360.552939][ T6441] device bond1 left promiscuous mode [ 360.558363][ T6441] device gretap1 left promiscuous mode [ 360.722918][ T6493] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 361.004858][ T6493] ext4 filesystem being mounted at /86/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 361.649722][ T6111] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 362.340516][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 362.396002][ T6111] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 363.058093][ T6111] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 363.293551][ T6111] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 364.899200][ T6111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.015033][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 365.052841][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 365.095581][ T6111] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.124318][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 365.141541][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 365.150624][ T41] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.157942][ T41] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.179260][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 365.200194][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 365.210981][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 365.221476][ T4336] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.228713][ T4336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 365.248647][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 365.260948][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 365.311945][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 365.339788][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 365.365176][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 365.399008][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 365.509457][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 365.536470][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 365.565242][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 365.745428][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 366.281580][ T4336] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 369.620522][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 369.758462][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 370.152747][ T6111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.796681][ T6659] ALSA: mixer_oss: invalid OSS volume '' [ 378.264406][ T6673] ptrace attach of "./syz-executor exec"[4275] was attempted by "./syz-executor exec"[6673] [ 379.454067][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.460516][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.212829][ T6695] loop0: detected capacity change from 0 to 1024 [ 380.233143][ T6695] EXT4-fs: Ignoring removed nobh option [ 380.267251][ T6698] device syzkaller0 entered promiscuous mode [ 380.499049][ T6695] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 381.396903][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 381.467338][ T6711] loop1: detected capacity change from 0 to 4096 [ 382.763316][ T4282] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 382.822853][ T4282] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 382.841971][ T4282] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 382.851269][ T4282] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 382.859447][ T48] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 382.867007][ T4282] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 383.384822][ T6736] loop3: detected capacity change from 0 to 64 [ 384.602992][ T6738] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 384.912078][ T4281] Bluetooth: hci0: command 0x0409 tx timeout [ 385.188549][ T6732] lo speed is unknown, defaulting to 1000 [ 385.526639][ T6755] device syzkaller0 entered promiscuous mode [ 386.989539][ T48] Bluetooth: hci0: command 0x041b tx timeout [ 387.250260][ T6732] chnl_net:caif_netlink_parms(): no params data found [ 389.062142][ T4281] Bluetooth: hci0: command 0x040f tx timeout [ 389.735769][ T6732] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.230671][ T6732] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.285986][ T6732] device bridge_slave_0 entered promiscuous mode [ 391.212243][ T4281] Bluetooth: hci0: command 0x0419 tx timeout [ 391.506432][ T6732] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.532259][ T6732] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.562030][ T6732] device bridge_slave_1 entered promiscuous mode [ 393.553562][ T6816] device syzkaller0 entered promiscuous mode [ 397.444803][ T6732] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.457526][ T6732] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.886339][ T6732] team0: Port device team_slave_0 added [ 398.359046][ T4416] device hsr_slave_0 left promiscuous mode [ 398.483548][ T4416] device hsr_slave_1 left promiscuous mode [ 398.667077][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.806212][ T4416] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.839688][ T4416] device bridge_slave_1 left promiscuous mode [ 398.889047][ T4416] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.911903][ T4416] device bridge_slave_0 left promiscuous mode [ 398.918328][ T4416] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.592202][ T4416] team0 (unregistering): Port device team_slave_1 removed [ 402.672045][ T4416] team0 (unregistering): Port device team_slave_0 removed [ 402.723672][ T4416] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.774921][ T4416] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.120562][ T4416] bond0 (unregistering): Released all slaves [ 403.249799][ T6732] team0: Port device team_slave_1 added [ 403.383387][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 403.395481][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.446916][ T6732] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 403.470610][ T6732] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 403.481908][ T6732] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 403.508323][ T6732] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 403.719289][ T6732] device hsr_slave_0 entered promiscuous mode [ 403.742809][ T6732] device hsr_slave_1 entered promiscuous mode [ 403.769025][ T6732] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 403.792280][ T6732] Cannot create hsr debugfs directory [ 404.367579][ T6970] loop1: detected capacity change from 0 to 4096 [ 404.470043][ T6970] ntfs3: loop1: ino=3, Correct links count -> 2. [ 410.901982][ T6732] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 411.003601][ T6732] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 411.039012][ T6732] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 411.086033][ T6732] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 412.719193][ T6732] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.683987][ T6732] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.829256][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 414.841523][ T4472] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 414.908435][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 414.948168][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 414.971101][ T4541] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.978351][ T4541] bridge0: port 1(bridge_slave_0) entered forwarding state [ 415.036717][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 415.074792][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 415.109483][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 415.163140][ T4541] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.170489][ T4541] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.178685][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 415.200321][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 415.291070][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 415.313971][ T7079] afs: Unknown parameter 'dy' [ 415.415150][ T7080] 9pnet_virtio: no channels available for device 127.0.0.1 [ 415.544077][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 416.123496][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 416.208294][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 416.327057][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 416.357673][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 416.421571][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.477520][ T6732] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.699440][ T6732] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.763179][ T4400] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 417.027955][ T4400] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 417.098354][ T4400] usb 4-1: New USB device found, idVendor=28de, idProduct=1142, bcdDevice= 0.00 [ 417.130007][ T4400] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 417.223551][ T4400] usb 4-1: config 0 descriptor?? [ 417.243605][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 417.291702][ T4400] usbhid 4-1:0.0: couldn't find an input interrupt endpoint [ 417.311225][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.410836][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 418.531045][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 418.846392][ T6732] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 419.178542][ T7125] netlink: 'syz.0.549': attribute type 1 has an invalid length. [ 419.337718][ T7125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 419.436196][ T7128] bond2: (slave veth3): Enslaving as an active interface with a down link [ 420.319278][ T7125] device veth0_to_bond entered promiscuous mode [ 420.662237][ T7125] device veth0_to_bond left promiscuous mode [ 420.716801][ T7125] bond2: (slave vlan2): making interface the new active one [ 420.734243][ T27] usb 4-1: USB disconnect, device number 3 [ 420.802894][ T7125] device veth0_to_bond entered promiscuous mode [ 420.863274][ T7125] device vlan2 entered promiscuous mode [ 420.909927][ T7125] bond2: (slave vlan2): Enslaving as an active interface with an up link [ 420.990042][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 421.910499][ T7168] loop1: detected capacity change from 0 to 128 [ 429.267419][ T7211] sctp: failed to load transform for md5: -4 [ 429.312546][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 430.119237][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 430.288785][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 430.347189][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 430.373925][ T7225] device syzkaller0 entered promiscuous mode [ 430.385158][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 430.419464][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 431.419335][ T6732] device veth0_vlan entered promiscuous mode [ 431.446063][ T6732] device veth1_vlan entered promiscuous mode [ 431.584630][ T6732] device veth0_macvtap entered promiscuous mode [ 431.645611][ T6732] device veth1_macvtap entered promiscuous mode [ 431.663455][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 431.673169][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 431.733307][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 431.750884][ T14] libceph: connect (1)[c::]:6789 error -101 [ 431.772634][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 431.782656][ T14] libceph: mon0 (1)[c::]:6789 connect error [ 431.826131][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.837605][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.847739][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.858718][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.871456][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.890167][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.897638][ T7246] ceph: No mds server is up or the cluster is laggy [ 431.910353][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.928146][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 431.958384][ T4478] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 431.991213][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.012344][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.024901][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.038185][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.046260][ T4417] libceph: connect (1)[c::]:6789 error -101 [ 432.050255][ T6732] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 432.079691][ T4417] libceph: mon0 (1)[c::]:6789 connect error [ 432.086865][ T6732] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.143175][ T6732] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 432.186529][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 432.214778][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 432.237951][ T6732] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.278145][ T6732] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.471668][ T6732] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.486894][ T6732] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.758928][ T4478] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.787076][ T4478] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.828002][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 433.908954][ T4478] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.958511][ T4478] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.967544][ T4496] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 439.430667][ T7369] 9pnet_virtio: no channels available for device 127.0.0.1 [ 439.591565][ C1] hrtimer: interrupt took 54315 ns [ 440.186359][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.192877][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.233889][ T4336] device vlan2 left promiscuous mode [ 442.987960][ T7414] device syzkaller0 entered promiscuous mode [ 444.190693][ T7438] 9pnet_virtio: no channels available for device 127.0.0.1 [ 446.154541][ T7446] tipc: Enabling of bearer rejected, failed to enable media [ 447.281128][ T7447] loop5: detected capacity change from 0 to 128 [ 447.675827][ T7447] syz.5.619: attempt to access beyond end of device [ 447.675827][ T7447] loop5: rw=2049, sector=345, nr_sectors = 56 limit=128 [ 447.789890][ T7447] syz.5.619: attempt to access beyond end of device [ 447.789890][ T7447] loop5: rw=2049, sector=409, nr_sectors = 32 limit=128 [ 447.876679][ T7447] syz.5.619: attempt to access beyond end of device [ 447.876679][ T7447] loop5: rw=2049, sector=449, nr_sectors = 8 limit=128 [ 447.955061][ T7447] syz.5.619: attempt to access beyond end of device [ 447.955061][ T7447] loop5: rw=2049, sector=465, nr_sectors = 32 limit=128 [ 448.409119][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.409119][ T4336] loop5: rw=1, sector=145, nr_sectors = 200 limit=128 [ 448.463410][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.463410][ T4336] loop5: rw=1, sector=401, nr_sectors = 8 limit=128 [ 448.508218][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.508218][ T4336] loop5: rw=1, sector=441, nr_sectors = 8 limit=128 [ 448.583590][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.583590][ T4336] loop5: rw=1, sector=457, nr_sectors = 8 limit=128 [ 448.597828][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.597828][ T4336] loop5: rw=1, sector=569, nr_sectors = 8 limit=128 [ 448.611591][ T4336] kworker/u4:7: attempt to access beyond end of device [ 448.611591][ T4336] loop5: rw=1, sector=585, nr_sectors = 8 limit=128 [ 449.464859][ T4693] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 449.527776][ T7521] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 449.674220][ T4693] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.685766][ T4693] usb 2-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 449.695237][ T4693] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 449.788070][ T4693] usb 2-1: config 0 descriptor?? [ 449.860994][ T4693] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 449.974905][ T7528] device syzkaller0 entered promiscuous mode [ 450.200697][ T7518] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 450.815768][ T7518] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 451.505471][ T7518] netlink: 4 bytes leftover after parsing attributes in process `syz.1.632'. [ 451.585277][ T7518] device macvtap1 entered promiscuous mode [ 451.605952][ T7518] device dummy0 entered promiscuous mode [ 451.703484][ T7536] device dummy0 left promiscuous mode [ 451.801124][ T14] usb 2-1: USB disconnect, device number 2 [ 452.094418][ T7558] loop5: detected capacity change from 0 to 256 [ 453.448265][ T7557] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 453.458908][ T7557] FAT-fs (loop5): Filesystem has been set read-only [ 453.466198][ T7557] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 453.476749][ T7557] FAT-fs (loop5): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 453.491335][ T7557] FAT-fs (loop5): error, invalid access to FAT (entry 0x00000001) [ 453.504523][ T26] audit: type=1800 audit(1772682241.883:6): pid=7557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.641" name="file1" dev="loop5" ino=1048636 res=0 errno=0 [ 455.583208][ T7575] netlink: 68 bytes leftover after parsing attributes in process `syz.0.646'. [ 455.962818][ T7589] mmap: syz.1.644 (7589) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 457.161569][ T7612] loop1: detected capacity change from 0 to 2048 [ 457.778227][ T7612] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 460.693126][ T7629] device syzkaller0 entered promiscuous mode [ 463.723975][ T7666] overlayfs: failed to resolve './bus': -2 [ 463.790877][ T7667] loop0: detected capacity change from 0 to 512 [ 463.836185][ T7667] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 463.849583][ T7667] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 464.783043][ T7667] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.658: invalid indirect mapped block 83886080 (level 1) [ 464.803960][ T7667] EXT4-fs (loop0): Remounting filesystem read-only [ 464.812155][ T7667] EXT4-fs (loop0): 1 orphan inode deleted [ 464.818035][ T7667] EXT4-fs (loop0): 1 truncate cleaned up [ 464.823846][ T7667] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 465.141588][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 467.512142][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 467.580656][ T7701] tipc: Started in network mode [ 467.723540][ T7701] tipc: Node identity f6ce51178052, cluster identity 4711 [ 467.766148][ T7701] tipc: Enabled bearer , priority 0 [ 468.450482][ T7708] device syzkaller0 entered promiscuous mode [ 468.766659][ T7708] tipc: Resetting bearer [ 468.853108][ T7700] tipc: Resetting bearer [ 468.974007][ T7700] tipc: Disabling bearer [ 469.059721][ T7729] device syzkaller0 entered promiscuous mode [ 470.189657][ T7737] loop0: detected capacity change from 0 to 2048 [ 470.298988][ T7737] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.003472][ T7753] netlink: 'syz.3.681': attribute type 3 has an invalid length. [ 471.011248][ T7753] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 472.758953][ T7776] netlink: 16 bytes leftover after parsing attributes in process `syz.3.684'. [ 473.126924][ T7779] loop5: detected capacity change from 0 to 8 [ 473.142086][ T7776] netlink: 30 bytes leftover after parsing attributes in process `syz.3.684'. [ 473.151352][ T7776] tipc: Invalid UDP bearer configuration [ 473.152457][ T7776] tipc: Enabling of bearer rejected, failed to enable media [ 473.191954][ T7779] SQUASHFS error: lzo decompression failed, data probably corrupt [ 473.201357][ T7779] SQUASHFS error: Failed to read block 0x28d: -5 [ 473.207897][ T7779] SQUASHFS error: Unable to read metadata cache entry [28b] [ 473.215364][ T7779] SQUASHFS error: Unable to read inode 0x11f [ 476.061994][ T48] Bluetooth: hci2: unexpected event 0x2f length: 509 > 260 [ 476.989205][ T7823] device syzkaller0 entered promiscuous mode [ 481.813181][ T7882] device syzkaller0 entered promiscuous mode [ 482.807529][ T7902] loop0: detected capacity change from 0 to 1024 [ 486.029557][ T4323] hfsplus: b-tree write err: -5, ino 25 [ 486.057434][ T4323] hfsplus: b-tree write err: -5, ino 4 [ 486.088250][ T4323] hfsplus: b-tree write err: -5, ino 2 [ 486.147602][ T4323] hfsplus: b-tree write err: -5, ino 26 [ 486.751110][ T7949] x_tables: ip6_tables: rpfilter match: used from hooks INPUT, but only valid from PREROUTING [ 487.899547][ T7965] loop0: detected capacity change from 0 to 256 [ 487.951095][ T7965] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 487.961431][ T7965] FAT-fs (loop0): Filesystem has been set read-only [ 487.968667][ T7965] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 487.979043][ T7965] FAT-fs (loop0): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 487.991763][ T7965] FAT-fs (loop0): error, invalid access to FAT (entry 0x00000001) [ 488.009134][ T26] audit: type=1800 audit(1772682276.383:7): pid=7965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.730" name="file1" dev="loop0" ino=1048637 res=0 errno=0 [ 489.136786][ T7976] overlayfs: failed to clone lowerpath [ 490.569154][ T7997] lo speed is unknown, defaulting to 1000 [ 496.827766][ T8092] loop1: detected capacity change from 0 to 256 [ 497.207826][ T8100] netlink: 'syz.1.762': attribute type 3 has an invalid length. [ 497.215850][ T8100] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 501.483154][ T8139] syz.5.774 uses obsolete (PF_INET,SOCK_PACKET) [ 501.548482][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 501.563688][ T8139] netlink: 28 bytes leftover after parsing attributes in process `syz.5.774'. [ 502.102209][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.108612][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.202415][ T8139] device dummy0 entered promiscuous mode [ 502.224872][ T8139] device team0 entered promiscuous mode [ 502.230622][ T8139] device team_slave_0 entered promiscuous mode [ 502.257163][ T8139] device team_slave_1 entered promiscuous mode [ 502.283245][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): hsr1: link becomes ready [ 504.403721][ T8170] loop1: detected capacity change from 0 to 2048 [ 504.481979][ T8170] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 505.875920][ T4268] EXT4-fs (loop1): unmounting filesystem. [ 506.932708][ T8194] netlink: 8 bytes leftover after parsing attributes in process `syz.3.793'. [ 509.199226][ T4281] Bluetooth: hci0: command 0x0406 tx timeout [ 510.638649][ T8254] loop0: detected capacity change from 0 to 128 [ 510.692810][ T8254] FAT-fs (loop0): Unrecognized mount option "ut" or missing value [ 511.174125][ T8262] device syzkaller0 entered promiscuous mode [ 514.300517][ T8302] device syzkaller0 entered promiscuous mode [ 515.598796][ T8317] random: crng reseeded on system resumption [ 517.942381][ T8347] device syzkaller0 entered promiscuous mode [ 518.476707][ T8358] loop5: detected capacity change from 0 to 2048 [ 519.593098][ T8358] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 520.679317][ T6732] EXT4-fs (loop5): unmounting filesystem. [ 522.246400][ T8405] device syzkaller0 entered promiscuous mode [ 523.921933][ T8414] syz.2.859 (8414) used greatest stack depth: 19824 bytes left [ 525.387752][ T8432] loop0: detected capacity change from 0 to 128 [ 525.595362][ T8432] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 525.612299][ T8432] ext4 filesystem being mounted at /189/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 526.859862][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 534.249824][ T8545] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 536.112043][ T8561] loop5: detected capacity change from 0 to 256 [ 537.596727][ T8581] loop5: detected capacity change from 0 to 256 [ 539.102338][ T8581] FAT-fs (loop5): Directory bread(block 64) failed [ 539.109008][ T8581] FAT-fs (loop5): Directory bread(block 65) failed [ 539.115864][ T8581] FAT-fs (loop5): Directory bread(block 66) failed [ 539.122498][ T8581] FAT-fs (loop5): Directory bread(block 67) failed [ 539.129153][ T8581] FAT-fs (loop5): Directory bread(block 68) failed [ 539.135804][ T8581] FAT-fs (loop5): Directory bread(block 69) failed [ 539.142552][ T8581] FAT-fs (loop5): Directory bread(block 70) failed [ 539.149521][ T8581] FAT-fs (loop5): Directory bread(block 71) failed [ 539.156271][ T8581] FAT-fs (loop5): Directory bread(block 72) failed [ 539.163241][ T8581] FAT-fs (loop5): Directory bread(block 73) failed [ 542.822771][ T8612] loop0: detected capacity change from 0 to 64 [ 543.264365][ T8612] hfs: get root inode failed [ 544.489890][ T8625] device syzkaller0 entered promiscuous mode [ 547.243295][ T8657] loop5: detected capacity change from 0 to 1024 [ 547.275781][ T8659] netlink: 'syz.0.919': attribute type 1 has an invalid length. [ 547.314417][ T8659] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 547.326588][ T8659] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 548.767283][ T4412] hfsplus: b-tree write err: -5, ino 25 [ 548.777294][ T4412] hfsplus: b-tree write err: -5, ino 4 [ 548.814156][ T4412] hfsplus: b-tree write err: -5, ino 2 [ 549.090919][ T8659] device macvlan2 entered promiscuous mode [ 549.113122][ T8659] device bond3 entered promiscuous mode [ 549.128858][ T8659] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 549.168321][ T8659] device bond3 left promiscuous mode [ 549.335878][ T8677] loop5: detected capacity change from 0 to 256 [ 549.398765][ T8677] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 551.462422][ T8679] random: crng reseeded on system resumption [ 561.715412][ T8802] loop0: detected capacity change from 0 to 1024 [ 561.831878][ T8802] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 561.862953][ T8802] ext4 filesystem being mounted at /207/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 563.197912][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.206576][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.332819][ T8834] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 564.827736][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 568.312375][ T4314] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 568.653592][ T4314] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 568.671807][ T4314] usb 2-1: New USB device found, idVendor=0596, idProduct=0506, bcdDevice= 0.00 [ 569.452371][ T4314] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 570.068178][ T4314] usb 2-1: config 0 descriptor?? [ 570.079886][ T4314] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 575.037132][ T4314] usb 2-1: USB disconnect, device number 3 [ 584.820554][ T9028] loop5: detected capacity change from 0 to 1024 [ 584.938454][ T9028] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 586.649165][ T4479] Bluetooth: Error in BCSP hdr checksum [ 587.793316][ T6732] EXT4-fs (loop5): unmounting filesystem. [ 588.422083][ T48] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 588.429942][ T4281] Bluetooth: hci5: command 0x1003 tx timeout [ 590.004811][ T9047] loop5: detected capacity change from 0 to 256 [ 590.174534][ T9047] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x99a53fd9, utbl_chksum : 0xe619d30d) [ 594.544162][ T9091] device syzkaller0 entered promiscuous mode [ 594.579694][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 594.699519][ T9091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1045'. [ 596.536824][ T9111] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1048'. [ 603.163358][ T9170] sctp: [Deprecated]: syz.5.1068 (pid 9170) Use of int in max_burst socket option. [ 603.163358][ T9170] Use struct sctp_assoc_value instead [ 605.033598][ T26] audit: type=1326 audit(1772682393.433:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.266675][ T26] audit: type=1326 audit(1772682393.433:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=135 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.354011][ T26] audit: type=1326 audit(1772682393.433:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.493732][ T26] audit: type=1326 audit(1772682393.433:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.516034][ C0] vkms_vblank_simulate: vblank timer overrun [ 605.660650][ T26] audit: type=1326 audit(1772682393.433:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.814045][ T26] audit: type=1326 audit(1772682393.433:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 605.937686][ T26] audit: type=1326 audit(1772682393.433:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 606.225255][ T26] audit: type=1326 audit(1772682393.433:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=9 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 606.247433][ C0] vkms_vblank_simulate: vblank timer overrun [ 606.400180][ T26] audit: type=1326 audit(1772682393.713:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 606.523656][ T26] audit: type=1326 audit(1772682393.713:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9191 comm="syz.3.1073" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa21639c799 code=0x7ffc0000 [ 606.545899][ C0] vkms_vblank_simulate: vblank timer overrun [ 624.682779][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.693915][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.747778][ T9403] loop5: detected capacity change from 0 to 128 [ 628.388751][ T9416] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1136'. [ 634.011348][ T9445] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1143'. [ 634.286656][ T9451] device syzkaller0 entered promiscuous mode [ 634.325157][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1145'. [ 634.369024][ T9451] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1145'. [ 638.942802][ T9493] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1158'. [ 639.609278][ T4907] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 639.619584][ T9504] SET target dimension over the limit! [ 641.152914][ T9494] binder: 9491:9494 ioctl 4018620d 0 returned -22 [ 646.454181][ T9575] No such timeout policy "syz1" [ 651.988618][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1182'. [ 658.158733][ T9666] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 658.168886][ T9666] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 658.178734][ T9666] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 658.483836][ T9666] syz.2.1204 (9666) used greatest stack depth: 19216 bytes left [ 658.726132][ T26] kauditd_printk_skb: 12 callbacks suppressed [ 658.726148][ T26] audit: type=1800 audit(1772682446.553:30): pid=9666 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.1204" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 660.730731][ T52] block nbd0: Attempted send on invalid socket [ 660.738070][ T52] I/O error, dev nbd0, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 660.751852][ T9695] efs: cannot read volume header [ 665.479506][ T9733] loop0: detected capacity change from 0 to 764 [ 665.588905][ T9733] rock: directory entry would overflow storage [ 665.596510][ T9733] rock: sig=0x4654, size=5, remaining=4 [ 685.616794][ T9912] ceph: No mds server is up or the cluster is laggy [ 685.636589][ T4415] libceph: connect (1)[c::]:6789 error -101 [ 685.643786][ T4415] libceph: mon0 (1)[c::]:6789 connect error [ 685.925506][ T4315] libceph: connect (1)[c::]:6789 error -101 [ 685.931854][ T4315] libceph: mon0 (1)[c::]:6789 connect error [ 685.982170][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.988864][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 693.408675][ T9976] loop5: detected capacity change from 0 to 512 [ 693.425670][ T9976] EXT4-fs: Ignoring removed orlov option [ 694.144720][ T9976] EXT4-fs (loop5): mounting ext3 file system using the ext4 subsystem [ 694.421029][ T9976] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a00ec198, mo2=0002] [ 694.470490][ T9976] System zones: 1-12 [ 694.486179][ T9976] EXT4-fs error (device loop5): ext4_iget_extra_inode:4756: inode #15: comm syz.5.1293: corrupted in-inode xattr [ 694.514197][ T9976] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1293: couldn't read orphan inode 15 (err -117) [ 694.563023][ T9976] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 695.615096][ T9990] No such timeout policy "syz1" [ 697.627491][ T6732] EXT4-fs (loop5): unmounting filesystem. [ 698.056995][T10020] kernel profiling enabled (shift: 9) [ 704.826743][T10072] netlink: 'syz.5.1318': attribute type 3 has an invalid length. [ 704.965662][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1318'. [ 705.104370][T10082] loop0: detected capacity change from 0 to 512 [ 705.152137][T10082] EXT4-fs: test_dummy_encryption requires encrypt feature [ 709.087819][T10117] loop1: detected capacity change from 0 to 8 [ 709.210949][T10117] SQUASHFS error: lzo decompression failed, data probably corrupt [ 709.228514][T10117] SQUASHFS error: Failed to read block 0x91: -5 [ 709.313999][T10117] SQUASHFS error: Unable to read metadata cache entry [8f] [ 709.409378][T10117] SQUASHFS error: Unable to read inode 0x11f [ 719.918478][T10200] loop0: detected capacity change from 0 to 512 [ 719.929068][T10200] EXT4-fs: Ignoring removed nobh option [ 721.142881][T10200] EXT4-fs (loop0): Test dummy encryption mode enabled [ 721.171114][T10200] EXT4-fs error (device loop0): __ext4_iget:5095: inode #11: block 1: comm syz.0.1350: invalid block [ 721.185508][T10200] EXT4-fs error (device loop0): ext4_orphan_get:1404: comm syz.0.1350: couldn't read orphan inode 11 (err -117) [ 721.198549][T10200] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 722.947744][ T4275] EXT4-fs (loop0): unmounting filesystem. [ 730.528574][T10284] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 732.903631][T10313] loop0: detected capacity change from 0 to 2048 [ 733.349476][T10313] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 734.277365][ T26] audit: type=1800 audit(1772682522.603:31): pid=10319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.1376" name="file1" dev="loop0" ino=1415 res=0 errno=0 [ 736.310101][T10344] loop5: detected capacity change from 0 to 16 [ 736.361924][T10344] erofs: (device loop5): mounted with root inode @ nid 36. [ 736.443501][T10344] bio_check_eod: 15 callbacks suppressed [ 736.443542][T10344] syz.5.1383: attempt to access beyond end of device [ 736.443542][T10344] loop5: rw=524288, sector=1056, nr_sectors = 16 limit=16 [ 736.493713][T10344] syz.5.1383: attempt to access beyond end of device [ 736.493713][T10344] loop5: rw=524288, sector=16, nr_sectors = 40 limit=16 [ 736.512214][T10344] erofs: (device loop5): z_erofs_lz4_decompress_mem: failed to decompress -26 in[46, 4050] out[8192] [ 736.525968][ T26] audit: type=1800 audit(1772682524.923:32): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1383" name="file2" dev="loop5" ino=89 res=0 errno=0 [ 745.368019][T10435] loop5: detected capacity change from 0 to 512 [ 745.378581][T10435] EXT4-fs: Ignoring removed nobh option [ 745.688580][T10437] loop0: detected capacity change from 0 to 8 [ 746.128750][T10435] EXT4-fs (loop5): Test dummy encryption mode enabled [ 746.143508][T10437] SQUASHFS error: zlib decompression failed, data probably corrupt [ 746.151919][T10437] SQUASHFS error: Failed to read block 0x9b: -5 [ 746.158280][T10437] SQUASHFS error: Unable to read metadata cache entry [99] [ 746.165562][T10437] SQUASHFS error: Unable to read inode 0x127 [ 746.197927][T10435] EXT4-fs error (device loop5): __ext4_iget:5095: inode #11: block 1: comm syz.5.1410: invalid block [ 746.209972][T10435] EXT4-fs error (device loop5): ext4_orphan_get:1404: comm syz.5.1410: couldn't read orphan inode 11 (err -117) [ 746.227186][T10435] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 746.502620][ T6732] EXT4-fs (loop5): unmounting filesystem. [ 747.615277][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.621697][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 751.033683][T10487] loop1: detected capacity change from 0 to 4096 [ 759.811016][T10544] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(5) [ 759.818067][T10544] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 759.986195][T10544] vhci_hcd vhci_hcd.0: Device attached [ 760.096234][ T4281] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 760.114127][ T4281] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 760.123212][ T4281] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 760.131463][ T4281] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 760.140456][ T4281] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 760.958034][ T4281] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 761.015402][T10545] vhci_hcd: connection closed [ 761.020390][ T41] vhci_hcd: stop threads [ 761.054438][ T41] vhci_hcd: release socket [ 761.098904][ T41] vhci_hcd: disconnect device [ 761.293041][ T4310] usb 43-1: new low-speed USB device number 2 using vhci_hcd [ 761.300662][ T4310] usb 43-1: enqueue for inactive port 0 [ 761.338367][T10565] lo speed is unknown, defaulting to 1000 [ 761.441761][ T4310] vhci_hcd: vhci_device speed not set [ 762.386189][T10565] chnl_net:caif_netlink_parms(): no params data found [ 762.639172][T10590] loop1: detected capacity change from 0 to 64 [ 762.657108][T10590] hfs: unable to parse mount options [ 762.983527][ T48] Bluetooth: hci2: command 0x0409 tx timeout [ 765.071852][ T48] Bluetooth: hci2: command 0x041b tx timeout [ 765.194526][T10565] bridge0: port 1(bridge_slave_0) entered blocking state [ 765.202010][T10565] bridge0: port 1(bridge_slave_0) entered disabled state [ 765.210709][T10565] device bridge_slave_0 entered promiscuous mode [ 765.222769][T10565] bridge0: port 2(bridge_slave_1) entered blocking state [ 765.230245][T10565] bridge0: port 2(bridge_slave_1) entered disabled state [ 765.731826][T10565] device bridge_slave_1 entered promiscuous mode [ 765.990540][T10565] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 766.003228][T10565] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 766.038944][T10565] team0: Port device team_slave_0 added [ 766.047813][T10565] team0: Port device team_slave_1 added [ 766.077269][T10565] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 766.085496][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.112334][T10565] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 766.290334][T10565] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 766.339259][T10565] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 766.408171][T10565] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 766.442841][ T48] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 766.456624][ T48] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 766.465479][ T48] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 766.481534][ T48] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 766.489510][ T48] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 766.496996][ T48] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 766.582482][T10565] device hsr_slave_0 entered promiscuous mode [ 766.589850][T10565] device hsr_slave_1 entered promiscuous mode [ 766.596910][T10565] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 766.604828][T10565] Cannot create hsr debugfs directory [ 766.665027][T10620] lo speed is unknown, defaulting to 1000 [ 767.262198][ T48] Bluetooth: hci2: command 0x040f tx timeout [ 769.753479][ T48] Bluetooth: hci4: command 0x0409 tx timeout [ 769.760830][ T48] Bluetooth: hci2: command 0x0419 tx timeout [ 769.818264][T10565] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 769.947020][T10565] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 769.970479][T10640] loop5: detected capacity change from 0 to 164 [ 770.021263][T10565] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 770.047819][T10565] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 770.295835][T10620] chnl_net:caif_netlink_parms(): no params data found [ 770.711824][ T27] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 770.932705][ T27] usb 6-1: Using ep0 maxpacket: 8 [ 770.953593][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 771.152654][ T27] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 771.164130][ T27] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 771.241742][ T27] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 771.280062][ T27] usb 6-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 771.297428][T10620] bridge0: port 1(bridge_slave_0) entered blocking state [ 771.306920][ T27] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.326352][ T27] usb 6-1: config 0 descriptor?? [ 771.338642][T10620] bridge0: port 1(bridge_slave_0) entered disabled state [ 771.374798][T10620] device bridge_slave_0 entered promiscuous mode [ 771.429789][T10565] 8021q: adding VLAN 0 to HW filter on device bond0 [ 771.439177][T10620] bridge0: port 2(bridge_slave_1) entered blocking state [ 771.654799][T10620] bridge0: port 2(bridge_slave_1) entered disabled state [ 771.685225][T10620] device bridge_slave_1 entered promiscuous mode [ 771.784296][ T48] Bluetooth: hci4: command 0x041b tx timeout [ 773.357429][ T27] usb 6-1: USB disconnect, device number 2 [ 773.862664][ T48] Bluetooth: hci4: command 0x040f tx timeout [ 773.936529][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 774.032429][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 774.320081][T10565] 8021q: adding VLAN 0 to HW filter on device team0 [ 774.369063][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 774.402570][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 774.411367][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 774.418631][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 774.487237][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 774.530962][T10620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 774.571855][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 774.594974][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 774.678880][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 774.686187][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 775.506238][ T4297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 775.644421][T10620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 775.945093][ T48] Bluetooth: hci4: command 0x0419 tx timeout [ 776.134194][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 776.348818][T10620] team0: Port device team_slave_0 added [ 776.848968][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 777.139001][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 777.168193][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 777.184279][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 777.212322][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 777.227081][T10620] team0: Port device team_slave_1 added [ 777.274111][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 777.314993][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 777.390779][T10620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 777.405382][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 777.440784][T10620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 777.506357][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 777.605954][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 777.819631][T10565] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 777.983490][T10620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 778.067158][T10620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 778.267786][T10620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 778.406664][T10620] device hsr_slave_0 entered promiscuous mode [ 778.467113][T10620] device hsr_slave_1 entered promiscuous mode [ 778.482417][T10620] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 778.490825][T10620] Cannot create hsr debugfs directory [ 778.821140][T10702] loop5: detected capacity change from 0 to 128 [ 779.947547][ T48] Bluetooth: hci3: unexpected event 0x2f length: 509 > 260 [ 780.264274][T10620] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 780.772674][T10620] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 780.884152][T10620] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 781.097409][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 781.105298][ T4479] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 781.127563][T10620] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 782.038973][T10565] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 782.613645][T10728] loop5: detected capacity change from 0 to 64 [ 782.623623][T10728] hfs: unable to parse mount options [ 785.075361][T10620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 785.088943][T10725] loop0: detected capacity change from 0 to 4096 [ 785.115367][T10725] ntfs3: loop0: Different NTFS' sector size (2048) and media sector size (512) [ 785.158942][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 785.320404][ T4410] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 785.342417][T10725] ntfs3: loop0: Mark volume as dirty due to NTFS errors [ 785.352867][T10620] 8021q: adding VLAN 0 to HW filter on device team0 [ 785.542856][T10725] ntfs3: loop0: Failed to load $BadClus. [ 786.369594][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 786.390204][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 786.462652][ T4557] bridge0: port 1(bridge_slave_0) entered blocking state [ 786.469857][ T4557] bridge0: port 1(bridge_slave_0) entered forwarding state [ 786.637191][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 786.646541][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 786.949032][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 787.156897][ T4557] bridge0: port 2(bridge_slave_1) entered blocking state [ 787.164175][ T4557] bridge0: port 2(bridge_slave_1) entered forwarding state [ 787.425147][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 787.447722][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 787.463664][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 787.496675][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 787.540305][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 787.560817][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 787.575678][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 787.619443][T10758] loop1: detected capacity change from 0 to 2048 [ 787.630198][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 787.640598][T10758] UDF-fs: error (device loop1): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 787.653122][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 787.663615][T10758] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 787.679484][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 787.756045][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 787.816993][T10620] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 788.417900][T10765] kAFS: unable to lookup cell '\/' [ 789.188420][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 789.209370][ T4323] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 789.351453][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 789.372264][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 789.391038][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 789.400913][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 789.415015][T10565] device veth0_vlan entered promiscuous mode [ 789.448694][T10565] device veth1_vlan entered promiscuous mode [ 789.480739][T10565] device veth0_macvtap entered promiscuous mode [ 789.493445][T10565] device veth1_macvtap entered promiscuous mode [ 789.515252][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.620207][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.631836][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.643227][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.653382][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.668176][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.681530][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 789.698568][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.711432][T10565] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 789.726247][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 789.735684][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 789.744773][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 789.756070][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 789.765674][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 789.858652][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 789.888698][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 789.901321][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 789.932687][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.973443][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 789.984438][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 789.995515][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.020260][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.049821][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.067512][T10565] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 790.089750][T10565] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 790.841536][T10565] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 790.853490][T10565] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 790.972396][T10565] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.029814][T10565] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 791.058072][T10565] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 792.122519][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 792.131361][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 792.440007][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 792.479139][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 792.668564][T10620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 793.738637][ T4323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 793.761676][ T4323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 793.769376][ T7781] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 794.485439][T10815] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 794.492787][T10815] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 794.499369][T10815] comedi comedi3: 8255: I/O port conflict (0x5c95239c,4) [ 794.506790][T10815] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 794.513351][T10815] comedi comedi3: 8255: I/O port conflict (0x3ff,4) [ 794.520039][T10815] comedi comedi3: 8255: I/O port conflict (0x401,4) [ 794.526859][T10815] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 794.534006][T10815] comedi comedi3: 8255: I/O port conflict (0x2,4) [ 794.540504][T10815] comedi comedi3: 8255: I/O port conflict (0x9,4) [ 794.547098][T10815] comedi comedi3: 8255: I/O port conflict (0x5,4) [ 794.553626][T10815] comedi comedi3: 8255: I/O port conflict (0x4,4) [ 794.560117][T10815] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 794.566676][T10815] comedi comedi3: 8255: I/O port conflict (0xffffffff8000008b,4) [ 794.574583][T10815] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffffe,4) [ 794.582586][T10815] comedi comedi3: 8255: I/O port conflict (0xa,4) [ 794.589188][T10815] comedi comedi3: 8255: I/O port conflict (0xfffffffffffffff5,4) [ 794.597030][T10815] comedi comedi3: 8255: I/O port conflict (0x1,4) [ 794.603587][T10815] comedi comedi3: 8255: I/O port conflict (0x3,4) [ 794.680870][ T4336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 794.696419][ T4336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 794.749048][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 798.728172][T10850] loop5: detected capacity change from 0 to 4096 [ 798.987305][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 799.072053][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 799.137227][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 799.174859][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 799.189105][ T6732] ntfs3: loop5: ntfs_evict_inode r=5 failed, -22. [ 799.212920][ T6732] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 799.227919][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 799.241137][ T4477] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 799.269304][T10620] device veth0_vlan entered promiscuous mode [ 799.680762][T10864] kAFS: unable to lookup cell '\/' [ 800.779956][T10620] device veth1_vlan entered promiscuous mode [ 801.014411][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 801.341376][T10871] loop1: detected capacity change from 0 to 32768 [ 801.360719][T10871] (syz.1.1515,10871,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 801.380179][T10871] (syz.1.1515,10871,0):ocfs2_block_check_validate:402 ERROR: CRC32 failed: stored: 0xb3775c19, computed 0x2dd1c265. Applying ECC. [ 801.565710][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 801.603438][T10871] JBD2: Ignoring recovery information on journal [ 801.703636][T10620] device veth0_macvtap entered promiscuous mode [ 801.718289][T10871] ocfs2: Mounting device (7,1) on (node local, slot 0) with ordered data mode. [ 801.794374][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 801.830257][T10871] ocfs2: Unmounting device (7,1) on (node local) [ 801.916733][T10620] device veth1_macvtap entered promiscuous mode [ 802.046469][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.284388][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.411755][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 802.841912][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 802.871970][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 804.109143][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.021945][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.106727][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 805.266151][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 805.296798][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.220510][T10620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 806.235042][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 806.245199][ T4541] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 806.263464][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.280975][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.454574][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.473163][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 806.489099][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 806.595549][T10911] loop1: detected capacity change from 0 to 16 [ 806.611448][T10911] erofs: (device loop1): mounted with root inode @ nid 36. [ 806.635389][T10911] erofs: (device loop1): z_erofs_readahead: readahead error at page 2 @ nid 89 [ 806.715716][ T48] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 806.736144][T10911] erofs: (device loop1): z_erofs_lz4_decompress_mem: failed to decompress 6887 in[4096, 0] out[8192] [ 806.861884][ T26] audit: type=1800 audit(1772682595.143:33): pid=10911 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.1525" name="file3" dev="loop1" ino=89 res=0 errno=0 [ 807.243763][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.253786][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.264782][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.286541][T10620] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 807.333404][T10620] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 807.374337][T10620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 807.406493][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 807.423431][ T4351] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 807.440817][T10620] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.461482][T10620] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.512199][T10620] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 807.521101][T10620] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 808.626235][T10927] kAFS: unable to lookup cell '\/' [ 808.871265][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.877670][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 809.165014][T10931] loop1: detected capacity change from 0 to 512 [ 809.199504][ T48] Bluetooth: hci0: unexpected event 0x2f length: 509 > 260 [ 809.206427][T10931] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 809.855948][T10931] EXT4-fs (loop1): Cannot use DAX on a filesystem that may contain inline data [ 809.993783][ T4410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.019480][ T4410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.760807][ T4557] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 810.859344][ T4410] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 810.868530][ T4410] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 810.910456][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 811.310375][T10946] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1533'. [ 817.141368][T10985] loop1: detected capacity change from 0 to 2048 [ 818.124527][T10985] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 819.283758][T11002] ufs: You didn't specify the type of your ufs filesystem [ 819.283758][T11002] [ 819.283758][T11002] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 819.283758][T11002] [ 819.283758][T11002] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 819.315135][T11002] ufs: ufstype=old is supported read-only [ 819.326570][T11002] I/O error, dev loop15, sector 16 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 1 [ 829.361656][ T4335] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 829.558400][ T4335] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 830.204157][ T4335] usb 7-1: config 0 has no interface number 0 [ 830.210349][ T4335] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 830.282706][ T4335] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 830.322263][ T4335] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 830.347625][ T4335] usb 7-1: Manufacturer: syz [ 830.363020][ T4335] usb 7-1: SerialNumber: syz [ 830.511399][ T4335] usb 7-1: config 0 descriptor?? [ 831.060898][ T4335] usbtouchscreen 7-1:0.214: Failed to read FW rev: -32 [ 831.069650][ T4335] usbtouchscreen: probe of 7-1:0.214 failed with error -32 [ 833.738652][ T22] usb 7-1: USB disconnect, device number 2 [ 834.955616][T11108] xt_NFQUEUE: number of queues (62232) out of range (got 67565) [ 843.684632][T11169] IPVS: set_ctl: invalid protocol: 255 172.20.20.45:286 [ 843.970436][T11181] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1590'. [ 844.091728][T11181] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 858.664926][ T26] audit: type=1800 audit(1772682647.063:34): pid=11259 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1601" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 858.775420][T11259] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 858.830438][T11259] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 858.963418][T11259] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 860.630424][T11259] syz.5.1601 (11259) used greatest stack depth: 16528 bytes left [ 861.467177][T11304] loop5: detected capacity change from 0 to 256 [ 870.034357][T11368] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1644'. [ 870.188213][T11368] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 870.270995][ T1267] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.277443][ T1267] ieee802154 phy1 wpan1: encryption failed: -22 [ 873.077297][ T4297] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 875.176250][ T4297] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 876.759637][T11414] loop6: detected capacity change from 0 to 1024 [ 876.899455][T11414] hfsplus: found bad thread record in catalog [ 877.192830][T11198] hfsplus: b-tree write err: -5, ino 25 [ 877.198804][T11198] hfsplus: b-tree write err: -5, ino 4 [ 877.267090][T11198] hfsplus: b-tree write err: -5, ino 2 [ 878.763511][ T4297] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 881.327659][ T4297] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 888.267338][ T48] Bluetooth: hci2: command 0x0406 tx timeout [ 891.138801][T11502] [ 891.141227][T11502] ====================================================== [ 891.148247][T11502] WARNING: possible circular locking dependency detected [ 891.155364][T11502] syzkaller #0 Not tainted [ 891.159815][T11502] ------------------------------------------------------ [ 891.166836][T11502] syz.1.1666/11502 is trying to acquire lock: [ 891.173423][T11502] ffff8880792dc1b0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: process_measurement+0x3a2/0x1c30 [ 891.184149][T11502] [ 891.184149][T11502] but task is already holding lock: [ 891.191512][T11502] ffff88807db788d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 891.201597][T11502] [ 891.201597][T11502] which lock already depends on the new lock. [ 891.201597][T11502] [ 891.212018][T11502] [ 891.212018][T11502] the existing dependency chain (in reverse order) is: [ 891.221038][T11502] [ 891.221038][T11502] -> #1 (&mm->mmap_lock){++++}-{3:3}: [ 891.228615][T11502] down_read_killable+0x4c/0x340 [ 891.234104][T11502] mmap_read_lock_killable+0x1d/0x60 [ 891.239918][T11502] lock_mm_and_find_vma+0x2b1/0x2f0 [ 891.245648][T11502] do_user_addr_fault+0x2db/0xb10 [ 891.251204][T11502] exc_page_fault+0x60/0x100 [ 891.256321][T11502] asm_exc_page_fault+0x22/0x30 [ 891.261702][T11502] fault_in_readable+0x13e/0x1f0 [ 891.267191][T11502] fault_in_iov_iter_readable+0xbb/0x2e0 [ 891.273364][T11502] generic_perform_write+0x1f1/0x5c0 [ 891.279273][T11502] __generic_file_write_iter+0x148/0x2a0 [ 891.285449][T11502] generic_file_write_iter+0xab/0x2e0 [ 891.291368][T11502] vfs_write+0x4b1/0xa30 [ 891.296188][T11502] ksys_write+0x14c/0x250 [ 891.301094][T11502] do_syscall_64+0x4c/0xa0 [ 891.306160][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.312595][T11502] [ 891.312595][T11502] -> #0 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}: [ 891.321294][T11502] __lock_acquire+0x2d07/0x7d10 [ 891.326682][T11502] lock_acquire+0x1bb/0x4a0 [ 891.331723][T11502] down_write+0x36/0x60 [ 891.336413][T11502] process_measurement+0x3a2/0x1c30 [ 891.342145][T11502] ima_file_mmap+0x102/0x150 [ 891.347263][T11502] __se_sys_remap_file_pages+0x559/0x7b0 [ 891.353451][T11502] do_syscall_64+0x4c/0xa0 [ 891.358417][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.364867][T11502] [ 891.364867][T11502] other info that might help us debug this: [ 891.364867][T11502] [ 891.375118][T11502] Possible unsafe locking scenario: [ 891.375118][T11502] [ 891.382584][T11502] CPU0 CPU1 [ 891.387955][T11502] ---- ---- [ 891.393324][T11502] lock(&mm->mmap_lock); [ 891.397664][T11502] lock(&sb->s_type->i_mutex_key#13); [ 891.405787][T11502] lock(&mm->mmap_lock); [ 891.415090][T11502] lock(&sb->s_type->i_mutex_key#13); [ 891.420591][T11502] [ 891.420591][T11502] *** DEADLOCK *** [ 891.420591][T11502] [ 891.429446][T11502] 1 lock held by syz.1.1666/11502: [ 891.434564][T11502] #0: ffff88807db788d8 (&mm->mmap_lock){++++}-{3:3}, at: __se_sys_remap_file_pages+0x1a4/0x7b0 [ 891.445123][T11502] [ 891.445123][T11502] stack backtrace: [ 891.451022][T11502] CPU: 0 PID: 11502 Comm: syz.1.1666 Not tainted syzkaller #0 [ 891.458484][T11502] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 891.468640][T11502] Call Trace: [ 891.471955][T11502] [ 891.474889][T11502] dump_stack_lvl+0x188/0x24e [ 891.479587][T11502] ? load_image+0x400/0x400 [ 891.484097][T11502] ? show_regs_print_info+0x12/0x12 [ 891.489314][T11502] ? print_circular_bug+0x12b/0x1a0 [ 891.494641][T11502] check_noncircular+0x296/0x330 [ 891.499592][T11502] ? look_up_lock_class+0x75/0x140 [ 891.504711][T11502] ? add_chain_block+0x940/0x940 [ 891.509663][T11502] ? lockdep_lock+0xf1/0x1f0 [ 891.514264][T11502] ? _find_first_zero_bit+0xcf/0x100 [ 891.519554][T11502] __lock_acquire+0x2d07/0x7d10 [ 891.524427][T11502] ? ima_match_policy+0x107/0x2120 [ 891.529568][T11502] ? __lock_acquire+0x7d10/0x7d10 [ 891.534695][T11502] ? verify_lock_unused+0x140/0x140 [ 891.539912][T11502] ? ima_match_policy+0x107/0x2120 [ 891.545215][T11502] ? ima_match_policy+0x2093/0x2120 [ 891.550442][T11502] lock_acquire+0x1bb/0x4a0 [ 891.554989][T11502] ? process_measurement+0x3a2/0x1c30 [ 891.560375][T11502] ? __might_sleep+0xd0/0xd0 [ 891.564972][T11502] ? read_lock_is_recursive+0x10/0x10 [ 891.570360][T11502] ? ima_get_action+0x71/0xa0 [ 891.575089][T11502] down_write+0x36/0x60 [ 891.579276][T11502] ? process_measurement+0x3a2/0x1c30 [ 891.584673][T11502] process_measurement+0x3a2/0x1c30 [ 891.589894][T11502] ? ima_file_mmap+0x150/0x150 [ 891.594672][T11502] ? aa_file_perm+0x112/0xf00 [ 891.599370][T11502] ? aa_file_perm+0x112/0xf00 [ 891.604091][T11502] ? mtree_load+0x100/0xa70 [ 891.608620][T11502] ? apparmor_current_getsecid_subj+0xb1/0x110 [ 891.614784][T11502] ima_file_mmap+0x102/0x150 [ 891.619382][T11502] ? end_current_label_crit_section+0x14b/0x170 [ 891.625629][T11502] ? ima_file_free+0x3e0/0x3e0 [ 891.630396][T11502] ? common_file_perm+0x171/0x1c0 [ 891.635517][T11502] ? bpf_lsm_mmap_file+0x5/0x10 [ 891.640382][T11502] ? security_mmap_file+0x11b/0x180 [ 891.645630][T11502] __se_sys_remap_file_pages+0x559/0x7b0 [ 891.651281][T11502] ? __x64_sys_remap_file_pages+0xc0/0xc0 [ 891.657016][T11502] ? lock_chain_count+0x20/0x20 [ 891.661884][T11502] ? lockdep_hardirqs_on+0x94/0x140 [ 891.667105][T11502] ? __x64_sys_remap_file_pages+0x1c/0xc0 [ 891.672939][T11502] do_syscall_64+0x4c/0xa0 [ 891.677380][T11502] ? clear_bhb_loop+0x60/0xb0 [ 891.682067][T11502] ? clear_bhb_loop+0x60/0xb0 [ 891.686780][T11502] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 891.692687][T11502] RIP: 0033:0x7f536b19c799 [ 891.697108][T11502] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 891.716724][T11502] RSP: 002b:00007f536c102028 EFLAGS: 00000246 ORIG_RAX: 00000000000000d8 [ 891.725430][T11502] RAX: ffffffffffffffda RBX: 00007f536b416180 RCX: 00007f536b19c799 [ 891.733411][T11502] RDX: 0000000000000000 RSI: 0000000000002000 RDI: 0000200000640000 [ 891.741498][T11502] RBP: 00007f536b232bd9 R08: 0000000000020000 R09: 0000000000000000 [ 891.749526][T11502] R10: fffffffffffffffd R11: 0000000000000246 R12: 0000000000000000 [ 891.757503][T11502] R13: 00007f536b416218 R14: 00007f536b416180 R15: 00007ffebcbebc08 [ 891.765511][T11502] [ 892.303583][T11505] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1668'. [ 893.906593][ T4297] device hsr_slave_0 left promiscuous mode [ 893.915740][ T4297] device hsr_slave_1 left promiscuous mode [ 893.938246][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 893.969869][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 893.987067][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 894.002147][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 894.028257][ T4297] device bridge_slave_1 left promiscuous mode [ 894.051506][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 894.081299][ T4297] device bridge_slave_0 left promiscuous mode [ 894.098468][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 894.133830][ T4297] device veth1_macvtap left promiscuous mode [ 894.155618][ T4297] device veth0_macvtap left promiscuous mode [ 894.179443][ T4297] device veth1_vlan left promiscuous mode [ 894.196127][ T4297] device veth0_vlan left promiscuous mode [ 894.773902][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 894.883822][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 894.925912][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 894.988257][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 895.230879][ T4297] bond0 (unregistering): Released all slaves [ 895.273099][ T4310] lo speed is unknown, defaulting to 1000 [ 895.718006][ T4297] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.768758][ T4297] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.828570][ T4297] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 895.879812][ T4297] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 896.815671][ T4297] bond0: (slave wlan1): Releasing backup interface [ 896.958525][ T4297] device hsr_slave_0 left promiscuous mode [ 896.968583][ T4297] device hsr_slave_1 left promiscuous mode [ 896.975215][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 896.983018][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 896.990868][ T4297] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 896.999822][ T4297] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 897.007758][ T4297] device bridge_slave_1 left promiscuous mode [ 897.014124][ T4297] bridge0: port 2(bridge_slave_1) entered disabled state [ 897.022892][ T4297] device bridge_slave_0 left promiscuous mode [ 897.029201][ T4297] bridge0: port 1(bridge_slave_0) entered disabled state [ 897.041472][ T4297] device veth1_macvtap left promiscuous mode [ 897.047677][ T4297] device veth0_macvtap left promiscuous mode [ 897.054133][ T4297] device veth1_vlan left promiscuous mode [ 897.060040][ T4297] device veth0_vlan left promiscuous mode [ 897.319600][ T4297] team0 (unregistering): Port device team_slave_1 removed [ 897.355815][ T4297] team0 (unregistering): Port device team_slave_0 removed [ 897.389822][ T4297] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 897.426454][ T4297] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 897.577643][ T4297] bond0 (unregistering): Released all slaves