last executing test programs: 3m44.048072843s ago: executing program 4 (id=5): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000004a80)={0x73622a85, 0x100, 0x1}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000004c0)={0x10, 0x0, &(0x7f0000000000)=[@acquire, @decrefs], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000fc0)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}], 0x0, 0x0, 0x0}) 3m42.969603694s ago: executing program 4 (id=15): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) r4 = fsmount(r3, 0x0, 0x80) r5 = openat$cgroup_procs(r4, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r5, &(0x7f0000001c00), 0x12) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r6 = socket(0x840000000002, 0x3, 0xff) connect$inet(r6, &(0x7f0000000540)={0x2, 0x4e60, @dev={0xac, 0x14, 0x14, 0x28}}, 0x10) sendmmsg$inet(r6, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x300, 0x401eb94) 3m39.996954143s ago: executing program 4 (id=29): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000680), 0x901800, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000240)={0x3, 0x2, 0x3000, 0x1000, &(0x7f0000feb000/0x1000)=nil}) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xa, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="7b87f20f89", @ANYRESHEX], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x7, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, 0x0}], 0x1, 0x4, 0x0, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3m38.680530584s ago: executing program 4 (id=32): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") r0 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x4) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) write$binfmt_register(r0, 0x0, 0x0) mount$bpf(0x200000000000, &(0x7f0000000200)='.\x00', 0x0, 0x8b7840, 0x0) mkdir(0x0, 0x190) mount$bpf(0x200000000000, &(0x7f0000000000)='./file0/../file0\x00', 0x0, 0x989046, 0x0) stat(&(0x7f00000005c0)='./file0/../file0\x00', &(0x7f0000000600)) 3m38.059906388s ago: executing program 4 (id=37): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x10000, &(0x7f0000000680)={[{@errors_continue}, {@delalloc}, {@data_err_ignore}, {@journal_ioprio={'journal_ioprio', 0x3d, 0x2}}, {@data_err_ignore}, {@nojournal_checksum}]}, 0x1, 0x4ef, &(0x7f0000000180)="$eJzs3M9vFdUeAPDv3PbSAo9HH49HAg+1gMbGxBYKCgs3mJi40MSIC1k2bSGVCxjahZBGLonBNYl7w9K408StLo0r/wBcuDAxJETZAG68Zu6dub29P3p7S2nT3s8nGThn5sycc2bmzD0zpzMB9K3R9J8k4l8RcS8i9taiyxOM1v57/HBx+snDxekoVyrn/kiq6R6l8Uy+3u4sMlaIKHyWNG7wbh6Yv37j0lSpNHstytX4xMLljyfmr994de7y1MXZi7NXJs+cOXXyxOnXJ19rLvJw10olrbPSej069OnVwwffPn/n3enB5o011qOjfK0/y12TRr5vO3ipcXvbwJ6GcNJar5sbWhhWbTg7DYtp+18sHT1fm520a0PA9lKpVCpDnReXK81utcwBtqwkNrsEwObIf+jT+998qs0pbkT3Y9M9OFu7AXr0cLFyM2L6cb3+g1HI0hSb7m9TK/SZejIaER+W//oynWKl5xC/rlOGAEDf++Fs1g1Moqn/V4gDDen+nY2hjETEfyJiX0T8NyL2R8T/IpalXSaJqKyQ//7mGfX8v81GEQr311q31Uj7f29kY1v5lOWbJxkZyGJ7IvIO8+zxbJ+MRXHowlxp9kSH7e/okn9j/y+d0vzzvmBWjvuDTZ3NmamFqbXVttWDWxGHBpvrnwymBy4fxkki4mBEHOphuyMN4blXvjpcjzTdVnSvf1Wl7XDEOoyfVe5GvFw7/uVYdvyXckwaxycLLeOTE8NRmj0+kZ4Fx9vm8dPPt9/rlH/X+n/3W/Mqb53+/tzTVrsuPf67Gs7/yMdvl+o/kkQk9fHa+YjKQG953P7l8+p2R4+1Llvr+b8j+aAaztvXJ1MLC9dOROxI3mmdP7m0bh7P06f1HzvWvv3vy9ZJ98T/IyI9iZ+LiOcjBvKyH4mIoxHRpmp1P7754kedlq3y/H9m0vrPtL3+LTv+S+P1qwzkK6dzBi4dufekw8Ujq//elY//qWpoLOLv6Hj9S5ZdIlZb0qfegQAAALAFFKL6t/+F8Xq4UBgfrz0D2h+7CqWr8wsvRMSVmdo7AiNRLFyYK83mD+RGopjkzz9HGuKTTfGT2XPjLwZ2VuPj01dLM5tdeehzu6ttPmlp/6nfe3zOC2xB2+g9NKBH3dr/gTsbVBBgw/n9h/7V0P47fdmi7C9lYHvy+w/9q137vxlfr/jugmsGbH0VbRn62srtv/v3NoGtazDer4errz37+Cf0Df1/6Eu9vtffW6Ay1H7RcLT5YsDwsynGzjZ5bUog7Vmt4waLEbG6xDvXkkXeBez8hYdCbxscitZFA7HSWkn77zhERLnjWule6VqeiwfW/eTPv4my3qfNN0vttLjKw/20Aff7AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAtvJPAAAA//8tL8+m") openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x109342, 0x0) r0 = creat(&(0x7f0000000040)='./file1\x00', 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r1 = socket$netlink(0x10, 0x3, 0xf) writev(r1, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = socket$nl_generic(0x11, 0x3, 0x10) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x27, 0x1c, 0x3fc, 0x0, 0x3, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) sendmsg(r3, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = fsopen(&(0x7f0000001340)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r7 = fsmount(r6, 0x0, 0x80) r8 = openat$cgroup_procs(r7, &(0x7f00000002c0)='cgroup.procs\x00', 0x2, 0x0) ptrace$setregs(0xf, r2, 0xfffffffffffffc01, &(0x7f0000000700)="9e18868437595e0c6b722fa01d9a7c0af6ed09d8431ff3316272aeaf7a405e2730ac38a3bedd64ca91df3042f4569050afa9cb79efd1212627bfcdc538c13e9f4a15b9cc0cf8aafa19da50b77d0835319dc34a001ff3fc71fbc1de5c45f7cba533675d67e5e73a78c6265b347f") ftruncate(0xffffffffffffffff, 0x81ff) write$cgroup_pid(r8, &(0x7f0000001c00), 0x12) accept4$nfc_llcp(r0, 0x0, 0x0, 0x80800) write$P9_RREADLINK(r0, &(0x7f0000000140)={0x10, 0x17, 0x2, {0x7, './file2'}}, 0xffffffac) 3m37.235824036s ago: executing program 4 (id=42): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0xffffffb0}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) 3m36.785870922s ago: executing program 32 (id=42): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40000000}, [@ldst={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a7fbb}, @ldst={0x6, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0xffffffb0}}, &(0x7f0000000000)='syzkaller\x00', 0x5, 0x93, &(0x7f00000005c0)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x61e5cc96, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value=0x8000000}, 0x4c) 3m24.75145968s ago: executing program 3 (id=71): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000d00)=ANY=[@ANYBLOB="b70000008100003bbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105400000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007313000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff31a8fd3c0fd8b7ff831028e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646c0200000000000000020000e35208b0bb0d2cd829e654400e2438ec649dc76128610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda82fc9c4d7ecc7a803bf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714f62ba7a54f0c33d39000d0bfed3a6a59ff616236fd8f2477184bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06fa2e04cfe0649226c697d9e8eaade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00023ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a83469620c6e74e1f46132559c4f8700a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88f15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a920099c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40fc5d2f55ff07c53147de202ce517b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e1661061173f359e9052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff26b61aac8aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3ba18a1a2b65079cc1c7bc46dd12305a1ae9dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e26534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ad1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336dfaa6d5d164301190bc2d4c04087729033342045804a28082abc3b4762302a271722fb515f31e0dd115a292f1e68481a62c49d15ea5460a29c60b1058fb7aa9bf4ee3cbe11b03711a15d730646b72d074dab1e8c429339f3460d324c17a4a8bfc7d7eab45bef00664d6dc82300000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000080)=r0) sendmsg$IPSET_CMD_GET_BYINDEX(0xffffffffffffffff, 0x0, 0x8740ef42d443ae67) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(r1) 3m24.212662591s ago: executing program 3 (id=72): r0 = syz_open_dev$evdev(&(0x7f0000000000), 0xc578, 0x180) ioctl$EVIOCGLED(r0, 0x80404519, &(0x7f00000010c0)=""/4096) 3m24.012019074s ago: executing program 3 (id=73): r0 = syz_open_dev$loop(&(0x7f0000000800), 0x0, 0x4001) ioctl$BLKSECDISCARD(r0, 0x127d, &(0x7f0000000840)) 3m23.933737868s ago: executing program 3 (id=74): syz_mount_image$ext4(&(0x7f00000008c0)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f0000000880), 0x1, 0x5a3, &(0x7f00000002c0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x80042, 0x4d) read$FUSE(r0, &(0x7f00000009c0)={0x2020}, 0x2020) pwrite64(r0, &(0x7f0000000140)='2', 0xfdef, 0xe7c) fallocate(r0, 0x0, 0x37e9, 0x2f92) 3m23.355963625s ago: executing program 3 (id=76): chdir(0x0) syz_mount_image$ext4(&(0x7f0000000240)='ext2\x00', &(0x7f0000000f00)='./file0\x00', 0x0, &(0x7f00000002c0)={[{@minixdf}]}, 0x1, 0x27e, &(0x7f0000000500)="$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") syz_mount_image$vfat(&(0x7f0000000b00), &(0x7f00000005c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x181d011, 0x0, 0x40, 0x0, &(0x7f0000000140)) creat(&(0x7f0000000580)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x824851, 0x0, 0x1, 0x0, &(0x7f0000000d40)) mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0xe) unlinkat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x200) 3m21.972239447s ago: executing program 3 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280), 0x4) 3m6.213831621s ago: executing program 33 (id=80): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000580)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000600)=[@sack_perm], 0x8cbd752) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280), 0x4) 2m18.243872779s ago: executing program 1 (id=287): getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f0000000000), 0x651, 0x0) r1 = socket(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000003540)={'ip6tnl0\x00', 0x0}) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) mount$fuse(0x0, 0x0, &(0x7f0000002100), 0x80, 0x0) sendmsg$unix(r0, &(0x7f000000b440)={&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x20000050) 2m16.875935828s ago: executing program 1 (id=290): wait4(0x0, 0x0, 0x4, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000080)='./file2\x00', 0x808719, &(0x7f00000002c0)={[{@data_err_ignore}, {@data_err_ignore}, {@errors_remount}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x40000}}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x4}, 0x0}, {@quota}, {@orlov}, {@test_dummy_encryption_v1}, {@debug}, {@nouid32}, {@quota}, {@nobarrier}, {@dax_inode}, {@noblock_validity}, {@nogrpid}, {@data_err_abort}, {@resgid}, {@jqfmt_vfsv1}, {@block_validity}, {@noquota}], [{@subj_type={'subj_type', 0x3d, '@'}}, {@fsmagic={'fsmagic', 0x3d, 0x3}}, {@fsname={'fsname', 0x3d, 'errO\xd3s}rem\xa4E\xe1\x96-r\x8f'}}], 0x2c}, 0x2, 0x4fc, &(0x7f0000000e40)="$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") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x2100, 0x4) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40106614, 0x0) 2m15.79203654s ago: executing program 1 (id=298): syz_usb_connect$uac3(0x2, 0x80, &(0x7f0000000200)={{0x12, 0x1, 0x111, 0x0, 0x0, 0x0, 0x40, 0x1395, 0x300, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6e, 0x3, 0x1, 0x2, 0x20, 0x6, {0x8, 0xb, 0x0, 0x2, 0x1, 0x23, 0x30, 0x23}, {{{0x9, 0x4, 0x1, 0x0, 0x0, 0x1, 0x1, 0x30, 0x0, {{0xa, 0x24, 0x1, 0xf, 0xa, 0x9}}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x1, 0x9, 0x60, 0x25, 0x3, 0x3, {0xa, 0x25, 0x25, 0x401, 0x5}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x30, 0x0, {}, {{0x9, 0x5, 0x82, 0x9, 0x400, 0x74, 0x9, 0xbe, {0xa, 0x25, 0x25, 0x80000001, 0x1, 0xbe1}}}}}}}}]}}, 0x0) 2m12.983550741s ago: executing program 1 (id=316): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file1\x00', 0x10, &(0x7f0000000480)={[{@stripe={'stripe', 0x3d, 0x5}}]}, 0x5, 0x7eb, &(0x7f00000004c0)="$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") mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x200a017, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file1\x00', 0x121142, 0x20) 2m11.911970521s ago: executing program 1 (id=322): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@getqdisc={0x24, 0x26, 0x10, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x1, 0x5}, {0x10, 0xd}, {0x3, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000001}, 0x20040000) syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f00000000c0)={[{@test_dummy_encryption_v1}, {@nodioread_nolock}, {@errors_continue}, {@inlinecrypt}]}, 0x1, 0x241, &(0x7f00000002c0)="$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") r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x100000000) syz_kvm_setup_cpu$x86(r1, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text16={0x10, 0x0}], 0x1, 0x31, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, 0x0) r5 = dup(r2) ioctl$KVM_SET_VCPU_EVENTS(r5, 0x4400ae8f, &(0x7f0000000000)=@x86={0x3, 0x1, 0xfb, 0x0, 0x10005, 0x5, 0x3, 0xd4, 0x7, 0x2, 0x4, 0x1, 0x0, 0x7, 0x3, 0xd6, 0x2, 0x9, 0x7, '\x00', 0x8, 0x1}) ioctl$KVM_SET_VAPIC_ADDR(r5, 0x4008ae93, &(0x7f00000002c0)=0x10000) ioctl$KVM_RUN(r2, 0xae80, 0x0) 2m10.515818036s ago: executing program 1 (id=329): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000040)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8970, &(0x7f0000000040)="d9") chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) 2m10.265124047s ago: executing program 34 (id=329): syz_mount_image$ext4(&(0x7f0000000780)='ext4\x00', &(0x7f00000007c0)='./file0\x00', 0x4, &(0x7f0000000040)={[{@usrjquota_path={'usrjquota', 0x3d, './file1'}}, {@noauto_da_alloc}, {}]}, 0x1, 0x781, &(0x7f0000000800)="$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") bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_netdev_private(r0, 0x8970, &(0x7f0000000040)="d9") chdir(0x0) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001100)={0x6, 0xb, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000080), &(0x7f00000000c0)=r2}, 0x20) 1m54.156006317s ago: executing program 2 (id=388): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = fcntl$dupfd(r3, 0x0, r3) syz_usb_connect(0x0, 0x56, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000143edd08b82225646cd301020301090244000100000000090400"], 0x0) write$cgroup_pid(r4, &(0x7f00000003c0), 0xffffffa0) 1m50.124709279s ago: executing program 2 (id=395): r0 = socket$netlink(0x10, 0x3, 0xa) ioctl$int_in(r0, 0x5452, &(0x7f00000000c0)=0x7fffffff) fchdir(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x28f43000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000180)=@name={0x1e, 0x2, 0x2, {{0x40, 0x4}, 0x1}}, 0x10) ioctl$KDGKBTYPE(0xffffffffffffffff, 0x4b52, 0x0) fstat(0xffffffffffffffff, 0x0) r5 = dup(r0) r6 = open(&(0x7f0000000140)='./file1\x00', 0x109cc2, 0x5c) ftruncate(r6, 0x200004) sendfile(r5, r6, 0x0, 0x80001d00c0d1) 1m49.019200223s ago: executing program 2 (id=396): r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newqdisc={0x24, 0x14, 0x70b, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, {0x4}, {0xb, 0xc}, {0x4}}}, 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) io_uring_enter(0xffffffffffffffff, 0x2219, 0x7721, 0x16, 0x0, 0x0) close(r1) r2 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 1m48.91396494s ago: executing program 2 (id=398): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f0", @ANYRES32, @ANYBLOB="0000000000000000280012000c"], 0x48}}, 0x0) 1m48.37593626s ago: executing program 2 (id=400): r0 = socket$kcm(0x2d, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r1}) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000080)={r2}) 1m47.351927101s ago: executing program 2 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 1m32.165152761s ago: executing program 35 (id=405): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_sys\x00', 0x26e1, 0x0) close(r6) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) ioctl$RTC_SET_TIME(r1, 0x4024700a, &(0x7f0000000100)={0x2b, 0x22, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 24.075966838s ago: executing program 6 (id=660): r0 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) syz_usb_connect(0x2, 0x2d, &(0x7f00000001c0)=ANY=[@ANYBLOB="1201000041dc3208570b8d6a74330102030109021b000100000000090460"], 0x0) dup3(r1, r0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xe9, 0x4) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x300408c0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x2, 0x7}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000005580)=""/102392, 0x18ff8) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x80000) r3 = socket$netlink(0x10, 0x3, 0x4) writev(r3, 0x0, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f0000000000)={0xa, 0xfffe, 0x8, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 14.686634052s ago: executing program 7 (id=681): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 14.484745226s ago: executing program 7 (id=683): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 14.45989493s ago: executing program 0 (id=684): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r1, 0x0, 0x1ba8847c99}, 0x38) 14.371576255s ago: executing program 0 (id=685): socket$inet6_tcp(0xa, 0x1, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) syz_open_dev$vim2m(0x0, 0x7, 0x2) connect$unix(r0, 0x0, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) r2 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r2, 0xc04064a0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000340)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_CREATE_LEASE(r2, 0xc01864c6, &(0x7f00000001c0)={0x0, 0x0, 0x80800, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(r2, 0xc05064a7, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3000000}) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r6, 0x1, 0x70bd2d, 0x25dfdbfb}, 0x14}}, 0x804) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, 0x0, 0x0) shutdown(r7, 0x0) recvmmsg(r7, 0x0, 0x0, 0x0, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(r4, 0xc01464a6, &(0x7f0000000180)={r5}) 14.083444643s ago: executing program 8 (id=686): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) getpriority(0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 12.291694282s ago: executing program 8 (id=687): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000040)={0x1, 0x1, 0x5, 0x7, @vifc_lcl_addr=@initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) openat$comedi(0xffffffffffffff9c, 0x0, 0x400, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) openat$apparmor_thread_current(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/consoles\x00', 0x0, 0x0) mknod$loop(&(0x7f0000000140)='./file0\x00', 0xfff, 0x0) execve(0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x3, 0x40) bind(r2, &(0x7f0000000000)=@hci={0xa, 0x0, 0x2}, 0x80) 11.187880246s ago: executing program 6 (id=689): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000040)) write$binfmt_elf64(r1, &(0x7f0000001040)=ANY=[], 0xfffffe3e) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x1, 0x0, 0x0, 0x20008000}, 0x70) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1fb, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) 11.187669126s ago: executing program 8 (id=690): munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x3, 0x4) r1 = socket(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'ip6gretap0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000080)="3303200071fd140000007ef52f555f2a0c9fe67025c1d97bfbf719143baa4b1f0f858c6632f47042195e", 0xfdef, 0x40008c1, &(0x7f00000000c0)={0x11, 0x86dd, r2, 0x1, 0x62}, 0x14) 9.790840139s ago: executing program 6 (id=692): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec778000) r1 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x84, 0x0) ioctl$SNDRV_CTL_IOCTL_RAWMIDI_PREFER_SUBDEVICE(r1, 0x40045542, &(0x7f0000000b00)) syz_open_dev$dmmidi(&(0x7f0000000080), 0x200, 0x40002) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x0) 9.731893508s ago: executing program 7 (id=693): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x100, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000002c0)='./file0/file0\x00', &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 9.693308225s ago: executing program 8 (id=694): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) r3 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(r2, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000280)={0xfffffffd, 0xcbf, 0xcd3, 0x0, 0xffffffff}, 0x14) splice(r1, 0x0, r3, 0x0, 0x877f, 0xc) 9.512518425s ago: executing program 7 (id=695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r1, 0x0, 0x1ba8847c99}, 0x38) 9.463341893s ago: executing program 8 (id=697): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) unshare(0x22020400) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000180)={r1, r0, 0x5, 0x0, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x401, 0x0, 0x1, 0xffffffffffffffff}}, 0x40) 9.382319896s ago: executing program 7 (id=698): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x23, &(0x7f0000000380)=0x2, 0x4) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x28040041, &(0x7f0000000040)={0x2, 0x24e23, @loopback}, 0x10) sendmsg$inet(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000280)="1f", 0x1}], 0x1}, 0x48c0) socket$inet_udp(0x2, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) recvmmsg(r0, &(0x7f00000003c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/72, 0x48}, 0x6}], 0x41f, 0x40, 0x0) 6.36000917s ago: executing program 5 (id=702): socket$can_j1939(0x1d, 0x2, 0x7) socket$inet6_tcp(0xa, 0x1, 0x0) openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x20000, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000200)) r0 = syz_open_dev$dri(&(0x7f0000000440), 0x1, 0x48640) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r0, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r0, 0xc01064b5, &(0x7f0000000040)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_ATOMIC(r0, 0xc03864bc, &(0x7f0000000180)={0x1, 0x1, &(0x7f00000000c0)=[r1], &(0x7f0000000180), &(0x7f0000000200), 0x0, 0x0, 0x1}) 6.338964394s ago: executing program 6 (id=703): r0 = socket$nl_generic(0x10, 0x3, 0x10) modify_ldt$write2(0x11, 0x0, 0x0) r1 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x11, 0x3, &(0x7f0000000100)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x2, 0xba, &(0x7f0000000140)=""/186, 0x41100, 0x3b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffdd7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$XFS_IOC_ERROR_CLEARALL(r2, 0x40085875) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r3, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r4, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x16, 0xe, &(0x7f0000001480)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340), 0x10}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r6, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ab382844306d758e620b9dc", 0x0, 0x12c4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$RTC_UIE_ON(r1, 0x7003) ioctl$RTC_AIE_ON(r1, 0x7001) fsopen(&(0x7f0000000280)='ntfs3\x00', 0x0) close_range(r0, 0xffffffffffffffff, 0x0) r7 = syz_open_procfs(0x0, &(0x7f000001b0c0)='net/fib_trie\x00') pread64(r7, &(0x7f0000000080)=""/102356, 0x18fd4, 0xac) 6.110227342s ago: executing program 0 (id=704): socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x50a7, 0xc000, 0x0, 0x282}) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 6.110081532s ago: executing program 5 (id=705): syz_mount_image$fuse(0x0, &(0x7f0000000040)='./file0\x00', 0x20, 0x0, 0x0, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000013c0)='./file0/file0\x00', 0x42, 0x0) close(r0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x100, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) mount$9p_fd(0x0, 0x0, &(0x7f0000000200), 0x2a10413, &(0x7f0000000780)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}}) 5.234674078s ago: executing program 7 (id=706): r0 = syz_open_dev$vim2m(&(0x7f00000001c0), 0x2ffe, 0x2) syz_init_net_socket$ax25(0x3, 0x3, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0xfffffffffffffd7a, &(0x7f0000000580)=0x8000000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f0000000400), 0x0, 0x0) read$msr(r1, &(0x7f000001aa40)=""/102392, 0x18ff8) fsopen(0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000940)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000280)="ad56", 0x2) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) sendmsg$BATADV_CMD_TP_METER_CANCEL(r2, 0x0, 0x20000000) recvmsg(r2, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x28}, 0x1, 0x0, 0x0, 0x8001}, 0x4) openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x40100, 0x100) ioctl$vim2m_VIDIOC_REQBUFS(r0, 0xc0145608, &(0x7f0000000040)={0x4, 0x1, 0x4}) 5.234295848s ago: executing program 0 (id=707): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x13, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x6a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x130}, 0x94) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003b40)=[{{&(0x7f0000000240)=@generic={0x21, "1aee2c4f6843c6782466293e62d4f664c2efa8906f0d97822ac0d88ecdd9d47e182b3b523c6243022c1be9fd662325c023ac48a28ae996c41561bb7e9903c408613b4d29da0b9d5af499caa7759c17c667af8acea6dc52148f1233494efd8f08aaab6382d5e33471a107ec47df5b5312764e134c68842fd1a2078151812e"}, 0x80, &(0x7f00000009c0)=[{&(0x7f00000002c0)="f973085a6ea39ea1b25a1c6b351e11245900557d1c8e9f86bae5e5c64e50ef25afb0295d0c303850b4bff4d088bf9df67e013836e2882dad3f7698b52997f7efa9eb96f09be1c3019445927c6b2fe32d38ae2bcad2ac0d85ebd42914fb18b7d0670f8b3be16755ead6a6fb713fa618ce2cf424ea7cc84b04016b9a2afbfaf68803f1c1acb74fef", 0x87}, {&(0x7f0000000380)="82f294054d05973abfac6a6f31050418457d017c5fd68b034cf51b9f6a6d71daa5c776bca90037bc7c3d88b151fbf856f69ebd05e750f13f02af646b284953b6640a08c827c6f2ff4ad8e84077f9f03f94792aa17c4743cba3f355bb9c5b04b91ed70d253db68e17cdd561fab504479f723388dda974e2a9fb1bcda474c08d6222179b19e902009ea3cb3e42408bab6c1f29cb62d05805063967de38327e", 0x9e}, {&(0x7f0000000480)="4ce09043b6aa2ae5946f67306c7f73ed469dfcfc5e1f4d8123a4a8a7b9be82f67f89605cd9bbf7254c156b00437f753a248daf68c5ebdc4a6346d336a6502e98eae72777956d1ebeeb855fae46b3ccb9fb3d593651b95ee00afe0816b3c6e7f3cb3b18fb5198643daa6b9cafde584957dd72ba27cef6604f5df59f0bee60bca63d75a9d812eb699c2d665b7179b22027cf748ac63bcc212703d44cb083e962eee9b5d212523c162b42377ebd0bc624bf9425f6f4772e36c6c2fd4f69b65cc435f93c1a490cb75162251e15942b29", 0xce}, {&(0x7f0000000780)="8ff2f15bd0017ce4b36b6bc4335634254cffcc40c0312f5ff35991272b79d76712dc0c3cfdc0d70ce8004884e6917bed9ffee1584df7f06c7bccac71daf78bf3c68b8d5e56357654784bdbc700bceb1049c6a47d53c5ac29f83aed3ae996", 0x5e}, {&(0x7f0000000800)="5193f0b40db29d9ce06f429ed3c2c6405967f1e559f08c35f5e63ad64c2746967cca1bbeaf6206a79c42badb4fb453f294c2932cb5552a5f9c1d633207a53c2f54d98c2f9e4323eac6c20c56e7607d212b210a0325f7c289d1a2552d7a3f2176a47e95bc46471fae9167768d58f22ff10ba3cc2050b1ee838ce9e4ac5a1544fec3e291272cfaaa4817539972fb8bb2ede331312f556ecea24236759bf0d51003477ec489820505cea6045a9939974c6f2ee3815378dc0a620982383e84178b017ba52b", 0xc3}, {&(0x7f0000000900)="a9be9b2ff3a19d5a1226e5243d37d1fd2894c1ae880dc2316aa2d5ad08944c7135eb837eff354282dd5863c051eb7b9b17be0e4fdd6560f3f2c2c04af73a6cb75b5d05d6037f91e8f4f08e90d5313fb91fbdc5acd212f7d8c8", 0x59}, {&(0x7f00000000c0)}], 0x7}}, {{&(0x7f0000000a40)=@alg={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_hmac_sha256\x00'}, 0x80, &(0x7f0000000600)=[{&(0x7f0000000bc0)="61275006ed747229311198ab94c7e6699587b0d033c2f17d1ccbd45cba520b6888fbad95d4d6ae3cc7172b392f90693e992e52408ba7f1874d1767303d6acb170f216f71908f53a3be1833a25eb1fb2ba3913dcc1de30c5c7e914b13514dea44fb2b964aaa280d5a85512fede48830ca6ea5cd18ff95c871d91454240f370e0c8e2629e58605c4b29017a160709ec76547c92a21d0ec5589e228922b105d0b8b29256620c44d2118334025dedd46db5194f22b349264de22068d3d4db627db4fa827907e5bc02b69c36e94f8149f12116f75bd48aa86d41dfdf52e74b442782f530da1263fd0f699776e9459e33fe5", 0xef}], 0x1, &(0x7f0000000cc0)=[@mark={{0x14, 0x1, 0x24, 0x9a9}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @timestamping={{0x14, 0x1, 0x25, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x80}}, @txtime={{0x18, 0x1, 0x3d, 0x9d}}], 0x78}}], 0x2, 0x20000044) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'vlan1\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$WPAN_SECURITY_LEVEL(0xffffffffffffffff, 0x0, 0x2, &(0x7f0000000100)=0xfffffffe, 0x4) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f00000004c0)="2c385a7af3", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0xff31}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000dc0)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d50633008000009effffffffffff080211000001"], 0x6f4}}, 0x0) 5.234184178s ago: executing program 8 (id=708): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0600000004000000990500000a"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001340), &(0x7f0000000900), 0x404, r2, 0x0, 0x1ba8847c99}, 0x38) 5.210567062s ago: executing program 5 (id=709): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) fcntl$setsig(0xffffffffffffffff, 0xa, 0x17) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = socket$inet_tcp(0x2, 0x1, 0x0) close(r1) r2 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000340)=0x1, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x9004, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, 0x9}, 0x1c) vmsplice(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f0000001340)="e6", 0xfffffeff}], 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r1, 0x6, 0x1d, &(0x7f0000000280)={0xfffffffd, 0xcbf, 0xcd3, 0x0, 0xffffffff}, 0x14) splice(0xffffffffffffffff, 0x0, r2, 0x0, 0x877f, 0xc) 4.784114903s ago: executing program 0 (id=710): prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000200), 0x140, 0x0) ioctl$RTC_SET_TIME(r3, 0x4024700a, &(0x7f0000000040)={0x2c, 0x3, 0x0, 0x2, 0xb, 0x63, 0x5, 0xc5, 0x1}) 4.783945103s ago: executing program 5 (id=711): mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xfc778000) getpriority(0x2, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000001c0)=0x5) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) 2.127894036s ago: executing program 0 (id=712): r0 = syz_mount_image$btrfs(&(0x7f0000000000), &(0x7f00000015c0)='./file0\x00', 0x0, &(0x7f0000001600), 0x0, 0x559e, &(0x7f0000005680)="$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") ioctl$BTRFS_IOC_SPACE_INFO(r0, 0xc0109414, &(0x7f000000ac80)={0x0, 0xf0000000000}) 2.126877576s ago: executing program 6 (id=713): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f00000022c0)={0x1a, {"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", 0x1000}}, 0x1006) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/crypto\x00', 0x0, 0x0) sendfile(r0, r4, 0x0, 0x20000023893) ioctl$OCFS2_IOC_MOVE_EXT(0xffffffffffffffff, 0x40406f06, &(0x7f0000000080)={0x204, 0x65, 0x9, 0x200, 0x2}) 797.154157ms ago: executing program 5 (id=714): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)={0x14, r1, 0x30d, 0x0, 0x25dfdbfc}, 0x14}}, 0x800) 86.880496ms ago: executing program 6 (id=715): prlimit64(0x0, 0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r0 = memfd_create(&(0x7f0000000000)='\xf3e\t\x9f\x918\xc0y\x01c\x1fnux\x00sV\ad\xb0l \xfd\xd7\x8e\x7f\x89\xb8\xc5;~\x04\x03~K\xfbP\x84=\xfa\x81\f\x1et\x10\x0e\xcf^9\xbe\\', 0x0) pwrite64(r0, &(0x7f00000008c0)='/', 0x1, 0x0) mmap(&(0x7f0000001000/0x1000)=nil, 0x1000, 0x4, 0x11, r0, 0x0) lseek(r0, 0x0, 0x4) sendfile(r0, r0, &(0x7f00000001c0), 0x7fa) symlink(&(0x7f0000001000)='./file0\x00', &(0x7f00000000c0)='./file0\x00') faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x7, 0x0) 0s ago: executing program 5 (id=716): r0 = socket$igmp(0x2, 0x3, 0x2) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(r0, 0x0, 0xc8, &(0x7f0000000100), 0x4) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000003d80)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000000c0)={0x8, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) setsockopt$inet_mreq(r1, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x42, &(0x7f0000000040)={@local, @multicast, @void, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x34, 0x0, 0x0, 0x80, 0x2, 0x0, @empty, @multicast1=0xe0000300, {[@generic={0x88, 0x2}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x3, 0xc58, {0x5, 0x4, 0x0, 0x7, 0x0, 0x65, 0xe, 0x4e, 0x24, 0xc, @empty, @dev={0xac, 0x14, 0x14, 0x44}}}}}}}, 0x0) setsockopt$MRT_ADD_MFC_PROXY(r2, 0x0, 0xd2, &(0x7f0000000200)={@empty, @multicast2=0xe0000300, 0x0, "028a3f6c58b274e6d8451697efe428116085f06e9264f7d866b1970548fc3c7b", 0xb2, 0xffffeff7, 0x40, 0x40000006}, 0x3c) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xe, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb=0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) kernel console output (not intermixed with test programs): address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.535175][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.545532][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.556544][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.568047][ T4188] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.578575][ T4188] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.589664][ T4188] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.615605][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 66.624806][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 66.635127][ T4192] device veth0_vlan entered promiscuous mode [ 66.647997][ T4188] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.657774][ T4188] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.666991][ T4188] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.675800][ T4188] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.692351][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.713279][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.734630][ T4192] device veth1_vlan entered promiscuous mode [ 66.756606][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 66.764779][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 66.865244][ T4192] device veth0_macvtap entered promiscuous mode [ 66.892321][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 66.915103][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 66.939583][ T4192] device veth1_macvtap entered promiscuous mode [ 67.001121][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.019632][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.104615][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.128241][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.130112][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.148104][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.158632][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.169623][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.182381][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.197869][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.211123][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.229431][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.596866][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.017800][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.057106][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.071333][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.082284][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.092416][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.103555][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.113991][ T4192] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.125015][ T4192] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.139479][ T4192] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.151927][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.244927][ T4273] loop1: detected capacity change from 0 to 512 [ 68.259432][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.273784][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.286502][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.315739][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.608602][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.660915][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.038721][ T4254] Bluetooth: hci0: command 0x0419 tx timeout [ 69.048962][ T4254] Bluetooth: hci1: command 0x0419 tx timeout [ 69.054108][ T4192] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.055642][ T4254] Bluetooth: hci2: command 0x0419 tx timeout [ 69.071886][ T4254] Bluetooth: hci3: command 0x0419 tx timeout [ 69.078029][ T4254] Bluetooth: hci4: command 0x0419 tx timeout [ 69.111101][ T4192] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.120880][ T4192] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.130462][ T4192] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.142518][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.203638][ T4276] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.212531][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.235908][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.243592][ T4276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.268253][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.348904][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.478419][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.517476][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.552898][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.591300][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.613551][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.629687][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.875724][ T4297] device erspan0 entered promiscuous mode [ 70.922868][ T4304] loop3: detected capacity change from 0 to 512 [ 71.057067][ T4304] ======================================================= [ 71.057067][ T4304] WARNING: The mand mount option has been deprecated and [ 71.057067][ T4304] and is ignored by this kernel. Remove the mand [ 71.057067][ T4304] option from the mount to silence this warning. [ 71.057067][ T4304] ======================================================= [ 71.836091][ T4257] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 71.985551][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.999360][ T4318] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 72.023691][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.073120][ T4319] loop3: detected capacity change from 0 to 16 [ 72.216320][ T4257] usb 3-1: not running at top speed; connect to a high speed hub [ 72.316671][ T4257] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 251, changing to 4 [ 72.340249][ T4327] loop1: detected capacity change from 0 to 512 [ 72.369495][ T4319] loop3: detected capacity change from 0 to 512 [ 73.321909][ T4330] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.344737][ T4319] EXT4-fs (loop3): Ignoring removed nobh option [ 73.392638][ T4327] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 73.416526][ T4257] usb 3-1: New USB device found, idVendor=041e, idProduct=3000, bcdDevice= 0.40 [ 73.437913][ T4257] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 73.458558][ T4319] EXT4-fs (loop3): mounted filesystem without journal. Opts: grpquota,nogrpid,quota,nobh,,errors=continue. Quota mode: writeback. [ 73.510674][ T4257] usb 3-1: Product: syz [ 73.514994][ T4257] usb 3-1: Manufacturer: syz [ 73.517530][ T4319] ext4 filesystem being mounted at /2/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 73.520180][ T4257] usb 3-1: SerialNumber: syz [ 73.561595][ T4327] EXT4-fs (loop1): re-mounted. Opts: (null). Quota mode: writeback. [ 73.591376][ T4319] overlayfs: metacopy with no lower data found - abort lookup (/file1) [ 73.617295][ T4319] overlayfs: failed to look up (file1) for ino (-5) [ 73.862484][ T4344] loop1: detected capacity change from 0 to 128 [ 73.904182][ T4346] netlink: 12 bytes leftover after parsing attributes in process `syz.0.28'. [ 73.917307][ T4257] usb 3-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 73.949442][ T4257] usb 3-1: unit 6 not found! [ 73.963188][ T4257] usb 3-1: unit 64 not found! [ 74.057934][ T4352] loop3: detected capacity change from 0 to 2048 [ 74.092289][ T4257] usb 3-1: USB disconnect, device number 2 [ 74.108541][ T3561] loop3: p3 < > p4 < > [ 74.112971][ T3561] loop3: partition table partially beyond EOD, truncated [ 74.143879][ T4355] loop0: detected capacity change from 0 to 256 [ 74.155121][ T3561] loop3: p3 start 4284289 is beyond EOD, truncated [ 74.183262][ T4352] loop3: p3 < > p4 < > [ 74.187914][ T4352] loop3: partition table partially beyond EOD, truncated [ 74.195499][ T4352] loop3: p3 start 4284289 is beyond EOD, truncated [ 74.249777][ T4348] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 74.256339][ T4355] exFAT-fs (loop0): failed to load upcase table (idx : 0x0001e4a3, chksum : 0xe65d9f0a, utbl_chksum : 0x7319d30d) [ 74.270813][ T4348] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 74.447368][ T4344] EXT4-fs (loop1): Test dummy encryption mode enabled [ 75.133713][ T4344] EXT4-fs (loop1): mounted filesystem without journal. Opts: discard,dioread_lock,test_dummy_encryption,,errors=continue. Quota mode: none. [ 75.198540][ T3561] loop3: p3 < > p4 < > [ 75.202884][ T3561] loop3: partition table partially beyond EOD, truncated [ 75.239799][ T4364] loop2: detected capacity change from 0 to 1024 [ 75.267828][ T4344] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 75.290200][ T3561] loop3: p3 start 4284289 is beyond EOD, truncated [ 75.401179][ T4370] loop4: detected capacity change from 0 to 512 [ 75.403887][ T4364] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 75.535915][ T4370] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.559820][ T4370] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 75.578426][ T4364] EXT4-fs error (device loop2): ext4_mb_mark_diskspace_used:3885: comm syz.2.31: Allocating blocks 497-513 which overlap fs metadata [ 75.601507][ T4344] fscrypt (loop1): Missing crypto API support for AES-256-XTS (API name: "xts(aes)") [ 75.614369][ T4370] EXT4-fs error (device loop4): ext4_orphan_get:1426: comm syz.4.32: bad orphan inode 131083 [ 75.677816][ T4370] EXT4-fs (loop4): mounted filesystem without journal. Opts: stripe=0x000000000000003d,init_itable,mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: none. [ 75.696295][ T4363] EXT4-fs (loop2): pa ffff888074678540: logic 0, phys. 129, len 24 [ 75.704562][ T4363] EXT4-fs error (device loop2): ext4_mb_release_inode_pa:4902: group 0, free 0, pa_free 1 [ 75.837751][ T4192] EXT4-fs error (device loop4): ext4_inlinedir_to_tree:1457: inode #12: block 7: comm syz-executor: path /3/bus: bad entry in directory: rec_len % 4 != 0 - offset=65555, inode=1560281102, rec_len=65535, size=60 fake=0 [ 75.891578][ T4177] udevd[4177]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 76.242230][ T4176] udevd[4176]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.381836][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.451475][ T4398] loop2: detected capacity change from 0 to 512 [ 76.518738][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop3p4, 10) failed: No such file or directory [ 76.561564][ T4400] loop1: detected capacity change from 0 to 256 [ 76.634848][ T4398] EXT4-fs (loop2): 1 orphan inode deleted [ 76.687853][ T4400] exFAT-fs (loop1): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x5bae174d, utbl_chksum : 0xe619d30d) [ 76.778562][ T4408] loop3: detected capacity change from 0 to 512 [ 76.779679][ T4398] EXT4-fs (loop2): mounted filesystem without journal. Opts: mb_optimize_scan=0x0000000000000001,,errors=continue. Quota mode: writeback. [ 76.786658][ T4400] exFAT-fs (loop1): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 76.876571][ T4398] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 76.920502][ T4408] EXT4-fs (loop3): Ignoring removed oldalloc option [ 76.955946][ T4408] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 77.012289][ T4408] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.43: invalid indirect mapped block 4294967295 (level 0) [ 77.154458][ T4408] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #16: comm syz.3.43: invalid indirect mapped block 4294967295 (level 1) [ 77.286706][ T4408] EXT4-fs (loop3): 1 orphan inode deleted [ 77.292595][ T4408] EXT4-fs (loop3): 1 truncate cleaned up [ 77.347758][ T4408] EXT4-fs (loop3): mounted filesystem without journal. Opts: oldalloc,lazytime,jqfmt=vfsv1,block_validity,nojournal_checksum,mblk_io_submit,jqfmt=vfsv0,,errors=continue. Quota mode: none. [ 77.517888][ T4408] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 78.148306][ T26] audit: type=1800 audit(1775920140.335:2): pid=4400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.40" name="file1" dev="loop1" ino=1048590 res=0 errno=0 [ 78.171277][ T4400] attempt to access beyond end of device [ 78.171277][ T4400] loop1: rw=34817, want=304, limit=256 [ 78.259298][ T4417] chnl_net:caif_netlink_parms(): no params data found [ 78.501722][ T4417] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.511386][ T4417] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.522654][ T4439] loop1: detected capacity change from 0 to 256 [ 78.530505][ T4417] device bridge_slave_0 entered promiscuous mode [ 78.540098][ T4417] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.547736][ T4417] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.556334][ T4417] device bridge_slave_1 entered promiscuous mode [ 78.586513][ T4417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.607716][ T4417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.687181][ T4439] FAT-fs (loop1): Unrecognized mount option "./file0" or missing value [ 78.751376][ T4417] team0: Port device team_slave_0 added [ 78.882927][ T4417] team0: Port device team_slave_1 added [ 78.975495][ T4417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.982979][ T4417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.033413][ T4417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.258264][ T4442] 9pnet: p9_fd_create_tcp (4442): problem connecting socket to 127.0.0.1 [ 79.296607][ T4442] loop1: detected capacity change from 0 to 256 [ 79.690237][ T4417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.763649][ T4417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.064516][ T4417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.285826][ C0] sched: RT throttling activated [ 80.317491][ T4226] Bluetooth: hci3: command 0x0409 tx timeout [ 80.630954][ T4417] device hsr_slave_0 entered promiscuous mode [ 80.711728][ T4417] device hsr_slave_1 entered promiscuous mode [ 80.733058][ T4417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 80.761987][ T4417] Cannot create hsr debugfs directory [ 80.840191][ T154] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 80.976295][ T154] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.046874][ T154] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.118748][ T4225] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 81.143958][ T154] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 81.375920][ T4225] usb 2-1: Using ep0 maxpacket: 16 [ 81.496315][ T4225] usb 2-1: config 1 interface 0 altsetting 255 endpoint 0x1 has invalid wMaxPacketSize 0 [ 81.507463][ T4225] usb 2-1: config 1 interface 0 altsetting 255 bulk endpoint 0x1 has invalid maxpacket 0 [ 81.533345][ T4417] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 81.581858][ T4225] usb 2-1: config 1 interface 0 altsetting 255 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 81.625906][ T4225] usb 2-1: config 1 interface 0 has no altsetting 0 [ 81.648656][ T4417] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 81.670228][ T13] cfg80211: failed to load regulatory.db [ 81.688146][ T4417] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 81.733516][ T4417] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 81.786826][ T4225] usb 2-1: New USB device found, idVendor=0521, idProduct=b1a8, bcdDevice= 0.40 [ 81.805773][ T4225] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 81.853449][ T4225] usb 2-1: Product: syz [ 81.857849][ T4225] usb 2-1: Manufacturer: syz [ 81.864805][ T4225] usb 2-1: SerialNumber: syz [ 83.078491][ T4228] Bluetooth: hci3: command 0x041b tx timeout [ 83.177586][ T4417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.272988][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 83.285104][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 83.292707][ T4225] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 2 if 0 alt 255 proto 1 vid 0x0521 pid 0xB1A8 [ 83.367076][ T4417] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.428973][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 83.516521][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 83.579048][ T4449] loop1: detected capacity change from 0 to 256 [ 83.588182][ T3044] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.595391][ T3044] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.662278][ T4449] exfat: Bad value for 'uid' [ 83.695739][ T4454] loop3: detected capacity change from 0 to 40427 [ 83.705715][ T7] kernel write not supported for file /usb/lp0 (pid: 7 comm: kworker/0:0) [ 83.746193][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 83.754299][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 83.774357][ T13] usb 2-1: USB disconnect, device number 2 [ 83.816623][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 83.879686][ T4454] F2FS-fs (loop3): invalid crc value [ 83.891336][ T3044] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.898720][ T3044] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.924548][ T4461] loop2: detected capacity change from 0 to 131072 [ 83.935079][ T13] usblp0: removed [ 83.958077][ T4454] F2FS-fs (loop3): Found nat_bits in checkpoint [ 84.013387][ T4461] F2FS-fs (loop2): invalid crc value [ 84.044516][ T4461] F2FS-fs (loop2): Found nat_bits in checkpoint [ 84.098531][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 84.111859][ T4461] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e5 [ 84.227586][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 84.271599][ T4454] F2FS-fs (loop3): Inconsistent segment (8) type [1, 0] in SSA and SIT [ 84.452505][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 84.467190][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 84.525963][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 84.596945][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 84.640503][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 84.688046][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 84.739555][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 84.858630][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 84.923963][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 84.978393][ T4417] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 85.186420][ T4226] Bluetooth: hci3: command 0x040f tx timeout [ 85.246348][ T4493] process 'syz.3.62' launched './file1' with NULL argv: empty string added [ 85.689884][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 85.698267][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 85.747447][ T4417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.838568][ T4225] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 86.216393][ T4225] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 27 [ 86.257253][ T4225] usb 4-1: New USB device found, idVendor=28bd, idProduct=0074, bcdDevice= 0.00 [ 86.305666][ T4483] loop1: detected capacity change from 0 to 40427 [ 86.325997][ T4225] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 86.360903][ T4225] usb 4-1: config 0 descriptor?? [ 86.394355][ T4483] F2FS-fs (loop1): invalid crc value [ 86.442271][ T4483] F2FS-fs (loop1): Disable nat_bits due to incorrect cp_ver (10241045589465957861, 10241044815247771109) [ 86.454899][ T154] device hsr_slave_0 left promiscuous mode [ 86.463196][ T154] device hsr_slave_1 left promiscuous mode [ 86.487242][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.516101][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 86.546366][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.565561][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 86.619212][ T154] device bridge_slave_1 left promiscuous mode [ 86.626979][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.691515][ T154] device bridge_slave_0 left promiscuous mode [ 86.706089][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.718372][ T4483] F2FS-fs (loop1): Start checkpoint disabled! [ 86.748684][ T4483] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e7 [ 86.767499][ T154] device veth1_macvtap left promiscuous mode [ 86.805596][ T154] device veth0_macvtap left promiscuous mode [ 86.884437][ T4524] loop2: detected capacity change from 0 to 256 [ 86.905319][ T154] device veth1_vlan left promiscuous mode [ 86.965236][ T4524] exfat: Deprecated parameter 'utf8' [ 86.980459][ T4225] uclogic 0003:28BD:0074.0001: interface is invalid, ignoring [ 86.981121][ T154] device veth0_vlan left promiscuous mode [ 87.042120][ T4524] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe3908169, utbl_chksum : 0xe619d30d) [ 87.183087][ T4226] usb 4-1: USB disconnect, device number 2 [ 87.268785][ T1110] Bluetooth: hci3: command 0x0419 tx timeout [ 87.405337][ T4530] loop2: detected capacity change from 0 to 256 [ 87.450226][ T4530] exfat: Deprecated parameter 'utf8' [ 87.473458][ T4530] exfat: Deprecated parameter 'utf8' [ 87.519504][ T4530] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 87.853771][ T4533] loop3: detected capacity change from 0 to 2048 [ 87.942163][ T4536] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3062664160 (49002626560 ns) > initial count (27763811216 ns). Using initial count to start timer. [ 88.054607][ T154] team0 (unregistering): Port device team_slave_1 removed [ 88.104929][ T154] team0 (unregistering): Port device team_slave_0 removed [ 88.221693][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.376389][ T4225] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 88.846929][ T4225] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 88.886852][ T4225] usb 3-1: config 0 has no interfaces? [ 88.892790][ T4225] usb 3-1: New USB device found, idVendor=1908, idProduct=1315, bcdDevice= 0.00 [ 88.977527][ T4225] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 89.077883][ T4225] usb 3-1: config 0 descriptor?? [ 89.191109][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 89.411957][ T154] bond0 (unregistering): Released all slaves [ 89.428980][ T23] usb 3-1: USB disconnect, device number 3 [ 89.578944][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 89.594571][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 89.675664][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 89.697083][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 89.727639][ T4417] device veth0_vlan entered promiscuous mode [ 89.738615][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 89.756985][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 89.801704][ T4417] device veth1_vlan entered promiscuous mode [ 89.984421][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 90.064692][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 90.116663][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 90.137785][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 90.144027][ T4557] loop3: detected capacity change from 0 to 1024 [ 90.159681][ T4417] device veth0_macvtap entered promiscuous mode [ 90.210513][ T4417] device veth1_macvtap entered promiscuous mode [ 90.258835][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.289992][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.320868][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.339495][ T4557] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 90.368597][ T23] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 90.380085][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.406093][ T4557] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 90.433624][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.475761][ T4557] EXT4-fs error (device loop3): ext4_validate_block_bitmap:438: comm syz.3.74: bg 0: block 112: padding at end of block bitmap is not set [ 90.557196][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.581144][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.616833][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.669013][ T4417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.678014][ T4276] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 3: comm kworker/u4:7: lblock 3 mapped to illegal pblock 3 (length 3) [ 90.712609][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 90.731222][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 90.743852][ T4276] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 90.766506][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 90.786466][ T23] usb 3-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 39, changing to 7 [ 90.792009][ T4276] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.792009][ T4276] [ 90.817283][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 90.825961][ T23] usb 3-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 7 [ 90.828366][ T4276] EXT4-fs error (device loop3): ext4_map_blocks:739: inode #15: block 8: comm kworker/u4:7: lblock 8 mapped to illegal pblock 8 (length 5) [ 90.877768][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.892589][ T4276] EXT4-fs (loop3): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 90.914157][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.944098][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.955905][ T4276] EXT4-fs (loop3): This should not happen!! Data will be lost [ 90.955905][ T4276] [ 90.964850][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.007340][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.027033][ T23] usb 3-1: New USB device found, idVendor=1235, idProduct=4661, bcdDevice= 0.40 [ 91.037205][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.047345][ T23] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 91.055384][ T23] usb 3-1: Product: syz [ 91.055863][ T4417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 91.082125][ T23] usb 3-1: Manufacturer: syz [ 91.090696][ T4417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 91.101526][ T23] usb 3-1: SerialNumber: syz [ 91.114501][ T4417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.128299][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 91.144148][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 91.207490][ T4417] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.253925][ T4417] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.274269][ T4417] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.294438][ T4417] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.294593][ T4571] loop3: detected capacity change from 0 to 128 [ 91.465987][ T4571] EXT4-fs (loop3): mounting ext2 file system using the ext4 subsystem [ 91.496056][ T23] usb 3-1: Can't get UAC3 power state for id 10 [ 91.531782][ T4571] EXT4-fs (loop3): mounted filesystem without journal. Opts: minixdf,,errors=continue. Quota mode: none. [ 91.556115][ T23] usb 3-1: 2:1 : incorrect wMaxPacketSize for BADD profile [ 91.586028][ T23] usb 3-1: 0:3 : does not exist [ 91.590955][ T23] usb 3-1: 0:4 : does not exist [ 91.596423][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.604270][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.605943][ T23] usb 3-1: incorrect wMaxPacketSize 0x200 for BADD profile [ 91.706182][ T4571] ext2 filesystem being mounted at /18/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 91.727296][ T23] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 91.744942][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 91.781666][ T23] usb 3-1: USB disconnect, device number 4 [ 91.790228][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.792840][ T4580] loop0: detected capacity change from 0 to 512 [ 91.811652][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.870760][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 91.916506][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 92.009977][ T4580] EXT4-fs (loop0): 1 truncate cleaned up [ 92.015690][ T4580] EXT4-fs (loop0): mounted filesystem without journal. Opts: noload,stripe=0x000000000000030c,jqfmt=vfsv1,nojournal_checksum,nojournal_checksum,usrjquota=,,errors=continue. Quota mode: none. [ 92.150933][ T4587] loop5: detected capacity change from 0 to 512 [ 92.162817][ T4580] EXT4-fs warning (device loop0): ext4_group_add:1696: No reserved GDT blocks, can't resize [ 92.237928][ T4587] EXT4-fs (loop5): Ignoring removed nobh option [ 92.244244][ T4587] EXT4-fs (loop5): Ignoring removed mblk_io_submit option [ 92.321750][ T4587] EXT4-fs (loop5): orphan cleanup on readonly fs [ 92.346166][ T4587] EXT4-fs (loop5): Cannot turn on journaled quota: type 0: error -13 [ 92.454568][ T4587] EXT4-fs error (device loop5): ext4_clear_blocks:883: inode #13: comm syz.5.44: attempt to clear invalid blocks 2 len 1 [ 92.502118][ T4596] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 92.542422][ T4587] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 92.686262][ T4587] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.44: invalid indirect mapped block 1819239214 (level 0) [ 92.791217][ T4587] EXT4-fs error (device loop5): ext4_free_branches:1030: inode #13: comm syz.5.44: invalid indirect mapped block 1819239214 (level 1) [ 92.836309][ T4606] binder: 4605:4606 ioctl c0306201 200000004a40 returned -14 [ 92.943681][ T4587] EXT4-fs (loop5): 1 truncate cleaned up [ 92.975764][ T4587] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodioread_nolock,nobh,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 93.139443][ T4587] EXT4-fs (loop5): shut down requested (2) [ 94.136057][ T1110] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 94.175482][ T4625] loop2: detected capacity change from 0 to 256 [ 94.519818][ T4632] loop2: detected capacity change from 0 to 2048 [ 94.526705][ T1110] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 94.535443][ T1110] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 94.607778][ T1110] usb 6-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1024 [ 94.628668][ T4632] EXT4-fs (loop2): Journaled quota options ignored when QUOTA feature is enabled [ 94.655869][ T1110] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 107, setting to 64 [ 94.742469][ T4632] EXT4-fs (loop2): mounted filesystem without journal. Opts: usrjquota=./file1,noauto_da_alloc,bsddf,,errors=continue. Quota mode: writeback. [ 94.857144][ T4632] ext4 filesystem being mounted at /23/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 94.935111][ T4632] fs-verity: sha256 using implementation "sha256-avx2" [ 94.946491][ T1110] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 94.955667][ T1110] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 94.994228][ T1110] usb 6-1: Product: syz [ 95.013098][ T1110] usb 6-1: Manufacturer: syz [ 95.025921][ T1110] usb 6-1: SerialNumber: syz [ 95.117440][ T1110] cdc_mbim 6-1:1.0: skipping garbage [ 95.122989][ T1110] cdc_mbim 6-1:1.0: skipping garbage [ 95.322616][ T4620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 95.350153][ T4649] uffd: Set unprivileged_userfaultfd sysctl knob to 1 if kernel faults must be handled without obtaining CAP_SYS_PTRACE capability [ 95.786176][ T7] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 96.037710][ T4620] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 96.143221][ T4643] loop0: detected capacity change from 0 to 40427 [ 96.229920][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.261184][ T4643] F2FS-fs (loop0): invalid crc value [ 96.272795][ T7] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 96.283494][ T1110] cdc_mbim 6-1:1.0: bind() failure [ 96.328345][ T4643] F2FS-fs (loop0): Found nat_bits in checkpoint [ 96.359694][ T7] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 96.373136][ T1110] cdc_ncm: probe of 6-1:1.1 failed with error -71 [ 96.413615][ T7] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 96.423917][ T1110] cdc_mbim: probe of 6-1:1.1 failed with error -71 [ 96.446126][ T7] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.460471][ T1110] usbtest: probe of 6-1:1.1 failed with error -71 [ 96.498204][ T1110] usb 6-1: USB disconnect, device number 2 [ 96.511356][ T4643] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 96.516408][ T7] usb 3-1: config 0 descriptor?? [ 97.050165][ T7] plantronics 0003:047F:FFFF.0002: No inputs registered, leaving [ 97.053232][ T4677] loop1: detected capacity change from 0 to 512 [ 97.097113][ T7] plantronics 0003:047F:FFFF.0002: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 97.239793][ T4682] loop5: detected capacity change from 0 to 2048 [ 97.266049][ T4677] EXT4-fs (loop1): mounted filesystem without journal. Opts: nodioread_nolock,noload,,errors=continue. Quota mode: writeback. [ 97.289005][ T4388] loop5: p3 < > p4 < > [ 97.293326][ T4388] loop5: partition table partially beyond EOD, truncated [ 97.347230][ T4677] ext4 filesystem being mounted at /17/file2 supports timestamps until 2038-01-19 (0x7fffffff) [ 97.363872][ T4388] loop5: p3 start 4284289 is beyond EOD, truncated [ 97.422358][ T4682] loop5: p3 < > p4 < > [ 97.426844][ T4682] loop5: partition table partially beyond EOD, truncated [ 97.434125][ T4682] loop5: p3 start 4284289 is beyond EOD, truncated [ 98.785262][ T7] usb 3-1: reset high-speed USB device number 5 using dummy_hcd [ 98.843051][ T4698] loop2: detected capacity change from 0 to 512 [ 98.878623][ T4696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.96'. [ 98.987087][ T4698] EXT4-fs (loop2): mounted filesystem without journal. Opts: nouid32,norecovery,bsdgroups,,errors=continue. Quota mode: writeback. [ 99.026149][ T4696] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.062653][ T4698] ext4 filesystem being mounted at /25/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 99.132966][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 99.237834][ T26] audit: type=1800 audit(1775920161.425:3): pid=4715 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.98" name="file1" dev="loop2" ino=15 res=0 errno=0 [ 99.297621][ T4696] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.303193][ T4393] udevd[4393]: inotify_add_watch(7, /dev/loop5p4, 10) failed: No such file or directory [ 99.490686][ T4718] Illegal XDP return value 4294967294, expect packet loss! [ 99.532582][ T4190] attempt to access beyond end of device [ 99.532582][ T4190] loop0: rw=2049, want=45104, limit=40427 [ 99.714861][ T13] usb 3-1: USB disconnect, device number 5 [ 99.827723][ T4732] loop2: detected capacity change from 0 to 128 [ 99.944124][ T4723] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 99.953041][ T4732] FAT-fs (loop2): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 99.975986][ T4723] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 100.014787][ T4732] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 100.406160][ T4276] FAT-fs (loop2): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 101.933606][ T4773] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 102.346015][ T4225] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 102.776423][ T4225] usb 6-1: unable to get BOS descriptor or descriptor too short [ 102.806347][ T4786] loop1: detected capacity change from 0 to 4096 [ 102.913734][ T4786] EXT4-fs (loop1): Ignoring removed nomblk_io_submit option [ 103.011453][ T4786] EXT4-fs (loop1): mounted filesystem without journal. Opts: init_itable=0x0000000000000101,stripe=0x0000000000000061,journal_ioprio=0x0000000000000006,minixdf,nodiscard,nomblk_io_submit,acl,nojournal_checksum,resuid=0x0000000000000000,,errors=continue. Quota mode: writeback. [ 103.040328][ T4225] usb 6-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 103.064776][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 103.083637][ T4225] usb 6-1: Product: syz [ 103.088244][ T4225] usb 6-1: Manufacturer: syz [ 103.092920][ T4225] usb 6-1: SerialNumber: syz [ 103.968511][ T4225] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 104.285441][ T4225] usb 6-1: USB disconnect, device number 3 [ 104.436682][ T4393] udevd[4393]: setting owner of /dev/snd/controlC3 to uid=0, gid=29 failed: No such file or directory [ 104.484090][ T4821] loop0: detected capacity change from 0 to 128 [ 104.619584][ T4827] loop8: detected capacity change from 0 to 7 [ 104.684297][ T4827] Dev loop8: unable to read RDB block 7 [ 104.693949][ T4827] loop8: unable to read partition table [ 104.720485][ T4827] loop8: partition table beyond EOD, truncated [ 104.778622][ T4828] loop_set_block_size: loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) has still dirty pages (nrpages=1) [ 104.778704][ T4827] loop_reread_partitions: partition scan of loop8 (Cj̖P=ý?}X %`ր{֐ȵ4FLQk݊) failed (rc=-5) [ 104.788039][ T4832] 9pnet: Insufficient options for proto=fd [ 105.456093][ T13] usb 3-1: new full-speed USB device number 6 using dummy_hcd [ 105.722367][ T4857] loop1: detected capacity change from 0 to 512 [ 105.900710][ T4857] EXT4-fs (loop1): error: journal path ./file1 is not a block device [ 106.776158][ T13] usb 3-1: unable to get BOS descriptor or descriptor too short [ 107.650180][ T13] usb 3-1: not running at top speed; connect to a high speed hub [ 107.679973][ T4867] loop5: detected capacity change from 0 to 8192 [ 107.769808][ T13] usb 3-1: config 3 has an invalid interface number: 68 but max is 1 [ 107.788819][ T13] usb 3-1: config 3 has an invalid interface number: 2 but max is 1 [ 107.854677][ T13] usb 3-1: config 3 has no interface number 0 [ 107.891329][ T13] usb 3-1: config 3 has no interface number 1 [ 107.901703][ T13] usb 3-1: config 3 interface 68 has no altsetting 0 [ 107.910254][ T4876] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 1042) [ 107.966221][ T4876] FAT-fs (loop5): Filesystem has been set read-only [ 108.183403][ T4881] loop0: detected capacity change from 0 to 512 [ 108.189945][ T13] usb 3-1: string descriptor 0 read error: -71 [ 108.460341][ T4881] EXT4-fs (loop0): Ignoring removed nobh option [ 108.506089][ T4881] EXT4-fs (loop0): Ignoring removed mblk_io_submit option [ 108.625351][ T4881] EXT4-fs (loop0): orphan cleanup on readonly fs [ 108.662660][ T4881] EXT4-fs (loop0): Cannot turn on journaled quota: type 0: error -13 [ 108.728822][ T4881] EXT4-fs error (device loop0): ext4_clear_blocks:883: inode #13: comm syz.0.138: attempt to clear invalid blocks 2 len 1 [ 108.826314][ T4881] EXT4-fs error (device loop0): ext4_mb_generate_buddy:1161: group 0, block bitmap and bg descriptor inconsistent: 218 vs 220 free clusters [ 108.936239][ T4881] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.138: invalid indirect mapped block 1819239214 (level 0) [ 109.039421][ T4881] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #13: comm syz.0.138: invalid indirect mapped block 1819239214 (level 1) [ 109.122284][ T4881] EXT4-fs (loop0): 1 truncate cleaned up [ 109.145980][ T4881] EXT4-fs (loop0): mounted filesystem without journal. Opts: nodioread_nolock,nobh,mblk_io_submit,minixdf,jqfmt=vfsv0,usrjquota=..,errors=continue. Quota mode: writeback. [ 109.226047][ T4225] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 109.312885][ T4881] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.138: bad entry in directory: rec_len % 4 != 0 - offset=108, inode=4294901777, rec_len=65535, size=1024 fake=0 [ 109.418390][ T13] usb 3-1: New USB device found, idVendor=1b3d, idProduct=016e, bcdDevice=15.32 [ 109.427656][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.466300][ T4225] usb 6-1: Using ep0 maxpacket: 32 [ 109.586059][ T4225] usb 6-1: config 0 has an invalid interface number: 67 but max is 0 [ 109.606756][ T4235] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.635973][ T4225] usb 6-1: config 0 has no interface number 0 [ 109.826057][ T4225] usb 6-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 109.861823][ T4225] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 109.903392][ T4888] chnl_net:caif_netlink_parms(): no params data found [ 109.915905][ T4225] usb 6-1: Product: syz [ 109.920118][ T4225] usb 6-1: Manufacturer: syz [ 109.983477][ T4225] usb 6-1: SerialNumber: syz [ 110.052696][ T4225] usb 6-1: config 0 descriptor?? [ 110.054326][ T13] usb 3-1: can't set config #3, error -71 [ 110.065971][ T13] usb 3-1: USB disconnect, device number 6 [ 110.156832][ T4225] smsc95xx v2.0.0 [ 110.165134][ T4888] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.183956][ T4888] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.390880][ T4888] device bridge_slave_0 entered promiscuous mode [ 110.687438][ T4888] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.757054][ T4888] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.816583][ T4888] device bridge_slave_1 entered promiscuous mode [ 110.935381][ T4888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.944898][ T21] Bluetooth: hci1: command 0x0409 tx timeout [ 111.036858][ T4235] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.104706][ T4888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 111.174650][ T4235] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.191819][ T4919] binder: 4917:4919 ioctl c0306201 200000004a40 returned -14 [ 111.208689][ T4888] team0: Port device team_slave_0 added [ 111.230041][ T4888] team0: Port device team_slave_1 added [ 111.272168][ T4235] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.324957][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.341116][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.401208][ T4888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.435926][ T4888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.460991][ T4888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.523938][ T4888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.654341][ T4888] device hsr_slave_0 entered promiscuous mode [ 111.674383][ T4888] device hsr_slave_1 entered promiscuous mode [ 111.706114][ T4888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.744252][ T4888] Cannot create hsr debugfs directory [ 111.776074][ T4225] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 111.812730][ T4225] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 112.242482][ T4888] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 112.253111][ T4888] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 112.264208][ T4888] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 112.311609][ T4888] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 112.318360][ T4947] loop2: detected capacity change from 0 to 256 [ 112.336907][ T4947] exfat: Unknown parameter '0x000000000000000000000000000000000000' [ 112.443895][ T4888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 112.473195][ T4888] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.515727][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 112.537119][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 112.564051][ T1107] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 112.600196][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 112.613994][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 112.623645][ T4362] bridge0: port 1(bridge_slave_0) entered blocking state [ 112.630769][ T4362] bridge0: port 1(bridge_slave_0) entered forwarding state [ 112.643387][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 112.706395][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 112.724164][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 112.752899][ T4860] bridge0: port 2(bridge_slave_1) entered blocking state [ 112.760077][ T4860] bridge0: port 2(bridge_slave_1) entered forwarding state [ 112.780773][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 112.843061][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 112.864069][ T1107] usb 2-1: Using ep0 maxpacket: 16 [ 112.884306][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 112.895369][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 112.965974][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 112.976174][ T4225] smsc95xx 6-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000020: -71 [ 112.987765][ T1107] usb 2-1: config index 0 descriptor too short (expected 51443, got 18) [ 112.996856][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 113.006981][ T4225] smsc95xx: probe of 6-1:0.67 failed with error -71 [ 113.014516][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 113.043111][ T4225] usb 6-1: USB disconnect, device number 4 [ 113.050298][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 113.072073][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 113.081801][ T21] Bluetooth: hci1: command 0x041b tx timeout [ 113.091476][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 113.100545][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 113.166475][ T1107] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 113.175618][ T1107] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 113.189193][ T4235] device hsr_slave_0 left promiscuous mode [ 113.215378][ T1107] usb 2-1: Product: syz [ 113.220197][ T4235] device hsr_slave_1 left promiscuous mode [ 113.225491][ T1107] usb 2-1: Manufacturer: syz [ 113.245950][ T1107] usb 2-1: SerialNumber: syz [ 113.250903][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 113.261367][ T1107] r8152-cfgselector 2-1: config 0 descriptor?? [ 113.279697][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.306373][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.334286][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.370721][ T4235] device bridge_slave_1 left promiscuous mode [ 113.396049][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.416254][ T4235] device bridge_slave_0 left promiscuous mode [ 113.423133][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.475550][ T4235] device veth1_macvtap left promiscuous mode [ 113.502589][ T4235] device veth0_macvtap left promiscuous mode [ 113.519329][ T4235] device veth1_vlan left promiscuous mode [ 113.539563][ T4235] device veth0_vlan left promiscuous mode [ 113.713187][ T4957] loop0: detected capacity change from 0 to 40427 [ 113.767105][ T1107] r8152-cfgselector 2-1: Unknown version 0x0000 [ 113.787039][ T4957] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 113.796846][ T1107] r8152-cfgselector 2-1: USB disconnect, device number 3 [ 113.844025][ T4957] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 113.998647][ T4957] F2FS-fs (loop0): Found nat_bits in checkpoint [ 114.105997][ T4957] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 114.120191][ T4957] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 114.155516][ T4985] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.185984][ T4985] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.275282][ T26] audit: type=1800 audit(1775920176.455:4): pid=4957 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.150" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 114.327495][ T4982] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 114.335457][ T4982] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 114.448710][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.448779][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.476585][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 114.480181][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.529846][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.529967][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 114.553784][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.553809][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.592635][ T4190] F2FS-fs (loop0): invalid namelen(0), ino:0, run fsck to fix. [ 114.608493][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.661773][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.757055][ T4818] Trying to write to read-only block-device loop0 [ 114.904194][ T4235] bond0 (unregistering): Released all slaves [ 115.096105][ T1107] Bluetooth: hci1: command 0x040f tx timeout [ 115.271025][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 115.316455][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 115.393886][ T4888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.534893][ T5006] binder: 5002:5006 ioctl c0306201 200000004a40 returned -14 [ 115.551406][ T4987] loop1: detected capacity change from 0 to 40427 [ 115.717802][ T4987] F2FS-fs (loop1): invalid crc value [ 115.769216][ T4987] F2FS-fs (loop1): Found nat_bits in checkpoint [ 116.005723][ T4987] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 116.110672][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 116.138271][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 116.206330][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 116.229848][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 116.298203][ T4888] device veth0_vlan entered promiscuous mode [ 116.312152][ T4184] attempt to access beyond end of device [ 116.312152][ T4184] loop1: rw=2049, want=45104, limit=40427 [ 116.331866][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 116.349416][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 116.411438][ T4888] device veth1_vlan entered promiscuous mode [ 116.519216][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 116.539466][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 116.564040][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 116.599741][ T4818] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 116.629799][ T4888] device veth0_macvtap entered promiscuous mode [ 116.666993][ T4888] device veth1_macvtap entered promiscuous mode [ 116.721494][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.796793][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.830705][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.863464][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.899859][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 116.941509][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.982824][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 117.045029][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.106541][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.156885][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 117.175614][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 117.186295][ T4225] Bluetooth: hci1: command 0x0419 tx timeout [ 117.206978][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 117.238305][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 117.262710][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.304391][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.335702][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.363653][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.409355][ T4888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 117.414773][ T5048] loop1: detected capacity change from 0 to 512 [ 117.431244][ T4888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 117.473622][ T4888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.495638][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 117.519545][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 117.558051][ T4888] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.585873][ T4888] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.611307][ T4888] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.648398][ T4888] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.692343][ T5048] EXT4-fs (loop1): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 117.837618][ T3044] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.838211][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.102655][ T3044] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.320243][ T5048] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2807: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 118.665692][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.674180][ T5048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:401: inode #11: comm syz.1.164: iget: bad extra_isize 90 (inode size 256) [ 118.775643][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 118.798508][ T5048] EXT4-fs error (device loop1): ext4_xattr_inode_iget:406: comm syz.1.164: error while reading EA inode 11 err=-117 [ 118.859714][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 118.894775][ T5048] EXT4-fs (loop1): 1 orphan inode deleted [ 118.965983][ T5048] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,dioread_nolock,debug_want_extra_isize=0x000000000000005a,sb=0x0000000000000000,max_dir_size_kb=0x0000000000000004,minixdf,min_batch_time=0x00000000000000c5,,errors=continue. Quota mode: none. [ 118.994860][ T5063] loop2: detected capacity change from 0 to 512 [ 119.080921][ T5063] EXT4-fs (loop2): inline encryption not supported [ 119.136122][ T5063] EXT4-fs (loop2): feature flags set on rev 0 fs, running e2fsck is recommended [ 119.260814][ T5063] EXT4-fs warning (device loop2): ext4_update_dynamic_rev:1062: updating to rev 1 because of new feature flag, running e2fsck is recommended [ 119.434713][ T5063] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm syz.2.166: bg 0: block 248: padding at end of block bitmap is not set [ 119.519497][ T5063] Quota error (device loop2): write_blk: dquota write failed [ 120.600233][ T5063] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 120.730265][ T5063] EXT4-fs error (device loop2): ext4_acquire_dquot:6234: comm syz.2.166: Failed to acquire dquot type 1 [ 120.832553][ T5063] EXT4-fs (loop2): 1 truncate cleaned up [ 120.885953][ T5063] EXT4-fs (loop2): mounted filesystem without journal. Opts: abort,inlinecrypt,nombcache,,errors=continue. Quota mode: writeback. [ 120.944337][ T5092] binder: 5091:5092 ioctl c0306201 200000004a40 returned -14 [ 121.106515][ T5063] EXT4-fs error (device loop2): ext4_remount:6060: comm syz.2.166: Abort forced by user [ 121.164193][ T5063] EXT4-fs (loop2): re-mounted. Opts: (null). Quota mode: writeback. [ 121.586927][ T5063] syz.2.166 (5063) used greatest stack depth: 19952 bytes left [ 122.108481][ T154] Bluetooth: hci5: Frame reassembly failed (-84) [ 122.118324][ T5117] loop1: detected capacity change from 0 to 1024 [ 123.165326][ T5117] EXT4-fs (loop1): mounted filesystem without journal. Opts: auto_da_alloc,block_validity,,errors=continue. Quota mode: none. [ 123.254551][ T5132] loop0: detected capacity change from 0 to 512 [ 123.547024][ T5137] loop6: detected capacity change from 0 to 1024 [ 123.754703][ T5143] binder: 5142:5143 ioctl c0306201 200000004a40 returned -14 [ 123.864635][ T5137] EXT4-fs (loop6): mounted filesystem without journal. Opts: barrier,nodioread_nolock,noquota,data_err=abort,usrjquota=,nodioread_nolock,acl,resuid=0x0000000000000000,mb_optimize_scan=0x0000000000000000,,errors=continue. Quota mode: none. [ 123.936661][ T5137] ext4 filesystem being mounted at /3/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 124.135994][ T21] Bluetooth: hci5: command 0x1003 tx timeout [ 124.147889][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 124.286197][ T5137] EXT4-fs error (device loop6): ext4_free_blocks:6232: comm syz.6.181: Freeing blocks not in datazone - block = 0, count = 16 [ 124.730412][ T5137] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.181: bg 0: block 112: padding at end of block bitmap is not set [ 124.775281][ T5137] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 124.936782][ T5162] loop1: detected capacity change from 0 to 4096 [ 125.136154][ T5162] EXT4-fs (loop1): mounted filesystem without journal. Opts: grpquota,barrier=0x0000000000000857,,errors=continue. Quota mode: writeback. [ 126.088658][ T5162] syz.1.189 (pid 5162) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 126.223271][ T1107] Bluetooth: hci5: command 0x1001 tx timeout [ 126.230158][ T4193] Bluetooth: hci5: sending frame failed (-49) [ 126.247222][ T5178] loop0: detected capacity change from 0 to 1024 [ 126.727988][ T5189] loop6: detected capacity change from 0 to 1024 [ 126.792627][ T5189] EXT4-fs (loop6): Mount option "nouser_xattr" will be removed by 3.5 [ 126.792627][ T5189] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 126.792627][ T5189] [ 126.973391][ T5189] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000009,inode_readahead_blks=0x0000000000200000,grpquota,norecovery,debug_want_extra_isize=0x0000000000000080,jqfmt=vfsv1,nouser_xattr,noauto_da_alloc,norecovery,,errors=continue. Quota mode: writeback. [ 127.505916][ T5209] xt_TPROXY: Can be used only with -p tcp or -p udp [ 127.724970][ T5211] loop1: detected capacity change from 0 to 4096 [ 127.863970][ T5211] EXT4-fs (loop1): inline encryption not supported [ 127.886266][ T5211] EXT4-fs (loop1): Test dummy encryption mode enabled [ 127.968660][ T5211] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 128.026071][ T5193] loop0: detected capacity change from 0 to 40427 [ 128.038871][ T5211] System zones: 0-5 [ 128.111293][ T5211] EXT4-fs (loop1): mounted filesystem without journal. Opts: debug,delalloc,inlinecrypt,test_dummy_encryption,errors=continue,errors=continue,delalloc,barrier,,errors=continue. Quota mode: writeback. [ 128.295993][ T4227] Bluetooth: hci5: command 0x1009 tx timeout [ 128.364636][ T5218] binder: 5217:5218 ioctl c0306201 200000004a40 returned -14 [ 128.582217][ T5211] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 128.615903][ T1335] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.769417][ T5243] loop6: detected capacity change from 0 to 256 [ 129.845678][ T5246] capability: warning: `syz.5.205' uses deprecated v2 capabilities in a way that may be insecure [ 129.906255][ T1335] usb 1-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1024 [ 130.046840][ T5243] FAT-fs (loop6): Directory bread(block 64) failed [ 130.093022][ T5243] FAT-fs (loop6): Directory bread(block 65) failed [ 130.126104][ T1335] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 130.129720][ T5243] FAT-fs (loop6): Directory bread(block 66) failed [ 130.145864][ T1335] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.174505][ T1335] usb 1-1: Product: syz [ 130.178153][ T5243] FAT-fs (loop6): Directory bread(block 67) failed [ 130.179133][ T1335] usb 1-1: Manufacturer: syz [ 130.210322][ T1335] usb 1-1: SerialNumber: syz [ 130.249347][ T5243] FAT-fs (loop6): Directory bread(block 68) failed [ 130.326041][ T5243] FAT-fs (loop6): Directory bread(block 69) failed [ 130.394673][ T5243] FAT-fs (loop6): Directory bread(block 70) failed [ 130.421339][ T5243] FAT-fs (loop6): Directory bread(block 71) failed [ 130.502242][ T5243] FAT-fs (loop6): Directory bread(block 72) failed [ 130.510804][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 130.561573][ T5243] FAT-fs (loop6): Directory bread(block 73) failed [ 130.875898][ T13] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 131.177385][ T5225] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 131.283217][ T5274] loop6: detected capacity change from 0 to 256 [ 131.407609][ T5274] exFAT-fs (loop6): failed to load upcase table (idx : 0x00011a39, chksum : 0xd7c18d7b, utbl_chksum : 0xe619d30d) [ 131.451176][ T1335] cdc_ncm 1-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 131.461007][ T1335] cdc_ncm 1-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 131.493185][ T1335] cdc_ncm 1-1:1.0: setting rx_max = 2048 [ 131.520586][ T13] usb 2-1: New USB device found, idVendor=0763, idProduct=2030, bcdDevice= 0.40 [ 131.540291][ T13] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 131.566529][ T5274] exFAT-fs (loop6): error, invalid size(size(21510) > aligned(9223372036854777344) [ 131.566529][ T5274] [ 131.570559][ T13] usb 2-1: Product: syz [ 131.600845][ T13] usb 2-1: Manufacturer: syz [ 131.605508][ T13] usb 2-1: SerialNumber: syz [ 131.610470][ T5274] exFAT-fs (loop6): Filesystem has been set read-only [ 131.632747][ T5274] exFAT-fs (loop6): error, invalid size(size(21510) > aligned(9223372036854777344) [ 131.632747][ T5274] [ 131.666034][ T1335] cdc_ncm 1-1:1.0: setting tx_max = 80 [ 131.709512][ T1335] cdc_ncm 1-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.0-1, CDC NCM, 42:42:42:42:42:42 [ 131.766309][ T1335] usb 1-1: USB disconnect, device number 2 [ 131.773157][ T1335] cdc_ncm 1-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.0-1, CDC NCM [ 132.057438][ T13] usb 2-1: 1:1: invalid format type 0x1001 is detected, processed as PCM [ 132.146101][ T13] usb 2-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 132.256728][ T13] usb 2-1: USB disconnect, device number 4 [ 132.270662][ T5297] binder: BINDER_SET_CONTEXT_MGR already set [ 132.346532][ T5297] binder: 5296:5297 ioctl 4018620d 200000004a80 returned -16 [ 132.433167][ T5301] loop2: detected capacity change from 0 to 1024 [ 132.467258][ T5301] EXT4-fs (loop2): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 132.503104][ T5298] binder: 5296:5298 ioctl c0306201 200000004a40 returned -14 [ 132.596969][ T4391] udevd[4391]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 132.614157][ T5301] EXT4-fs (loop2): mounted filesystem without journal. Opts: dioread_nolock,norecovery,min_batch_time=0x0000000000000001,nojournal_checksum,debug_want_extra_isize=0x0000000000000004,nodelalloc,errors=remount-ro,acl,auto_da_alloc=0x0000000000000343,jqfmt=vfsold,journal_ioprio=0x0000000. Quota mode: none. [ 132.858735][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.865218][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.041858][ T5058] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 133.809767][ T5058] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 133.820952][ T5058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 133.932347][ T5330] ODEBUG: Out of memory. ODEBUG disabled [ 134.239648][ T5058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 134.513038][ T5332] loop0: detected capacity change from 0 to 128 [ 134.681394][ T5058] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 135.097264][ T5058] usb 3-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 135.277807][ T5058] usb 3-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 135.315877][ T5058] usb 3-1: Manufacturer: syz [ 135.347898][ T5058] usb 3-1: config 0 descriptor?? [ 135.471139][ T5339] loop6: detected capacity change from 0 to 16 [ 135.547077][ T5058] usb 3-1: can't set config #0, error -71 [ 135.603909][ T5309] loop1: detected capacity change from 0 to 40427 [ 135.640046][ T5058] usb 3-1: USB disconnect, device number 7 [ 135.732677][ T5343] loop0: detected capacity change from 0 to 256 [ 135.752335][ T5339] erofs: (device loop6): mounted with root inode @ nid 36. [ 135.786506][ T5309] F2FS-fs (loop1): build fault injection attr: rate: 174, type: 0x1ffff [ 135.832511][ T5343] exfat: Deprecated parameter 'utf8' [ 135.868080][ T5343] /dev/loop0: Can't open blockdev [ 136.138481][ T5355] loop0: detected capacity change from 0 to 256 [ 136.145491][ T5355] /dev/loop0: Can't open blockdev [ 136.172198][ T5353] binder_alloc: 5350: binder_alloc_buf, no vma [ 136.244898][ T5353] binder: 5350:5353 ioctl c0306201 200000004a40 returned -14 [ 140.155879][ T1107] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 140.686524][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 140.864664][ T1107] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 141.244117][ T1107] usb 2-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 141.305968][ T1107] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 141.397544][ T1107] usb 2-1: config 0 descriptor?? [ 142.956597][ T1107] hid-led: probe of 0003:1D34:000A.0003 failed with error -71 [ 143.167834][ T5416] loop2: detected capacity change from 0 to 1024 [ 143.421700][ T5416] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 143.493174][ T1107] usb 2-1: USB disconnect, device number 5 [ 143.669791][ T5416] EXT4-fs error (device loop2): ext4_empty_dir:3166: inode #11: block 623: comm syz.2.243: Attempting to read directory block (623) that is past i_size (638464) [ 143.866204][ T5429] binder_alloc: 5428: binder_alloc_buf, no vma [ 143.872514][ T5429] binder: 5428:5429 ioctl c0306201 200000004a40 returned -14 [ 145.017611][ T5441] loop0: detected capacity change from 0 to 16 [ 145.220067][ T5441] /dev/loop0: Can't open blockdev [ 145.279760][ T5454] loop6: detected capacity change from 0 to 512 [ 145.397154][ T5457] syz.5.254 uses obsolete (PF_INET,SOCK_PACKET) [ 145.467977][ T5454] EXT4-fs (loop6): mounted filesystem without journal. Opts: auto_da_alloc=0x000000000000007f,,errors=continue. Quota mode: writeback. [ 145.632830][ T5454] ext4 filesystem being mounted at /17/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 147.355877][ T1107] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 147.555386][ T5492] binder: BINDER_SET_CONTEXT_MGR already set [ 147.603888][ T5492] binder: 5490:5492 ioctl 4018620d 200000004a80 returned -16 [ 147.802254][ T5495] binder: 5490:5495 ioctl c0306201 200000004a40 returned -14 [ 147.846120][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 147.871577][ T1107] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 147.926582][ T1107] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 147.970254][ T1107] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 148.001356][ T1107] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 148.055033][ T1107] usb 3-1: config 0 descriptor?? [ 148.557842][ T1107] plantronics 0003:047F:FFFF.0004: unknown main item tag 0xd [ 148.573674][ T1107] plantronics 0003:047F:FFFF.0004: No inputs registered, leaving [ 148.643512][ T1107] plantronics 0003:047F:FFFF.0004: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.2-1/input0 [ 148.981567][ T1335] usb 3-1: USB disconnect, device number 8 [ 149.039604][ T5520] loop0: detected capacity change from 0 to 8192 [ 149.350735][ T5528] fido_id[5528]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 149.648671][ T5519] Trying to write to read-only block-device loop0 [ 151.379385][ T5562] binder: 5560:5562 ioctl c0306201 200000004a40 returned -14 [ 151.995624][ T5577] loop0: detected capacity change from 0 to 256 [ 152.040492][ T5577] /dev/loop0: Can't open blockdev [ 153.948668][ T5582] loop0: detected capacity change from 0 to 40427 [ 157.142735][ T5605] loop1: detected capacity change from 0 to 512 [ 157.231120][ T5610] loop2: detected capacity change from 0 to 1024 [ 157.250230][ T5605] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 157.321497][ T5605] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a802e02c, mo2=0002] [ 157.349440][ T5605] System zones: 1-12 [ 157.355749][ T5605] EXT4-fs (loop1): orphan cleanup on readonly fs [ 157.363630][ T5605] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.290: bg 0: block 361: padding at end of block bitmap is not set [ 157.389579][ T5610] EXT4-fs (loop2): Ignoring removed mblk_io_submit option [ 157.397079][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 157.403875][ T5605] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6192: Corrupt filesystem [ 157.553412][ T5610] EXT4-fs (loop2): mounted filesystem without journal. Opts: mblk_io_submit,nodioread_nolock,noquota,delalloc,journal_dev=0x0000000000000008,grpjquota=,,errors=continue. Quota mode: none. [ 157.636031][ T5610] ext4 filesystem being mounted at /56/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 157.646959][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 157.653571][ T5605] EXT4-fs error (device loop1): ext4_clear_blocks:883: inode #11: comm syz.1.290: attempt to clear invalid blocks 33619980 len 1 [ 157.695863][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 157.728674][ T5605] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.290: invalid indirect mapped block 1811939328 (level 0) [ 157.789819][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 157.809204][ T5605] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #11: comm syz.1.290: invalid indirect mapped block 2 (level 2) [ 157.890611][ T5605] EXT4-fs (loop1): Remounting filesystem read-only [ 157.906434][ T5605] EXT4-fs (loop1): 1 truncate cleaned up [ 157.932698][ T5605] EXT4-fs (loop1): mounted filesystem without journal. Opts: data_err=ignore,data_err=ignore,errors=remount-ro,inode_readahead_blks=0x0000000000040000,debug_want_extra_isize=0x0000000000000004. Quota mode: none. [ 158.024315][ T5626] loop0: detected capacity change from 0 to 512 [ 158.485991][ T23] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 158.866096][ T23] usb 2-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 158.926445][ T5651] loop6: detected capacity change from 0 to 512 [ 159.173488][ T5651] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.282807][ T23] usb 2-1: config 1 has no interface number 0 [ 159.416165][ T5615] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 159.501100][ T23] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 159.746243][ T23] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 37, changing to 4 [ 159.778212][ T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 116, changing to 4 [ 159.808457][ T23] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1024, setting to 1023 [ 160.017885][ T23] usb 2-1: New USB device found, idVendor=1395, idProduct=0300, bcdDevice= 0.40 [ 160.037202][ T23] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 160.055554][ T23] usb 2-1: Product: syz [ 160.085549][ T23] usb 2-1: Manufacturer: syz [ 160.100889][ T23] usb 2-1: SerialNumber: syz [ 160.254373][ T5663] loop6: detected capacity change from 0 to 512 [ 160.305398][ T5663] EXT4-fs (loop6): Ignoring removed nobh option [ 160.330235][ T5663] EXT4-fs (loop6): Ignoring removed orlov option [ 160.374123][ T5663] EXT4-fs error (device loop6): __ext4_iget:4912: inode #11: block 1: comm syz.6.309: invalid block [ 160.393284][ T5663] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.309: couldn't read orphan inode 11 (err -117) [ 160.458654][ T5663] EXT4-fs (loop6): mounted filesystem without journal. Opts: stripe=0x0000000000000000,nobh,max_dir_size_kb=0x0000000000000008,debug_want_extra_isize=0x0000000000000080,data_err=ignore,nouid32,orlov,noauto_da_alloc,noauto_da_alloc,,errors=continue. Quota mode: none. [ 160.506059][ T23] usb 2-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 160.546045][ T23] usb 2-1: USB disconnect, device number 6 [ 160.950521][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 161.068517][ T5682] loop1: detected capacity change from 0 to 2048 [ 161.170524][ T5682] EXT4-fs (loop1): mounted filesystem without journal. Opts: stripe=0x0000000000000005,,errors=continue. Quota mode: none. [ 161.698341][ T5674] overlayfs: failed to clone upperpath [ 162.017889][ T5682] syz.1.316 (5682) used greatest stack depth: 19928 bytes left [ 162.885927][ T4228] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 163.165895][ T4228] usb 7-1: Using ep0 maxpacket: 16 [ 163.346593][ T4228] usb 7-1: unable to get BOS descriptor or descriptor too short [ 163.466151][ T4228] usb 7-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 163.489987][ T4228] usb 7-1: config 1 has no interface number 0 [ 163.517746][ T4228] usb 7-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 163.786697][ T4228] usb 7-1: New USB device found, idVendor=1235, idProduct=8002, bcdDevice= 0.40 [ 163.806061][ T4228] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 163.845882][ T4228] usb 7-1: Product: syz [ 163.850122][ T4228] usb 7-1: Manufacturer: syz [ 163.854758][ T4228] usb 7-1: SerialNumber: syz [ 163.987014][ T5752] overlayfs: failed to clone lowerpath [ 164.025040][ T5752] overlayfs: missing 'lowerdir' [ 164.296063][ T4228] usb 7-1: 1:0 : does not exist [ 164.301117][ T4228] usb 7-1: unit 2 not found! [ 164.314270][ T4228] usb 7-1: unit 13 not found! [ 164.413351][ T4228] snd-usb-audio: probe of 7-1:1.1 failed with error -71 [ 164.482216][ T4228] usb 7-1: USB disconnect, device number 2 [ 164.778666][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 164.818267][ T5756] chnl_net:caif_netlink_parms(): no params data found [ 165.861406][ T5756] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.926242][ T5756] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.947963][ T5756] device bridge_slave_0 entered promiscuous mode [ 166.016299][ T5782] loop0: detected capacity change from 0 to 512 [ 166.014852][ T5756] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.065981][ T5756] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.098736][ T5756] device bridge_slave_1 entered promiscuous mode [ 166.205563][ T5756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.215992][ T1110] Bluetooth: hci0: command 0x0409 tx timeout [ 166.281163][ T5756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.698023][ T5756] team0: Port device team_slave_0 added [ 167.068667][ T5756] team0: Port device team_slave_1 added [ 168.091015][ T5805] loop6: detected capacity change from 0 to 1024 [ 168.128105][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 168.191293][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.277872][ T5805] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 168.305920][ T13] Bluetooth: hci0: command 0x041b tx timeout [ 168.368615][ T5756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 168.507507][ T5756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 168.590447][ T5756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 168.780723][ T5756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 168.877136][ T5756] device hsr_slave_0 entered promiscuous mode [ 168.906634][ T5756] device hsr_slave_1 entered promiscuous mode [ 168.926880][ T5756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 168.963068][ T5756] Cannot create hsr debugfs directory [ 169.165969][ T1107] usb 7-1: new full-speed USB device number 3 using dummy_hcd [ 169.256194][ T5058] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 169.264659][ T5839] loop0: detected capacity change from 0 to 128 [ 169.453247][ T5756] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 169.496247][ T5058] usb 3-1: Using ep0 maxpacket: 16 [ 169.510351][ T5756] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 169.526071][ T1107] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 169.556341][ T1107] usb 7-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 169.585757][ T5756] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 169.612948][ T5756] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 169.620250][ T5058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 169.648175][ T5058] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 169.665993][ T1107] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.60 [ 169.675267][ T1107] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 169.688672][ T5058] usb 3-1: New USB device found, idVendor=1b96, idProduct=0008, bcdDevice= 0.00 [ 169.699415][ T1107] usb 7-1: SerialNumber: syz [ 169.704884][ T5058] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 169.739887][ T4235] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.752724][ T1107] cdc_acm 7-1:1.0: skipping garbage [ 169.758327][ T5058] usb 3-1: config 0 descriptor?? [ 169.763512][ T1107] cdc_acm 7-1:1.0: Control and data interfaces are not separated! [ 169.772844][ T1107] cdc_acm 7-1:1.0: This needs exactly 3 endpoints [ 169.990178][ T4235] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.949660][ T1107] cdc_acm: probe of 7-1:1.0 failed with error -22 [ 171.998348][ T1110] Bluetooth: hci0: command 0x040f tx timeout [ 172.128749][ T4235] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.198068][ T5861] Set syz0 is full, maxelem 0 reached [ 172.277098][ T4235] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 172.468371][ T5756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 173.164863][ T1107] usb 7-1: USB disconnect, device number 3 [ 173.197409][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.204478][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.237420][ T5756] 8021q: adding VLAN 0 to HW filter on device team0 [ 173.245110][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.274942][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 173.283035][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.290627][ T5876] netlink: 796 bytes leftover after parsing attributes in process `syz.0.362'. [ 173.291436][ T1159] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 173.315992][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.324353][ T5870] loop6: detected capacity change from 0 to 4096 [ 173.336049][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.343155][ T5058] ntrig 0003:1B96:0008.0005: unknown main item tag 0x0 [ 173.375280][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 173.382100][ T5058] ntrig 0003:1B96:0008.0005: hidraw0: USB HID v0.00 Device [HID 1b96:0008] on usb-dummy_hcd.2-1/input0 [ 173.406758][ T5870] ntfs3: Unknown parameter 'windows_names' [ 173.409554][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 173.431527][ T4302] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.438905][ T4302] bridge0: port 1(bridge_slave_0) entered forwarding state [ 173.456802][ T5058] usb 3-1: USB disconnect, device number 9 [ 173.500348][ T5883] loop0: detected capacity change from 0 to 16 [ 173.512451][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 173.532530][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 173.576674][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 173.616126][ T4302] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.623347][ T4302] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.641354][ T5883] /dev/loop0: Can't open blockdev [ 173.650718][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 173.675469][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 173.691410][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 173.734334][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 173.801079][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 173.839219][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 173.855256][ T5892] fido_id[5892]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 173.887544][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 174.096154][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 174.107599][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 174.116998][ T4222] Bluetooth: hci0: command 0x0419 tx timeout [ 174.941241][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 175.028477][ T4302] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 175.230759][ T5756] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 175.333981][ T5922] netlink: 40 bytes leftover after parsing attributes in process `syz.5.373'. [ 175.427346][ T4222] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 175.461884][ T5926] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(3) [ 175.468918][ T5926] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 175.581130][ T5926] vhci_hcd vhci_hcd.0: Device attached [ 175.836151][ T1335] usb 45-1: new low-speed USB device number 2 using vhci_hcd [ 176.163047][ T4222] usb 1-1: config index 0 descriptor too short (expected 23569, got 27) [ 176.194164][ T4222] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 176.347373][ T4222] usb 1-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 176.383457][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 176.394318][ T4222] usb 1-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 176.405727][ T4859] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 176.436698][ T5756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.444230][ T4222] usb 1-1: Manufacturer: syz [ 176.483569][ T4222] usb 1-1: config 0 descriptor?? [ 176.972404][ T5952] loop2: detected capacity change from 0 to 64 [ 177.135985][ T4222] rc_core: IR keymap rc-hauppauge not found [ 177.142657][ T4222] Registered IR keymap rc-empty [ 177.164762][ T4222] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 177.252428][ T4222] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input7 [ 177.305829][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 177.315849][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 177.325232][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 177.334273][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 177.343413][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 177.408734][ T4222] usb 1-1: USB disconnect, device number 3 [ 177.645817][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #202!!! [ 177.656700][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 177.936827][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 177.946971][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 177.993475][ T5927] vhci_hcd: connection reset by peer [ 178.003043][ T5654] vhci_hcd: stop threads [ 178.040930][ T5654] vhci_hcd: release socket [ 178.060890][ T5756] device veth0_vlan entered promiscuous mode [ 178.075513][ T5756] device veth1_vlan entered promiscuous mode [ 178.095841][ T5654] vhci_hcd: disconnect device [ 178.136560][ T5756] device veth0_macvtap entered promiscuous mode [ 178.166128][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 178.197069][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.413340][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 179.486650][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 179.576201][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.637195][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.692755][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.747330][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.755499][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.793756][ T5756] device veth1_macvtap entered promiscuous mode [ 179.857395][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.889840][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.002194][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.132452][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.212180][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.226156][ T13] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 180.304669][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.376371][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.476633][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.495984][ T13] usb 3-1: Using ep0 maxpacket: 8 [ 180.537621][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.636308][ T13] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 180.686504][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.787361][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.846222][ T13] usb 3-1: New USB device found, idVendor=22b8, idProduct=6425, bcdDevice=d3.6c [ 180.864012][ T13] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 180.873249][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #48!!! [ 180.897118][ T13] usb 3-1: Product: syz [ 180.901555][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 180.920896][ T13] usb 3-1: Manufacturer: syz [ 180.925865][ T13] usb 3-1: SerialNumber: syz [ 180.941604][ T13] usb 3-1: config 0 descriptor?? [ 180.964267][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 180.966098][ T1335] vhci_hcd: vhci_device speed not set [ 180.997180][ T13] cdc_acm 3-1:0.0: Zero length descriptor references [ 181.012395][ T13] cdc_acm: probe of 3-1:0.0 failed with error -22 [ 181.143065][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.171826][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.209289][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.231715][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.251358][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.279031][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.299692][ T5756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.325922][ T5756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.352847][ T5756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.404248][ T5756] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.436486][ T5756] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.471880][ T5756] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.493680][ T5756] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.545239][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.564621][ T3044] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.976051][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 182.030046][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #40!!! [ 182.658362][ T4235] device hsr_slave_0 left promiscuous mode [ 182.675434][ T4235] device hsr_slave_1 left promiscuous mode [ 182.689650][ T4235] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.712201][ T4235] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.740765][ T4235] device bridge_slave_1 left promiscuous mode [ 182.773036][ T4235] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.834366][ T4235] device bridge_slave_0 left promiscuous mode [ 182.925990][ T4235] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.987601][ T4235] device veth1_macvtap left promiscuous mode [ 182.993634][ T4235] device veth0_macvtap left promiscuous mode [ 183.036025][ T4235] device veth1_vlan left promiscuous mode [ 183.062304][ T4235] device veth0_vlan left promiscuous mode [ 183.794667][ T23] usb 3-1: USB disconnect, device number 10 [ 185.000491][ T4235] team0 (unregistering): Port device team_slave_1 removed [ 185.086665][ T4235] team0 (unregistering): Port device team_slave_0 removed [ 185.112398][ T4235] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.144236][ T4235] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.219466][ T4235] bond0 (unregistering): Released all slaves [ 185.266783][ T6067] netlink: 56 bytes leftover after parsing attributes in process `syz.5.397'. [ 185.308733][ T6065] netlink: 20 bytes leftover after parsing attributes in process `syz.2.398'. [ 185.375985][ T4362] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.393996][ T4362] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.511106][ T4362] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.758557][ T4362] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.898198][ T4362] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.046298][ T6083] input: syz0 as /devices/virtual/input/input8 [ 186.348325][ T5058] Bluetooth: hci2: command 0x0406 tx timeout [ 186.354789][ T5058] Bluetooth: hci4: command 0x0406 tx timeout [ 186.372419][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 188.798291][ T6134] tipc: Started in network mode [ 188.963146][ T6134] tipc: Node identity ca1c91333095, cluster identity 4711 [ 189.084962][ T6134] tipc: Enabled bearer , priority 0 [ 189.223704][ T6137] device syzkaller0 entered promiscuous mode [ 189.855535][ T6134] tipc: Resetting bearer [ 189.916040][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 189.947116][ T6134] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 190.079938][ T6133] tipc: Resetting bearer [ 190.182216][ T6133] tipc: Disabling bearer [ 190.227022][ T21] tipc: Node number set to 4203319603 [ 191.650816][ T6165] netlink: 132 bytes leftover after parsing attributes in process `syz.7.418'. [ 192.448492][ T6173] loop7: detected capacity change from 0 to 2048 [ 192.550128][ T6173] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 194.345993][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.725866][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.412686][ T6195] loop7: detected capacity change from 0 to 2048 [ 196.020211][ T6195] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 196.204047][ T6195] EXT4-fs error (device loop7): ext4_validate_block_bitmap:438: comm syz.7.423: bg 0: block 234: padding at end of block bitmap is not set [ 197.163164][ T6223] loop6: detected capacity change from 0 to 256 [ 197.340079][ T6195] EXT4-fs (loop7): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 322 with error 28 [ 197.866356][ T6195] EXT4-fs (loop7): This should not happen!! Data will be lost [ 197.866356][ T6195] [ 197.876479][ T6195] EXT4-fs (loop7): Total free blocks count 0 [ 197.882563][ T6195] EXT4-fs (loop7): Free/Dirty block details [ 197.929949][ T6223] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x25fbf2c1, utbl_chksum : 0xe619d30d) [ 197.942898][ T6195] EXT4-fs (loop7): free_blocks=0 [ 198.045064][ T6195] EXT4-fs (loop7): dirty_blocks=336 [ 198.126239][ T6195] EXT4-fs (loop7): Block reservation details [ 198.149881][ T6195] EXT4-fs (loop7): i_reserved_data_blocks=21 [ 199.008652][ T6226] 9pnet: Insufficient options for proto=fd [ 199.108770][ T6241] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 201.901364][ T1335] Bluetooth: hci3: command 0x0406 tx timeout [ 202.746924][ T6286] 9pnet: Insufficient options for proto=fd syzkaller syzkaller login: [ 203.010615][ T6289] binder: 6288:6289 ioctl c0306201 200000004a40 returned -14 [ 203.246467][ T6278] chnl_net:caif_netlink_parms(): no params data found [ 203.468333][ T6278] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.476437][ T6278] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.485880][ T6278] device bridge_slave_0 entered promiscuous mode [ 203.513849][ T6278] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.675893][ T6278] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.684311][ T6278] device bridge_slave_1 entered promiscuous mode [ 203.845551][ T6278] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.879546][ T6278] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.445740][ T6278] team0: Port device team_slave_0 added [ 204.498738][ T6278] team0: Port device team_slave_1 added [ 204.625990][ T4254] Bluetooth: hci4: command 0x0409 tx timeout [ 204.898805][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.925875][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.040150][ T6278] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.102364][ T6278] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.142882][ T6278] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.267281][ T6295] loop7: detected capacity change from 0 to 40427 [ 205.289902][ T6295] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 205.320347][ T6278] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.343501][ T6295] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 205.416213][ T6295] F2FS-fs (loop7): Unrecognized mount option "age_extent_cache" or missing value [ 206.457685][ T6339] binder: 6338:6339 ioctl c0306201 200000004a40 returned -14 [ 206.479931][ T6278] device hsr_slave_0 entered promiscuous mode [ 206.576282][ T6278] device hsr_slave_1 entered promiscuous mode [ 206.765608][ T1335] Bluetooth: hci4: command 0x041b tx timeout [ 207.580881][ T6326] loop0: detected capacity change from 0 to 32768 [ 207.798098][ T4817] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.855850][ T1335] Bluetooth: hci4: command 0x040f tx timeout [ 208.986603][ T4817] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.179352][ T4817] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.143876][ T4817] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.316216][ T6378] ptrace attach of "./syz-executor exec"[4190] was attempted by "./syz-executor exec"[6378] [ 210.327294][ T6378] capability: warning: `syz.0.467' uses 32-bit capabilities (legacy support in use) [ 210.515320][ T6278] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 210.554105][ T6278] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 210.669186][ T6278] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 210.730167][ T6278] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 210.737264][ T4227] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 210.923305][ T6278] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.946478][ T13] Bluetooth: hci4: command 0x0419 tx timeout [ 211.006385][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 211.021525][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 211.066908][ T6278] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.090785][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 211.104002][ T4227] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 211.110443][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 211.118880][ T4227] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 211.150243][ T5654] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.153642][ T4227] usb 1-1: config 220 has no interface number 2 [ 211.157605][ T5654] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.177119][ T4227] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 211.197466][ T4227] usb 1-1: config 220 interface 0 has no altsetting 0 [ 211.211581][ T5654] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 211.237248][ T4227] usb 1-1: config 220 interface 76 has no altsetting 0 [ 211.254193][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 211.256748][ T4227] usb 1-1: config 220 interface 1 has no altsetting 0 [ 211.271337][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 211.292117][ T4235] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.299739][ T4235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.334855][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 211.486165][ T4227] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 211.508672][ T4227] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 211.545953][ T4227] usb 1-1: Product: syz [ 211.565043][ T4227] usb 1-1: Manufacturer: syz [ 211.585717][ T4227] usb 1-1: SerialNumber: syz [ 212.067118][ T4227] usb 1-1: selecting invalid altsetting 0 [ 212.087239][ T4227] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 212.114522][ T4227] usb 1-1: No valid video chain found. [ 212.189891][ T4227] usb 1-1: selecting invalid altsetting 0 [ 212.223451][ T4227] usbtest: probe of 1-1:220.1 failed with error -22 [ 212.261571][ T4227] usb 1-1: USB disconnect, device number 4 [ 212.408001][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 212.423935][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 212.487123][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 212.597723][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 212.618498][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 212.629845][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 212.646977][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 212.674443][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 212.746532][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 212.795243][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 212.863072][ T6408] loop0: detected capacity change from 0 to 32768 [ 212.877895][ T6278] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 212.981235][ T6408] /dev/loop0: Can't open blockdev [ 214.018568][ T4817] device hsr_slave_0 left promiscuous mode [ 214.096027][ T6436] netlink: 8 bytes leftover after parsing attributes in process `syz.0.475'. [ 215.076509][ T4817] device hsr_slave_1 left promiscuous mode [ 215.086105][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 215.150790][ T4817] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 215.194754][ T4817] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 215.233526][ T4817] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 215.295345][ T4817] device bridge_slave_1 left promiscuous mode [ 215.323114][ T4817] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.364496][ T4817] device bridge_slave_0 left promiscuous mode [ 215.413846][ T4817] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.415662][ T6454] loop7: detected capacity change from 0 to 2048 [ 215.498419][ T6454] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 215.508004][ T4817] device veth1_macvtap left promiscuous mode [ 215.535966][ T4817] device veth0_macvtap left promiscuous mode [ 215.538797][ T6451] loop0: detected capacity change from 0 to 4096 [ 215.542973][ T4817] device veth1_vlan left promiscuous mode [ 216.475311][ T4817] device veth0_vlan left promiscuous mode [ 218.975329][ T4817] team0 (unregistering): Port device team_slave_1 removed [ 219.056793][ T4817] team0 (unregistering): Port device team_slave_0 removed [ 219.126665][ T4817] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.226259][ T4817] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.453708][ T4817] bond0 (unregistering): Released all slaves [ 219.704126][ T6278] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.733912][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 219.756187][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 220.599930][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 220.642887][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 220.785197][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 220.832578][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 220.885853][ T6499] netlink: 4 bytes leftover after parsing attributes in process `syz.0.490'. [ 220.946520][ T6499] device dummy0 entered promiscuous mode [ 220.952438][ T6499] device macvtap1 entered promiscuous mode [ 221.043789][ T6278] device veth0_vlan entered promiscuous mode [ 221.060933][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 221.085579][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 221.126717][ T6502] device macvtap1 left promiscuous mode [ 221.158914][ T6278] device veth1_vlan entered promiscuous mode [ 221.315607][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 221.356609][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 221.380989][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 221.410356][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 221.444198][ T6278] device veth0_macvtap entered promiscuous mode [ 223.024212][ T4816] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 223.054244][ T6278] device veth1_macvtap entered promiscuous mode [ 223.185167][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.217778][ T6517] loop7: detected capacity change from 0 to 1024 [ 223.238200][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.248341][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.260640][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.270880][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.281730][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.292223][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 223.303661][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.317843][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 223.348592][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 223.357463][ T6517] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 223.380078][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 223.405461][ T6517] EXT4-fs (loop7): ext4_check_descriptors: Checksum for group 0 failed (29950!=20869) [ 223.429460][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.436385][ T6517] EXT4-fs (loop7): filesystem has both journal inode and journal device! [ 223.454292][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.483611][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.505874][ T21] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 223.529283][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.561585][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.594652][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.613256][ T6278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 223.624126][ T6278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 223.644135][ T6278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 223.652894][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 223.670766][ T4235] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 223.690586][ T6278] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.714791][ T6278] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.731621][ T6278] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.741223][ T6278] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.009195][ T21] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 224.024743][ T21] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2cf6, bcdDevice= 0.00 [ 224.034665][ T21] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 224.067644][ T4275] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.075522][ T4275] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 224.084189][ T21] usb 1-1: config 0 descriptor?? [ 224.883949][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 224.925591][ T4275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 224.963525][ T21] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 224.986450][ T4275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.055082][ T4275] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 225.181087][ T6519] udc-core: couldn't find an available UDC or it's busy [ 225.196383][ T6519] misc raw-gadget: fail, usb_gadget_probe_driver returned -16 [ 225.223453][ T21] usb 1-1: USB disconnect, device number 5 [ 230.742832][ T6608] loop7: detected capacity change from 0 to 256 [ 230.936308][ T6608] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 232.571473][ T4228] Bluetooth: hci1: command 0x0406 tx timeout [ 232.969903][ T6640] device bridge1 entered promiscuous mode [ 234.026968][ T6672] netlink: 8 bytes leftover after parsing attributes in process `syz.0.527'. [ 238.860377][ T6714] loop0: detected capacity change from 0 to 1024 [ 238.972587][ T6719] netlink: 64 bytes leftover after parsing attributes in process `syz.7.539'. [ 239.269079][ T6729] loop0: detected capacity change from 0 to 1024 [ 240.300430][ T6747] netlink: 8 bytes leftover after parsing attributes in process `syz.5.544'. [ 243.883706][ T6771] binder: 6770:6771 ioctl c0306201 200000004a40 returned -14 [ 244.226775][ T6786] Zero length message leads to an empty skb [ 244.507285][ T6790] delete_channel: no stack [ 245.766586][ T6822] binder: 6818:6822 ioctl c0306201 200000004a40 returned -14 [ 246.363604][ T6804] loop0: detected capacity change from 0 to 32768 [ 246.701824][ T4393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by udevd (4393) [ 248.387463][ T6865] loop7: detected capacity change from 0 to 512 [ 248.611343][ T6865] EXT4-fs (loop7): Cannot turn on journaled quota: type 1: error -2 [ 248.852278][ T6865] EXT4-fs error (device loop7): ext4_iget_extra_inode:4566: inode #15: comm syz.7.577: corrupted in-inode xattr [ 248.962291][ T6865] EXT4-fs error (device loop7): ext4_orphan_get:1405: comm syz.7.577: couldn't read orphan inode 15 (err -117) [ 249.045070][ T6865] EXT4-fs (loop7): mounted filesystem without journal. Opts: min_batch_time=0x0000000000000009,jqfmt=vfsv0,min_batch_time=0x00000000000003ff,noload,grpjquota=.,noblock_validity,resgid=0x0000000000000000,nobarrier,errors=continue,,errors=continue. Quota mode: writeback. [ 249.617654][ T6886] binder: 6885:6886 ioctl c0306201 200000004a40 returned -14 [ 252.021350][ T6927] netlink: 16 bytes leftover after parsing attributes in process `syz.8.592'. [ 252.837123][ T6957] binder: 6953:6957 ioctl c0306201 200000004a40 returned -14 [ 252.929177][ T6959] fuse: Bad value for 'group_id' [ 253.175425][ T6962] bond1 (unregistering): Released all slaves [ 253.317926][ T6943] loop8: detected capacity change from 0 to 32768 [ 253.516977][ T6943] BTRFS info (device loop8): using crc32c (crc32c-intel) checksum algorithm [ 253.577940][ T6943] BTRFS info (device loop8): setting nodatasum [ 253.584288][ T6943] BTRFS info (device loop8): force zlib compression, level 3 [ 253.676074][ T6943] BTRFS info (device loop8): setting incompat feature flag for COMPRESS_LZO (0x8) [ 253.740637][ T6943] BTRFS info (device loop8): use lzo compression, level 0 [ 253.786640][ T6943] BTRFS info (device loop8): turning on flush-on-commit [ 253.794101][ T6943] BTRFS info (device loop8): enabling auto defrag [ 253.879741][ T6943] BTRFS info (device loop8): max_inline at 4096 [ 253.926218][ T6943] BTRFS info (device loop8): using free space tree [ 253.933246][ T6943] BTRFS info (device loop8): has skinny extents [ 255.107536][ T7015] overlayfs: missing 'workdir' [ 256.011063][ T7016] netlink: 28 bytes leftover after parsing attributes in process `syz.5.608'. [ 256.140584][ T1432] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.147078][ T1432] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.320089][ T7023] binder: 7007:7023 ioctl c0306201 200000004a40 returned -14 [ 256.851424][ T4393] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop8 scanned by udevd (4393) [ 256.886135][ T6943] BTRFS error (device loop8): open_ctree failed: -12 [ 256.909864][ T1110] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 257.670466][ T7065] loop7: detected capacity change from 0 to 128 [ 258.825891][ T1110] usb 1-1: Using ep0 maxpacket: 16 [ 258.956205][ T1110] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 258.957981][ T7065] FAT-fs (loop7): Unrecognized mount option "184467440737095516150177777777777777777777718446744073709551615%ciuH+Msu [2&HwjW%(NfjCKNM0ig|hg&.Mr7LGIjgeVJo^@uP*gHlu"#" or missing value [ 258.965061][ T1110] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 258.965088][ T1110] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 259.165966][ T1110] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 259.271000][ T1110] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 259.279440][ T1110] usb 1-1: Product: syz [ 259.283672][ T1110] usb 1-1: Manufacturer: syz [ 259.289762][ T1110] usb 1-1: SerialNumber: syz [ 259.693109][ T7087] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.696111][ T1110] usb 1-1: 0:2 : does not exist [ 259.852678][ T7099] binder: 7092:7099 ioctl c0306201 200000004a40 returned -14 [ 259.908032][ T7087] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.626228][ T1110] usb 1-1: 1:0: cannot get min/max values for control 4 (id 1) [ 260.919123][ T7087] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.045452][ T1110] usb 1-1: USB disconnect, device number 6 [ 261.171058][ T7087] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.293388][ T7114] netlink: 4 bytes leftover after parsing attributes in process `syz.0.630'. [ 261.365385][ T4393] udevd[4393]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 262.230819][ T7131] loop6: detected capacity change from 0 to 128 [ 262.483084][ T7087] netdevsim netdevsim7 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.552887][ T7087] netdevsim netdevsim7 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.623913][ T7143] ALSA: mixer_oss: invalid OSS volume '' [ 262.631663][ T7087] netdevsim netdevsim7 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.687319][ T7087] netdevsim netdevsim7 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.615961][ T13] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 263.986883][ T13] usb 7-1: Using ep0 maxpacket: 32 [ 264.486189][ T13] usb 7-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 264.515869][ T13] usb 7-1: config 155 interface 0 altsetting 0 has an invalid endpoint with address 0xE2, skipping [ 264.585721][ T13] usb 7-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 264.826065][ T13] usb 7-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 264.852446][ T13] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.881276][ T13] usb 7-1: Product: syz [ 264.885708][ T13] usb 7-1: Manufacturer: syz [ 264.923612][ T13] usb 7-1: SerialNumber: syz [ 265.008184][ T13] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 265.041696][ T13] imon 7-1:155.0: unable to initialize intf0, err -19 [ 265.082468][ T13] imon:imon_probe: failed to initialize context! [ 265.122933][ T13] imon 7-1:155.0: unable to register, err -19 [ 265.423085][ T7175] loop7: detected capacity change from 0 to 32768 [ 266.442337][ T7051] usb 7-1: USB disconnect, device number 4 [ 269.357540][ T7225] [U] [ 270.265802][ T6181] usb 7-1: new full-speed USB device number 5 using dummy_hcd [ 270.736031][ T6181] usb 7-1: config 0 has an invalid interface number: 96 but max is 0 [ 271.555096][ T6181] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.582840][ T6181] usb 7-1: config 0 has no interface number 0 [ 271.746203][ T6181] usb 7-1: New USB device found, idVendor=0b57, idProduct=6a8d, bcdDevice=33.74 [ 271.771170][ T6181] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 271.841866][ T6181] usb 7-1: Product: syz [ 271.881886][ T6181] usb 7-1: Manufacturer: syz [ 271.904373][ T6181] usb 7-1: SerialNumber: syz [ 271.947636][ T6181] usb 7-1: config 0 descriptor?? [ 275.783859][ T7301] sd 0:0:1:0: device reset [ 276.703250][ T7310] loop0: detected capacity change from 0 to 128 [ 278.612100][ T7313] loop0: detected capacity change from 0 to 512 [ 282.708070][ T4225] usb 7-1: USB disconnect, device number 5 [ 293.964659][ T7462] [ 293.979304][ T7462] ============================= [ 293.984581][ T7462] WARNING: suspicious RCU usage [ 293.996042][ T7462] syzkaller #0 Not tainted [ 294.000733][ T7462] ----------------------------- [ 294.016583][ T7462] include/linux/rhashtable.h:594 suspicious rcu_dereference_check() usage! [ 294.039377][ T7462] [ 294.039377][ T7462] other info that might help us debug this: [ 294.039377][ T7462] [ 294.099210][ T7462] [ 294.099210][ T7462] rcu_scheduler_active = 2, debug_locks = 1 [ 294.132381][ T7462] 1 lock held by syz.5.716/7462: [ 294.169365][ T7462] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 294.216305][ T7462] [ 294.216305][ T7462] stack backtrace: [ 294.263475][ T7462] CPU: 1 PID: 7462 Comm: syz.5.716 Not tainted syzkaller #0 [ 294.270840][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.281029][ T7462] Call Trace: [ 294.284468][ T7462] [ 294.287524][ T7462] dump_stack_lvl+0x188/0x250 [ 294.292241][ T7462] ? load_image+0x400/0x400 [ 294.296781][ T7462] ? show_regs_print_info+0x20/0x20 [ 294.302017][ T7462] ? lockdep_rcu_suspicious+0x110/0x180 [ 294.307583][ T7462] ? local_bh_enable+0x20/0x20 [ 294.312405][ T7462] rhltable_lookup+0x7a9/0x7c0 [ 294.317208][ T7462] ? local_bh_enable+0x20/0x20 [ 294.322020][ T7462] ? release_firmware_map_entry+0x190/0x190 [ 294.328071][ T7462] ? mr_mfc_find_parent+0x190/0x190 [ 294.333314][ T7462] ? mark_lock+0x94/0x320 [ 294.337772][ T7462] ? local_bh_enable+0x20/0x20 [ 294.342571][ T7462] ? preempt_schedule+0xbc/0xd0 [ 294.347463][ T7462] ? ipmr_mfc_add+0x212d/0x2d40 [ 294.352458][ T7462] ? preempt_schedule+0xbc/0xd0 [ 294.357341][ T7462] ? schedule_preempt_disabled+0x20/0x20 [ 294.363188][ T7462] ? lock_chain_count+0x20/0x20 [ 294.368075][ T7462] mr_mfc_find_any_parent+0xb6/0x1e0 [ 294.373395][ T7462] ? local_bh_enable+0x20/0x20 [ 294.378203][ T7462] ip_mr_forward+0x24c/0xf90 [ 294.382845][ T7462] ipmr_mfc_add+0x23cc/0x2d40 [ 294.387599][ T7462] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 294.392741][ T7462] ? __lock_acquire+0x7d10/0x7d10 [ 294.398044][ T7462] ip_mroute_setsockopt+0xeaf/0x1250 [ 294.403382][ T7462] ? ipmr_rule_default+0x70/0x70 [ 294.408404][ T7462] ? __might_sleep+0xf0/0xf0 [ 294.413125][ T7462] ip_setsockopt+0x568/0x3130 [ 294.417849][ T7462] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 294.423260][ T7462] ? aa_sk_perm+0x7dc/0x910 [ 294.427811][ T7462] ? aa_af_perm+0x340/0x340 [ 294.432347][ T7462] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 294.438190][ T7462] ? aa_sock_opt_perm+0x74/0x100 [ 294.443176][ T7462] ? sock_common_setsockopt+0x32/0xb0 [ 294.445699][ T7449] loop0: detected capacity change from 0 to 32768 [ 294.448609][ T7462] ? raw_setsockopt+0xc5/0x180 [ 294.448638][ T7462] ? sock_common_recvmsg+0x1c0/0x1c0 [ 294.465224][ T7462] __sys_setsockopt+0x2bf/0x3d0 [ 294.470127][ T7462] __x64_sys_setsockopt+0xb1/0xc0 [ 294.475284][ T7462] do_syscall_64+0x4c/0xa0 [ 294.479735][ T7462] ? clear_bhb_loop+0x30/0x80 [ 294.484557][ T7462] ? clear_bhb_loop+0x30/0x80 [ 294.489281][ T7462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.495291][ T7462] RIP: 0033:0x7f91177cc819 [ 294.499748][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.519449][ T7462] RSP: 002b:00007f9115a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.528087][ T7462] RAX: ffffffffffffffda RBX: 00007f9117a45fa0 RCX: 00007f91177cc819 [ 294.536283][ T7462] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 294.544391][ T7462] RBP: 00007f9117862c91 R08: 000000000000003c R09: 0000000000000000 [ 294.552392][ T7462] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 294.560679][ T7462] R13: 00007f9117a46038 R14: 00007f9117a45fa0 R15: 00007ffff2509568 [ 294.568699][ T7462] [ 294.578115][ T7462] [ 294.580658][ T7462] ============================= [ 294.585765][ T7462] WARNING: suspicious RCU usage [ 294.590962][ T7462] syzkaller #0 Not tainted [ 294.595508][ T7462] ----------------------------- [ 294.601027][ T7462] include/linux/rhashtable.h:369 suspicious rcu_dereference_check() usage! [ 294.609968][ T7462] [ 294.609968][ T7462] other info that might help us debug this: [ 294.609968][ T7462] [ 294.620544][ T7462] [ 294.620544][ T7462] rcu_scheduler_active = 2, debug_locks = 1 [ 294.628985][ T7462] 1 lock held by syz.5.716/7462: [ 294.634236][ T7462] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 294.644907][ T7462] [ 294.644907][ T7462] stack backtrace: [ 294.654533][ T7462] CPU: 1 PID: 7462 Comm: syz.5.716 Not tainted syzkaller #0 [ 294.661944][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 294.672200][ T7462] Call Trace: [ 294.675686][ T7462] [ 294.678637][ T7462] dump_stack_lvl+0x188/0x250 [ 294.683345][ T7462] ? load_image+0x400/0x400 [ 294.688025][ T7462] ? show_regs_print_info+0x20/0x20 [ 294.693285][ T7462] ? lockdep_rcu_suspicious+0x110/0x180 [ 294.698855][ T7462] ? local_bh_enable+0x20/0x20 [ 294.703650][ T7462] rhltable_lookup+0x52a/0x7c0 [ 294.708532][ T7462] ? local_bh_enable+0x20/0x20 [ 294.713339][ T7462] ? mr_mfc_find_parent+0x190/0x190 [ 294.718574][ T7462] ? mark_lock+0x94/0x320 [ 294.722960][ T7462] ? local_bh_enable+0x20/0x20 [ 294.727747][ T7462] ? preempt_schedule+0xbc/0xd0 [ 294.732622][ T7462] ? ipmr_mfc_add+0x212d/0x2d40 [ 294.737506][ T7462] ? preempt_schedule+0xbc/0xd0 [ 294.742484][ T7462] ? schedule_preempt_disabled+0x20/0x20 [ 294.748263][ T7462] ? lock_chain_count+0x20/0x20 [ 294.753142][ T7462] mr_mfc_find_any_parent+0xb6/0x1e0 [ 294.758472][ T7462] ? local_bh_enable+0x20/0x20 [ 294.763289][ T7462] ip_mr_forward+0x24c/0xf90 [ 294.768045][ T7462] ipmr_mfc_add+0x23cc/0x2d40 [ 294.772855][ T7462] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 294.777824][ T7462] ? __lock_acquire+0x7d10/0x7d10 [ 294.782944][ T7462] ip_mroute_setsockopt+0xeaf/0x1250 [ 294.788349][ T7462] ? ipmr_rule_default+0x70/0x70 [ 294.793370][ T7462] ? __might_sleep+0xf0/0xf0 [ 294.798009][ T7462] ip_setsockopt+0x568/0x3130 [ 294.802729][ T7462] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 294.808147][ T7462] ? aa_sk_perm+0x7dc/0x910 [ 294.812690][ T7462] ? aa_af_perm+0x340/0x340 [ 294.817227][ T7462] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 294.823071][ T7462] ? aa_sock_opt_perm+0x74/0x100 [ 294.828214][ T7462] ? sock_common_setsockopt+0x32/0xb0 [ 294.833610][ T7462] ? raw_setsockopt+0xc5/0x180 [ 294.838403][ T7462] ? sock_common_recvmsg+0x1c0/0x1c0 [ 294.843731][ T7462] __sys_setsockopt+0x2bf/0x3d0 [ 294.848616][ T7462] __x64_sys_setsockopt+0xb1/0xc0 [ 294.853650][ T7462] do_syscall_64+0x4c/0xa0 [ 294.858160][ T7462] ? clear_bhb_loop+0x30/0x80 [ 294.863032][ T7462] ? clear_bhb_loop+0x30/0x80 [ 294.867878][ T7462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 294.873889][ T7462] RIP: 0033:0x7f91177cc819 [ 294.878333][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 294.897947][ T7462] RSP: 002b:00007f9115a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 294.906629][ T7462] RAX: ffffffffffffffda RBX: 00007f9117a45fa0 RCX: 00007f91177cc819 [ 294.914859][ T7462] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 294.922834][ T7462] RBP: 00007f9117862c91 R08: 000000000000003c R09: 0000000000000000 [ 294.930898][ T7462] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 294.939059][ T7462] R13: 00007f9117a46038 R14: 00007f9117a45fa0 R15: 00007ffff2509568 [ 294.947451][ T7462] [ 294.962637][ T7462] [ 294.965321][ T7462] ============================= [ 294.970479][ T7462] WARNING: suspicious RCU usage [ 294.975510][ T7462] syzkaller #0 Not tainted [ 294.980860][ T7462] ----------------------------- [ 294.985861][ T7462] include/linux/rhashtable.h:614 suspicious rcu_dereference_check() usage! [ 294.994578][ T7462] [ 294.994578][ T7462] other info that might help us debug this: [ 294.994578][ T7462] [ 295.042312][ T7462] [ 295.042312][ T7462] rcu_scheduler_active = 2, debug_locks = 1 [ 295.062030][ T7462] 1 lock held by syz.5.716/7462: [ 295.068441][ T7462] #0: ffffffff8d43cb48 (rtnl_mutex){+.+.}-{3:3}, at: ip_mroute_setsockopt+0x136/0x1250 [ 295.078463][ T7462] [ 295.078463][ T7462] stack backtrace: [ 295.086991][ T7462] CPU: 1 PID: 7462 Comm: syz.5.716 Not tainted syzkaller #0 [ 295.094513][ T7462] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 295.104596][ T7462] Call Trace: [ 295.107980][ T7462] [ 295.110920][ T7462] dump_stack_lvl+0x188/0x250 [ 295.115604][ T7462] ? load_image+0x400/0x400 [ 295.120135][ T7462] ? show_regs_print_info+0x20/0x20 [ 295.125377][ T7462] ? lockdep_rcu_suspicious+0x110/0x180 [ 295.130936][ T7462] ? local_bh_enable+0x20/0x20 [ 295.135749][ T7462] rhltable_lookup+0x61e/0x7c0 [ 295.140545][ T7462] ? local_bh_enable+0x20/0x20 [ 295.145515][ T7462] ? mr_mfc_find_parent+0x190/0x190 [ 295.150729][ T7462] ? mark_lock+0x94/0x320 [ 295.155067][ T7462] ? local_bh_enable+0x20/0x20 [ 295.159851][ T7462] ? preempt_schedule+0xbc/0xd0 [ 295.164800][ T7462] ? ipmr_mfc_add+0x212d/0x2d40 [ 295.169666][ T7462] ? preempt_schedule+0xbc/0xd0 [ 295.174645][ T7462] ? schedule_preempt_disabled+0x20/0x20 [ 295.180710][ T7462] ? lock_chain_count+0x20/0x20 [ 295.186073][ T7462] mr_mfc_find_any_parent+0xb6/0x1e0 [ 295.191541][ T7462] ? local_bh_enable+0x20/0x20 [ 295.196399][ T7462] ip_mr_forward+0x24c/0xf90 [ 295.201100][ T7462] ipmr_mfc_add+0x23cc/0x2d40 [ 295.205794][ T7462] ? ipmr_mfc_delete+0x5f0/0x5f0 [ 295.210843][ T7462] ? __lock_acquire+0x7d10/0x7d10 [ 295.215892][ T7462] ip_mroute_setsockopt+0xeaf/0x1250 [ 295.221179][ T7462] ? ipmr_rule_default+0x70/0x70 [ 295.226126][ T7462] ? __might_sleep+0xf0/0xf0 [ 295.230713][ T7462] ip_setsockopt+0x568/0x3130 [ 295.235567][ T7462] ? ipv4_pktinfo_prepare+0x6f0/0x6f0 [ 295.241030][ T7462] ? aa_sk_perm+0x7dc/0x910 [ 295.245640][ T7462] ? aa_af_perm+0x340/0x340 [ 295.250695][ T7462] ? asm_sysvec_reschedule_ipi+0x16/0x20 [ 295.256349][ T7462] ? aa_sock_opt_perm+0x74/0x100 [ 295.261301][ T7462] ? sock_common_setsockopt+0x32/0xb0 [ 295.266670][ T7462] ? raw_setsockopt+0xc5/0x180 [ 295.271606][ T7462] ? sock_common_recvmsg+0x1c0/0x1c0 [ 295.277013][ T7462] __sys_setsockopt+0x2bf/0x3d0 [ 295.281992][ T7462] __x64_sys_setsockopt+0xb1/0xc0 [ 295.287152][ T7462] do_syscall_64+0x4c/0xa0 [ 295.291608][ T7462] ? clear_bhb_loop+0x30/0x80 [ 295.296496][ T7462] ? clear_bhb_loop+0x30/0x80 [ 295.301186][ T7462] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 295.307165][ T7462] RIP: 0033:0x7f91177cc819 [ 295.311753][ T7462] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 295.331559][ T7462] RSP: 002b:00007f9115a26028 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 295.340086][ T7462] RAX: ffffffffffffffda RBX: 00007f9117a45fa0 RCX: 00007f91177cc819 [ 295.348140][ T7462] RDX: 00000000000000d2 RSI: 0000000000000000 RDI: 0000000000000005 [ 295.356190][ T7462] RBP: 00007f9117862c91 R08: 000000000000003c R09: 0000000000000000 [ 295.364353][ T7462] R10: 0000200000000200 R11: 0000000000000246 R12: 0000000000000000 [ 295.372495][ T7462] R13: 00007f9117a46038 R14: 00007f9117a45fa0 R15: 00007ffff2509568 [ 295.380686][ T7462] [ 295.505324][ T4393] BTRFS: device fsid 395ef67a-297e-477c-816d-cd80a5b93e5d devid 1 transid 8 /dev/loop0 scanned by udevd (4393)