last executing test programs: 6m54.474515028s ago: executing program 3 (id=90): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = memfd_create(&(0x7f0000000600)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\xfd\x89\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0x0) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = syz_open_dev$dvb_demux(&(0x7f0000001e00), 0x0, 0x2000) ioctl$DVB_DEMUX_DMX_SET_FILTER(r1, 0x403c6f2b, &(0x7f0000001e40)={0x4, {"0dbad96fff01000008ff002084000100", "3dfab043e15fad27a639f105b5e9f977", "a7c947420000000000000000ff4a70f3"}, 0x4000c, 0x5}) preadv(r1, &(0x7f0000000480)=[{&(0x7f0000000180)=""/1, 0x1}], 0x1, 0x7, 0xd) ioctl$DVB_DEMUX_DMX_START(r1, 0x6f29) 6m46.806157998s ago: executing program 3 (id=108): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./bus\x00', 0x289c2, 0x1) fcntl$setlease(r3, 0x400, 0x1) 6m45.648148355s ago: executing program 3 (id=110): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000500)='./file1\x00', 0x0, &(0x7f0000000200), 0x1, 0x4c9, &(0x7f00000017c0)="$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") r0 = open(&(0x7f0000000140)='./file1\x00', 0x66842, 0x21) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) creat(&(0x7f0000000580)='./bus\x00', 0x9e) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1084, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./bus\x00', 0x8840, 0xa2) r2 = openat(0xffffffffffffff9c, &(0x7f0000004400)='./bus\x00', 0x1c1002, 0x12) write(r2, &(0x7f0000000100)='?', 0x1) sendfile(r2, r1, 0x0, 0x3ffff) ioctl$EXT4_IOC_SETFSUUID(r0, 0x4008662c, 0x0) 6m44.762328296s ago: executing program 3 (id=115): socket$inet6_tcp(0xa, 0x1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff018000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_DIRENTPLUS(r3, &(0x7f0000000380)=ANY=[@ANYRES64=r0], 0x138) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000004500), 0x0, &(0x7f0000000640)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r2}}) 6m43.874128327s ago: executing program 3 (id=121): epoll_create1(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6m42.664393055s ago: executing program 32 (id=121): epoll_create1(0x0) openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$inet_udp(0x2, 0x2, 0x0) socket$inet(0x2b, 0x801, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) 6m23.613155182s ago: executing program 4 (id=174): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) connect$inet(r1, &(0x7f0000000010)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept(r0, 0x0, 0x0) setsockopt$inet_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) setsockopt$inet_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000020), 0x4) setsockopt$inet_tcp_TLS_RX(r2, 0x11a, 0x2, &(0x7f0000000030)=@gcm_128={{0x303}}, 0x28) sendmsg$inet(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)='hello world', 0xb}], 0x1, &(0x7f00000001c0)=[@ip_ttl={{0x10, 0x11a, 0x1, 0x15}}], 0x10}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/1, 0x1}, 0x0) recvmsg(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000300)=""/256, 0x100}], 0x1, &(0x7f0000000400)=""/16, 0x10}, 0x0) 6m21.99504897s ago: executing program 4 (id=181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0xa5, 0x5, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd25, 0x0, {0x60, 0x0, 0x0, r6, {0x0, 0x2}, {0x0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0xfff, 0xb}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x55}, 0x4000) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) 6m20.442149097s ago: executing program 4 (id=186): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}, 0x1, 0x0, 0x0, 0x800}, 0xc044) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[], 0x2c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000200)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010029bd7000ffdbdf250800000008000300", @ANYRES32=r6], 0x28}, 0x1, 0x0, 0x0, 0x4cca9349ed9d3bc}, 0x848) 6m17.834334588s ago: executing program 4 (id=192): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) r0 = open(&(0x7f0000000040)='./file2\x00', 0x181042, 0x124) write$P9_RREADDIR(r0, &(0x7f00000001c0)={0x2a, 0x29, 0x3, {0x5, [{{0x10, 0x9, 0x5}, 0x7, 0x7, 0xf45b3bccc711007a, './file0'}]}}, 0xfffffceb) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000200)='./bus\x00', 0x0, 0x1000, 0x0) r1 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0xa27b734c1a0bc97) ioctl$LOOP_SET_STATUS64(r1, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x0, 0x0, 0x0, 0x4, 0x4, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000007700000c00002000", "036c47c678082004cb59d654cb9b1b165263bdbcef549ba197fce47ddfdd753abd950100172a00ffffff00f7ffffff000000f3e7f20000000200000000000600", "b7726736181c208220fffff2ff00000000800000000e002d2559ae66aea76e00"}) lsetxattr$trusted_overlay_nlink(0x0, &(0x7f0000000340), 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./sys\x00', 0x29) mount(0x0, 0x0, &(0x7f0000000180)='sysfs\x00', 0x0, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000480)='./sys/class/udc/dummy_udc.0/soft_connect\x00', 0x81, 0x0) openat$vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x208000, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000080), r2) 6m15.550658171s ago: executing program 4 (id=202): timer_create(0x0, &(0x7f0000000200)={0x0, 0x21, 0x2, @tid=0xffffffffffffffff}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x404, &(0x7f0000002140)={{'fd', 0x3d, r0}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r0, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000001dc0)={0x50, 0x0, r1, {0x7, 0x2b, 0x0, 0x2b418842, 0x6}}, 0x50) syz_fuse_handle_req(r0, 0x0, 0x0, 0x0) syz_fuse_handle_req(r0, &(0x7f0000008e80)="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", 0x2000, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x90, 0x0, 0xffffffffffffffff, {0x5, 0x1, 0x0, 0x4000000000804, 0xfffffffd, 0x6, {0x2, 0x0, 0x7, 0x120000000000, 0x2000000000000db4, 0x85, 0x8, 0x6, 0x200c, 0xa000, 0xe44, r2, r3, 0x40fe, 0x81}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0/file1\x00', 0x880cc2, 0x20) 6m14.970334935s ago: executing program 4 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x2, 0x9}, &(0x7f0000000040)=0xc) 6m14.32263538s ago: executing program 33 (id=205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6a72c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r4, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000000)=@sack_info={r5, 0x2, 0x9}, &(0x7f0000000040)=0xc) 3m53.064255764s ago: executing program 1 (id=471): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x6}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000400)=@newqdisc={0x34, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@newqdisc={0x58, 0x28, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfb, {0x0, 0x0, 0x0, r10, {0xfff3}, {0xffff, 0xffff}, {0xffef, 0x1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x82, 0x3, 0x4, 0xffff, 0x7f, 0x7fffffff, 0x1, 0x40, 0x2}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0xdc}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@newqdisc={0x2c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x2, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x70000}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) 3m49.642554654s ago: executing program 1 (id=478): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) r3 = msgget$private(0x0, 0x0) msgsnd(r3, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r1], 0x401, 0x800) msgrcv(r3, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) 3m48.53754862s ago: executing program 1 (id=480): set_mempolicy(0x3, &(0x7f0000000040)=0xfff, 0x5) syz_clone(0x200111, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = shmget$private(0x0, 0x1000, 0x78000000, &(0x7f0000ffc000/0x1000)=nil) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./sys\x00', &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./sys/devices/system/cpu/smt/control\x00', 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x7, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000e5000300000000000600000000000000250000001000000006000000faffffff95"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) sendto(r1, &(0x7f0000000180)="98cc2badb312071f5588bd2ed1c45d19af837b456b97621703d8b634642af64c63df4f9c858c7e953e62ace07bc4b303e6a8ea98d5149d1c250511f402de4b1b422d6e0fcd73a0f27656e41f4f94f3bace4f", 0x52, 0x4000, 0x0, 0x0) write(r1, &(0x7f0000000140)='off', 0x3) getgroups(0x1, &(0x7f0000000000)=[0xee00]) shmctl$IPC_SET(r0, 0x1, &(0x7f00000003c0)={{0x1, 0x0, r2, 0x0, 0x0, 0x65, 0x10}, 0xb, 0x8000, 0xb0f0, 0x2, 0x0, 0x0, 0x6}) shmctl$SHM_UNLOCK(r0, 0xc) shmat(r0, &(0x7f0000ffb000/0x4000)=nil, 0x4000) r3 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./sys/devices/system/memory/memory0/state\x00', 0x1, 0x0) write(r3, &(0x7f0000000240)='online', 0x6) ioctl$KVM_RUN(r3, 0xae80, 0x0) 3m45.693081107s ago: executing program 1 (id=491): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) process_vm_readv(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) socket$nl_route(0x10, 0x3, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r3 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r3, 0x6b, 0x4, &(0x7f0000000000)=0xfffbffff, 0x4) 3m39.026470033s ago: executing program 1 (id=501): r0 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x401c2, 0x0) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ftruncate(r0, 0x8800000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r6, &(0x7f00000034c0)=[{{0x0, 0x0, &(0x7f0000001e40)=[{&(0x7f0000000b80)=""/4096, 0x20001b80}, {&(0x7f0000001b80)=""/112, 0x70}], 0x2, 0x0, 0xa0028cb4}}], 0x40000000000013c, 0x700, 0x0) sendfile(r5, r0, 0x0, 0x578410eb) 3m37.365475812s ago: executing program 1 (id=503): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) 3m22.283317135s ago: executing program 34 (id=503): syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x11, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r4 = openat$uhid(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$UHID_CREATE(r4, &(0x7f0000000240)={0x0, {'syz0\x00', 'syz0\x00', 'syz0\x00', &(0x7f0000000040)=""/2, 0x2}}, 0x11c) 1m3.349581104s ago: executing program 6 (id=760): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x401, 0x800) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgrcv(r1, &(0x7f0000000180)={0x0, ""/130}, 0x8a, 0x0, 0x2000) 1m2.894355475s ago: executing program 6 (id=762): r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file2\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_procfs(0x0, &(0x7f0000000140)='ns\x00') getdents(r4, &(0x7f0000001fc0)=""/184, 0xb8) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x87) connect$inet6(r5, &(0x7f0000000500)={0xa, 0x4e23, 0x6, @mcast1, 0x5}, 0x1c) r6 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) fcntl$setlease(r6, 0x400, 0x1) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='io.stat\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000440), 0x1000a) sendfile(r5, r7, &(0x7f0000000080)=0x5, 0xffff) ioctl$XFS_IOC_EXCHANGE_RANGE(r0, 0x40285881, &(0x7f00000000c0)={0xffffffffffffffff, 0x0, 0x1ff, 0x1000, 0x0, 0x2}) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x44045}, 0x10) close(0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004000}, 0x4000) 1m1.896023059s ago: executing program 6 (id=766): r0 = socket$nl_generic(0x10, 0x3, 0x10) mkdir(0x0, 0x11e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x5, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$BLKTRACESTOP(0xffffffffffffffff, 0x1275, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) fspick(0xffffffffffffffff, 0x0, 0x0) kcmp$KCMP_EPOLL_TFD(0x0, 0x0, 0x7, r1, 0x0) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r3, 0x84, 0x4, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, 0x0, 0x0) r4 = syz_open_procfs(0x0, &(0x7f0000000180)='net/ipv6_route\x00') pread64(r4, &(0x7f0000003b00)=""/195, 0xc3, 0x591f) sendmsg$IPVS_CMD_GET_SERVICE(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES16, @ANYBLOB="11072100ce145ba56a46191eaf185f69eff4c2ef3c431db62580942b3a9b9ef263220508723360d0dc779ccb3fdd7c43a566f0e03f9fab050aa5c7c15680762da29ef9604c5a1adffbdf357a770b2a4216132d8a"], 0x14}, 0x1, 0x0, 0x0, 0x24004894}, 0x0) 59.005682926s ago: executing program 6 (id=768): socket$inet_sctp(0x2, 0x5, 0x84) r0 = socket(0x2, 0x80805, 0x0) recvmsg$kcm(r0, &(0x7f0000002840)={&(0x7f0000000200)=@pppol2tp, 0x80, 0x0, 0x0, &(0x7f0000002740)=""/243, 0xf3}, 0x3dfdbfbdd7a869e0) r1 = socket(0xa, 0x3, 0x3a) openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) setsockopt$MRT6_FLUSH(r1, 0x29, 0xd4, &(0x7f0000000080)=0xa, 0x4) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f00000004c0), 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000540)='./file0\x00', 0x175a978679bbbe1d, 0x80a0a1240160183d) r4 = open$dir(&(0x7f00000000c0)='./file0\x00', 0x40000, 0x4) renameat(r3, &(0x7f0000000080)='./file0\x00', r4, &(0x7f0000000180)='./file1\x00') mkdir(&(0x7f0000000240)='./file1\x00', 0x8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=ANY=[@ANYBLOB="640000000206010800000000000000000100000a16000300686173683a6e65742c706f72742c6e6574000000050001000700000005000500020000000900020073797a310000000005000400000000001400078008000840000000f108000640"], 0x64}, 0x1, 0x0, 0x0, 0x2006c0c4}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000000406030000000000000000000000000005000100070000008b434b420557e3bc2663192cab715837"], 0x1c}}, 0x40000) 56.476810806s ago: executing program 6 (id=772): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x28000600) r1 = msgget$private(0x0, 0x0) msgsnd(r1, &(0x7f0000000000)=ANY=[@ANYRESDEC], 0x8, 0x0) msgsnd(0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT], 0x401, 0x800) msgrcv(r1, 0x0, 0x0, 0x969edffe39095fd4, 0x3800) msgrcv(r1, &(0x7f0000000180)={0x0, ""/130}, 0x8a, 0x0, 0x2000) 55.274369744s ago: executing program 6 (id=774): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 39.878990865s ago: executing program 35 (id=774): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x1c, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}]}, 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x24, 0x0, 0xd1bd17c4b9ef5e5b, 0x70bd26, 0x25dfdbff, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x90) ioctl$RTC_UIE_ON(0xffffffffffffffff, 0x7003) r3 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r3, 0x40946400, &(0x7f0000000600)={'c6xdigio\x00', [0x7c, 0x1f, 0x0, 0xc, 0x10, 0x4, 0x100002, 0x7, 0x5, 0x100, 0x4, 0x1, 0x1, 0x20003, 0x7ff, 0x8, 0x83, 0x8, 0x1010003, 0x0, 0x18, 0x0, 0x3, 0xffffffff, 0xb, 0xfffffff9, 0x38, 0xc, 0x10000006, 0x664, 0xfffffff8]}) ioctl$COMEDI_INSNLIST(r3, 0x8008640b, &(0x7f00000edb40)={0x0, 0x0}) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000100)={0x2b, 0x1e, 0x0, 0x2, 0x8, 0xa9, 0x5, 0x2, 0x1}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) 22.527296092s ago: executing program 5 (id=814): syz_mount_image$vfat(&(0x7f0000000140), &(0x7f0000000000)='./file1\x00', 0x0, &(0x7f0000000900)={[{@fat=@nfs}, {@fat=@dos1xfloppy}, {@fat=@flush}, {@uni_xlateno}, {@utf8}, {@numtail}, {@uni_xlate}, {@uni_xlate}, {@numtail}, {@iocharset={'iocharset', 0x3d, 'cp869'}}, {@shortname_mixed}, {@fat=@codepage={'codepage', 0x3d, '932'}}, {@iocharset={'iocharset', 0x3d, 'cp850'}}, {@iocharset={'iocharset', 0x3d, 'iso8859-6'}}, {@shortname_lower}, {@fat=@check_strict}]}, 0x1, 0x38c, &(0x7f0000000380)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$EVIOCGKEY(0xffffffffffffffff, 0x80404518, &(0x7f0000000c40)=""/4096) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) syz_io_uring_setup(0x3af6, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000167000/0x1000)=nil, 0x1000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xe4776000) r3 = socket$inet(0x2, 0xa, 0xd) socket(0x10, 0x803, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="180000005600230d00"], 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x4040000) r4 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x141442, 0x40) syz_mount_image$erofs(&(0x7f0000000000), &(0x7f00000001c0)='./file2\x00', 0x0, &(0x7f00000000c0)=ANY=[], 0x20, 0x1a8, &(0x7f00000003c0)="$eJzsmL9P20AUx79nO7ZSVUrXdmmlRko61LGdtmoGhswMIIFAbETERAGHoMRDkgnEH8HMyMQcseT/gAGYWMLGxGBk5yyf84OAFH6J9xmev3f3cvfuRflGMgiC+LBcXd5enGTSSV9/Rhoan7+WoxxJyO+m7n6dVRdOD42b825vvjC8HwPgeY8/XwHQK8pw+djz4p9O8+cypFAnxPVVMOhcr0PCCtc2GNa43hJ03c/X9c2qY+sbdafsC8MPph8sP+SH6+vvM5SF+piw3mx3tkuOYzdmJRSMLE3rX78oYU6oT/y+wt4YUf9gQoLJdR4MS1z/hxb2ZtAS4f7flGh/OXb/cDTrRryU2MPzHvE1NSUn8W5bR2KMYDjmv4i3Uc9ricifvCOGjOBPiuAfObe2m2u2O7+rtVLFrtg7lpX/Z/wxjL9WLjCiQXzA/5KBP30S9k9MyFXV0ABbJddtmCpTESirpcFtWOMcVw38T0L256BqxudEgv+DL+yH/8jKwMHEagmCIAiCIAiCIAiCIAiCIJ6EFh9+BwvegsYojExZi0H2fQAAAP//Z6po3A==") openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x40) mkdir(&(0x7f0000000000)='my_tracefs\x00', 0x1ff) syslog(0x4, &(0x7f0000000080)=""/113, 0x71) syz_emit_ethernet(0x0, 0x0, 0x0) fallocate(r4, 0x0, 0xfff, 0x9) ioctl$VFAT_IOCTL_READDIR_BOTH(r3, 0x82307201, &(0x7f0000000a00)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 22.441582414s ago: executing program 0 (id=815): bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000940)=ANY=[], 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext2\x00', &(0x7f0000000000)='./bus\x00', 0x59000, &(0x7f00000008c0)={[{@quota}, {@max_dir_size_kb}, {@barrier_val={'barrier', 0x3d, 0x5}}, {@grpquota}, {@test_dummy_encryption_v1}, {@jqfmt_vfsv1}]}, 0x3, 0x448, &(0x7f0000000440)="$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") prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=ANY=[@ANYBLOB], 0x1c}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) r4 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r4, 0x7003) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000840)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) ioctl$RTC_AIE_ON(r4, 0x7001) ioctl$RTC_ALM_SET(r4, 0x40247007, &(0x7f0000000040)={0x5, 0xc, 0x16, 0x3, 0x4, 0x0, 0x3, 0x56, 0xffffffffffffffff}) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000180), 0x28100, 0x0) io_setup(0x239f, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x401}, 0x1c) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200010, &(0x7f00000004c0)=ANY=[], 0x1, 0x25a, &(0x7f0000000240)="$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") 20.789214663s ago: executing program 0 (id=817): bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) openat$comedi(0xffffffffffffff9c, 0x0, 0x88000, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) mlockall(0x2) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f00000001c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='quota,grpquota_block_hardli']) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x183042, 0x20) r1 = shmget$private(0x0, 0x400000, 0x8, &(0x7f000000e000/0x400000)=nil) shmctl$SHM_LOCK(r1, 0xb) shmat(r1, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_UNLOCK(r1, 0xc) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x0, 0x0, 0x0, 0x41000004, &(0x7f0000000040)) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, &(0x7f0000000240)) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) socket$packet(0x11, 0x3, 0x300) 19.999415582s ago: executing program 0 (id=819): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpgrp(0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, 0x0) 19.050453014s ago: executing program 0 (id=820): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/igmp\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000080)={0xb2ad, 0x2, 0x7, 0x5, 0x1}) prlimit64(0x0, 0xe, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r1, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x870bd2c, 0x25dfdbfc, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}]}]}, 0x2c}}, 0x890) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r5 = epoll_create1(0x0) r6 = signalfd4(0xffffffffffffffff, &(0x7f0000000080)={[0x1003ffffffc]}, 0x8, 0x0) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r6, &(0x7f0000000140)) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x800000000000, 0x1}, 0x0) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f00000002c0)) setxattr$incfs_metadata(&(0x7f0000000040)='./cgroup.cpu/cpuset.cpus\x00', &(0x7f00000000c0), 0x0, 0x0, 0x0) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x8000, 0x1) r8 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r9 = dup2(r8, r4) ioctl$BLKTRACETEARDOWN(r9, 0x1276, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) 13.597451651s ago: executing program 2 (id=821): socket(0x10, 0x803, 0x0) r0 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8042, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fchdir(0xffffffffffffffff) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$P9_RSTATu(r0, &(0x7f00000007c0)={0x2f9, 0x2, 0x42, {{0x500, 0x1b8, 0x0, 0xffffff25, {}, 0x0, 0x0, 0x3, 0x0, 0x1b, '\x04nodev{evoo~\x059\xc6\x00\x05\x00\x007\xd9:\x8b\x92\x00\x00\x00', 0x38, 'pJ\x86\xce\xc6\x02\x00}\xfag>\xff\xeb\t\xb55\x1f[\xde\x05@\x00\x00\x00\x00\x18{\x82\x00\xb5\x00\x00+Y_\xcb\x14\x03CT\xb9\xfd\x9e\xf1\x96\xa5\x1c\xd5\x15z\xdc\x81\x03\xb4\x94\xe1', 0x1d, '\xd2\x99\x98\x80\x14\x98l\xe9\x82\xcf\xc2m\xd7\xc5\x00\xf0L\xd8_*p\xf5\xe9\x93\x0e\x97\xa5\x9ad', 0x115, '\xf8\xf6i\xfbqm\xcf1^%\xca\xf3\x85@\x9a\xc6[\x94\bg\x8c,;\x9e\x1dR\xc3l\xde{\xa4\xa4\x00\xb4\xb0\xb4\xf1t\xa6f\xa8R\x9aE\x1b4\a\xdb\xda\xb2\x88K\xaf\x05\x00\x00\x00\x00\x00\x00\x00G\xec!\xca\xbf\xf2\x0f\x9c\x1c\xbe6\xf4\xfd\x1aL\xc2\x80\xe8\xe2\x89\xdad\x9a7\x00L\xc3(\f\xaa\xdaZ|`?\x14\xfe\'\xf3\xcetAj6\xc8\x96\x06 ex\xebKs\xa2\xb4\xc8\xad\x89C\xbd\xec\x8e\xdfw\xff\x8b\x05\x94so\x15\xde%\f\xdc\x0e\xd3\x99\xb9\xd0\xd7b\x83g\x9f$c\x90\x0e6!\xd1\xc3\x83\nv\x15M\xff\xc9\x8d\xba6\xd8\xf2Gv\xf3-L\xe8\x18\xff\xcd\n7?\xa1\"\x88i*\xfc\x12G\x9fm\xb3k@`\xf5\x8e7\xfdE\x05\x8bg\x86\xe5\xe6\'\x1f\xac\b\xa3^O\xe5\xf5\xdf\xbc0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f00000bd000), 0x318, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = fanotify_init(0x40, 0x40000) readv(r6, 0x0, 0x0) r7 = openat$dir(0xffffffffffffff9c, &(0x7f0000000580)='.\x00', 0xa880, 0x97) fanotify_mark(r6, 0x1, 0x40001019, r7, 0x0) getdents64(r7, 0x0, 0x0) capset(&(0x7f0000000100)={0x20071026}, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x81, 0xfffffffb, 0xfffffffd}) 13.308278588s ago: executing program 5 (id=822): socket$nl_netfilter(0x10, 0x3, 0xc) setns(0xc9, 0x0) r0 = socket(0x8, 0x5, 0x5) r1 = socket$inet_udp(0x2, 0x2, 0x0) r2 = io_uring_setup(0x4a86, &(0x7f0000000300)={0x0, 0x4178, 0x40, 0x8001002, 0x3d7}) memfd_create(&(0x7f0000000040)='rootmode', 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x68}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x268}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) munmap(&(0x7f00003fe000/0xc00000)=nil, 0xc00000) close_range(r2, 0xffffffffffffffff, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r1, 0x0, 0x61, &(0x7f00000000c0)={'filter\x00', 0x2, [{}, {}]}, 0x48) ioctl$sock_bt_hidp_HIDPCONNDEL(r0, 0x40106183, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r5, 0x11c, 0x3, 0x0, &(0x7f0000000040)) syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000180)='./file1\x00', 0x2000c16, &(0x7f0000000280)={[{@usrquota}, {@nodelalloc}]}, 0xff, 0x25e, &(0x7f0000000e80)="$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") r6 = openat(0xffffffffffffff9c, 0x0, 0x101042, 0x65) ioctl$FS_IOC_SETFLAGS(r6, 0x40086602, &(0x7f0000000000)) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x8a541, 0x52) r8 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_SET(r8, 0x4b72, &(0x7f00000001c0)={0x0, 0x20000, 0x8, 0x8, 0x200, &(0x7f0000000200)="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"}) pwrite64(r7, &(0x7f0000000140)="f6", 0xffffff07, 0x8000c61) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) 11.058346911s ago: executing program 2 (id=823): r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) migrate_pages(0x0, 0x71, 0x0, 0xffffffffffffffff) r2 = syz_ublk_setup_io_uring(0x20, &(0x7f0000000040)={0x0, 0x0, 0x100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0, &(0x7f00000004c0)=0x0) r6 = syz_ublk_add_dev(r2, r3, r4, r5, &(0x7f0000000200)={0x2e, 0x0, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f0000000500)=@new_dev={0x1, 0x104, 0x0, 0x0, 0x1000, 0xffffffff, 0x0, 0x0, 0xc4ddfbc9bba2bdbf}}}, &(0x7f0000000300)=0x0) r9 = syz_open_dev$ublk_chdev(&(0x7f0000002000), r6, 0x2) r10 = syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r10, 0xc1105517, &(0x7f0000000080)={{0x0, 0x0, 0xe044, 0x0, 'syz0\x00'}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x0, 'syz0\x00', 0x0}) ioctl$NBD_SET_FLAGS(r0, 0xab0a, 0x7) openat$binder_debug(0xffffffffffffff9c, &(0x7f0000000140)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) r11 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r11, 0x4018620d, &(0x7f0000000100)) r12 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r13 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$BINDER_WRITE_READ(r13, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r12, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) syz_ublk_setup_queues(r9, r8, &(0x7f0000000540)={0x0, 0x3e0e, 0x0, 0x3, 0x28e, 0x0, r2}, &(0x7f0000000b40)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x701, 0x1000, 0x2, 0x1af, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6, 0x2, 0x0, 0x32d, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x766f, 0x20, 0x1, 0x2db, 0x0, r2}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x5027, 0x2, 0x400, 0x1fe}}], 0x4, &(0x7f0000001f40)={0x2e, 0x0, 0x0, r9, 0xc0107526, 0x0, 0x20000700, 0x0, 0x1, {0x10}, 0x0, r7, '\x00', {0x3, 0xb45, 0x100104, 0x0}}, &(0x7f0000000180)) r14 = socket$phonet_pipe(0x23, 0x5, 0x2) recvmmsg(r14, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x40000003, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) 10.797664087s ago: executing program 5 (id=824): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0xf, 0x0, &(0x7f0000000000)="550449f9307d0c705f3b8ea2607849", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x9}, 0x50) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x402, 0x0) r1 = socket(0x2b, 0x1, 0xa0c7) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'lo\x00'}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r1, 0x0, 0x1) r2 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi3\x00', 0x0, 0x0) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) ioctl$COMEDI_DEVCONFIG(r2, 0x40946400, &(0x7f0000000240)={'pcl812\x00', [0x100, 0x4, 0x13600, 0x6, 0x0, 0x10005, 0x79, 0x3, 0x80008, 0x5, 0x2, 0x64, 0x7, 0x1, 0x6, 0xfd, 0x6, 0x9, 0x3, 0x7fffffff, 0xb740, 0xca9f, 0x9, 0x20001e58, 0x8, 0xf39e, 0x3, 0x1539b804, 0x7, 0x1, 0x2]}) socket(0xa, 0x3, 0x3a) openat$fuse(0xffffff9c, 0x0, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x4a, 0x0, 0x84, 0xfffffffe}) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x202, 0x5, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) getsockopt$inet_mreqn(r4, 0x0, 0x24, 0x0, 0x0) ioctl$TIOCPKT(r0, 0x5420, &(0x7f0000000040)=0x9) write$binfmt_aout(r0, 0x0, 0xff2e) ioctl$TCSETSF(r0, 0x5404, &(0x7f0000000080)={0x8, 0x2, 0x0, 0x200, 0xa, "2b35740e4f4e6c04704020dd9636bce158a556"}) socket$nl_generic(0x11, 0x3, 0x10) 10.781858367s ago: executing program 2 (id=825): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x27, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, &(0x7f0000000100)={'\x00', 0x401, 0x9, 0xa, 0xf, 0x5, 0x0}) ptrace$peeksig(0x4209, r1, 0x0, &(0x7f0000000880)) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, &(0x7f00000000c0)=0x3) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r2, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r2, 0xda90) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x10, 0x803, 0x0) capset(0x0, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) sendmsg$nl_route_sched(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x20040054) accept4(r2, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f01000000000600"], 0x0) 8.797890634s ago: executing program 5 (id=826): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000002060101000000000000000000f90003050005000a0000000900020073797a3000000000050001009f"], 0x30}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x6, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000fdffffee0000000000000000850000e32b0000"], 0x0, 0x5, 0x0, 0x0, 0x41000}, 0x94) mount$9p_rdma(&(0x7f0000000180), &(0x7f0000001400)='.\x00', &(0x7f0000001440), 0x1008840, &(0x7f0000000840)={'trans=rdma,', {'port', 0x3d, 0x4e24}}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) socket$kcm(0x2, 0xa, 0x2) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)=[{0x0}], 0x1, 0x0, 0x0, 0x7400}, 0x40000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000280)='/proc/stat\x00', 0x0, 0x0) syz_init_net_socket$llc(0x1a, 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0xffffffff, 0x8000001000000001, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x8000000000000000, 0x6, 0xffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(0xffffffffffffffff, 0xc0189377, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, 0x0, 0x4000001) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/keys\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000003540)={0x2020}, 0x2020) r5 = socket$netlink(0x10, 0x3, 0x15) writev(r5, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) syz_genetlink_get_family_id$batadv(&(0x7f0000000340), r2) r6 = fsopen(&(0x7f0000000180)='hfs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000080)='iocharset', &(0x7f00000000c0)='io#harset', 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001c0001000000000004086aa42d"], 0x30}}, 0x0) 6.327937052s ago: executing program 2 (id=827): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) read(r0, &(0x7f0000000300)=""/96, 0x60) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, &(0x7f0000000080)="100c0601000000baf775aa1b71da", 0xe, 0xfffffffffffffffe) setfsgid(0xee00) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = socket(0x10, 0x3, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = fsopen(&(0x7f00000002c0)='jffs2\x00', 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x150, 0x168, 0x9, 0x0, 0xb, 0x380, 0x250, 0x250, 0x380, 0x250, 0x3, 0x0, {[{{@ipv6={@remote, @rand_addr=' \x01\x00', [], [], 'veth0_to_bridge\x00', 'sit0\x00', {}, {}, 0x6c}, 0x6000000, 0x108, 0x150, 0x0, {0x0, 0x28e}, [@common=@inet=@ipcomp={{0x30}}, @common=@inet=@ipcomp={{0x30}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast2, 'dvmrp0\x00'}}}, {{@uncond, 0x0, 0x200, 0x230, 0x0, {}, [@common=@inet=@policy={{0x158}, {[{@ipv4=@local, [0x0, 0xff000000, 0xffffffff, 0xff000000], @ipv6=@private1, [0x0, 0x1fffffeff, 0xff000000, 0xffffff00], 0x4d6, 0x0, 0x0, 0x0, 0x10, 0x2}, {@ipv4=@remote, [0xff000000, 0xffffff00, 0xffffff00, 0xff], @ipv6=@local, [0x7f, 0xff000000, 0xffffff00, 0xff], 0x4d4, 0x34ff, 0x6c, 0x0, 0x12, 0x4}, {@ipv6=@mcast1, [0xffffffff, 0xffffffff, 0xffffffff, 0xff], @ipv6=@mcast2, [0xffffff00, 0x0, 0xffff00, 0xff000000], 0x4d2, 0x0, 0x0, 0x1, 0x0, 0xd}, {@ipv6=@ipv4={'\x00', '\xff\xff', @multicast2}, [0xffffffff, 0xffffff00], @ipv4=@rand_addr=0x64010100, [0xffffffff, 0xffffff00, 0xffffffff], 0x4d4, 0x3502, 0x32, 0x0, 0x0, 0x6}], 0xa, 0x4}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', 0x0, 0x0) ioctl$KVM_GET_MSRS_sys(r5, 0xc008ae88, &(0x7f0000000040)={0x1, 0x0, [{0xc0000082, 0x0, 0x1}]}) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007f00)=ANY=[@ANYRES8=r3], 0x228}, 0x1, 0x0, 0x0, 0x5}, 0x4000000) process_vm_readv(r1, &(0x7f0000000280)=[{&(0x7f0000000100)=""/13, 0xd}, {&(0x7f0000000180)=""/87, 0x57}], 0x2, &(0x7f0000002040)=[{&(0x7f0000000f40)=""/4096, 0x1000}, {&(0x7f0000001f40)=""/192, 0xc0}, {0x0}], 0x3, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180100002000010000000000fcdbdf2505"], 0x118}], 0x1, 0x0, 0x0, 0x20008001}, 0x0) 5.333999965s ago: executing program 2 (id=828): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) mremap(&(0x7f00004f9000/0x1000)=nil, 0x1000, 0x1000, 0x7, &(0x7f0000474000/0x1000)=nil) madvise(&(0x7f000042f000/0x800000)=nil, 0x800000, 0x15) syz_open_procfs(0x0, 0x0) 5.223096678s ago: executing program 5 (id=829): syz_genetlink_get_family_id$nl80211(&(0x7f0000005ec0), 0xffffffffffffffff) setsockopt$SO_TIMESTAMP(0xffffffffffffffff, 0x1, 0x52, &(0x7f0000000040)=0x27, 0x4) socket$inet6_udp(0xa, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002780)={0x8, {"48460b90fc8d13c46cfa284b0d231880597a2b39cb9380733e0a376e788eeeb7bba73615e185c551deef5c6ddc004384d9ecd8a3cbbbca3b5905cc01f6922feb6391c83aa6076d337510366dc8955d56f0fb8702dd28533e3eba654d674b7b8a22b6a38659a0eb9b68c2e819ae859b5d3dd8350dd5aa70218579d1b3496dd530d9a5f38c59df35967484fc2cef0b7b9849345358c3ca8ae743c5179353386a0ad062af2102806696e28be893b106415f1f78ec7a85db02bf6595f2f08ab65a271ae5eb38e5bbdeba21c3fcf9014e83a35909ec6d45f418c051304a5347b1952e3886dd7a8402e4af8348931c8fabf9de24dbfbf8545e9607461d6fda4f211b70baa1482264b7dc3915183449eb676588acd5609e613d990de7f561e235b3b812df99f90cebfe9c06bc7d3a373347e6c39d32fa6df4143d1418f7d0a24f0bec544502373248626d1c1176b09b7fb9667815c3652cbc2bd6210157f9241c17bbb10d616622568a3044d5a6c7e88728524c2a33616bf42d60de72e857735739f8a4674831e9d35779218d55ad2d8cbfb208584b43f8fa37c73987677a339ed9b509e43ad04797cd8290c932563040ba41f7ffec99d61bfb8f6016e393a792356697071ce876df23dc8fe35f3f61914d3d281133a01e761b2163665ac2503bc703d30331f63834f506f09a432e7d22e048e61bad7a664958d448d46f157f031566f025ef699f550c992190940189d1dc1ea28e24c399f12e1283a2e14ee6d4c7c7ff1a86e35cf2ff443f5f7182260671f3df8d2764daf92b6eff68d1419f179d727fd836fa9809071a3868233a85fb24e533c40d038d01917e66e51eee5ec2642cafbf215362b9d0ef431b29a206473497142b389b32b5d6fe6f4e0d153f7675e00df4614943f0ba7e3ecdcf5534749abdd19040ecfca49e93d3265957a4c0bbaa159a2185ea00676a3d49bed542c8fb2fa6046c3cae6feb0bc14b2f80be7cbb4564ada373f3770697f723fffd422c2e93a3703d29bd214f446208b51289ce667e16ce05bffafdacb195e76287b15cb65f4d07568aba02bfdd4ab5b2d681b68deb1849cbcf7de6afefb7d3bc03c786447485691169ef7a57ccffb682848c3f2b033988795ca854d0e933469eda5034586a200807f329500bbf9670a9c4c9d79b9f2c666aa2e9dddedaf148fcedd14a117b975bd32e4ef6a00f6155d8fe89a71795a0d50c2f6845ddca947f1967dac527edd88420bfb4a052ddd6397c0bd8ba004777ae2544873152dcbaed894549875c387e40efce3e572ece97369e71a54061ee02d3c773345f12baa449d7f4d75d2634bfd8004d4215d7896c9542e3f15a84ac3c086b8e9338a02fe167121707e6ce0870970f0f6821d7e50ae07a73547c25d2fbeca126fd149a70d2b8b6e39f48806fd76211fdba31c5e539fd6296258a12bf4488d89d2287854fa67d0ce3173cf784eb05e3a1ea787610059a676395fceddc7ba15188491257e6af5ef6e315d97d54156c2898d2c37533508e08ee1517372b6d52ff3f281f57fb5ada9e27e6aa1f82badae0d1eb41b126ae615d7cf1e6b101a187c472845b90c19ff55661cf66c5b923c498a6209758616c75ceff3ca18c26075e687cb2b3e4923c47bba3124aaee0d49f13ff3eb29f51458b2e285de6f9dc10b43a87d845726637bb71236dca2595b310d75574c5de78a0c33735b73b8ad6f3e12c620612041ba49637492b25f299d875a49d446937107eef7d528e7cc7dcfdd1e052ff229f16b2d935afe8ee39f6633bd89ecb9ba76e972b0f5aa35bf29509f8e7fbfe229c032ef7d2a45f20bab8c4b0c5860d0d93469ad5fdca5fd3815b328f79d719f1106d330498aa90c48f904cb8ca0faa9856b9ef647180b27c5894231a2c23967f750b1bb315b94bcc768433c4ddba42e7fca2b10db020dd739538cb85a95db79a3068fa6b642502355a366bb2f0b4ecdb278f78227ae2a1fb6aff429d2041faf1808ba70b501e34950bad2f0e5291ccbd737b02e50c847aadeadb463f41fcdc1c8c91994279ff736e629137e4e3897e7854d3bb10b9fbcb845fc66ac03f3f9a529072f8b92b11fadf28625a14a1e00259f0db5421a210032b6d6a47fdba2bcf9746f1fd0734c6d9ebb5451deca01faa2df1374d504bdaef49dd3cca2aaf0dfddd564cb76e20e6b8ca8fb26e09462a10d5ab089871dbc4ffe4cdf7c12f3f58bfad3d75aeaded04b12edbf1f3419ee1f8f1d61a4dad78ec27b6968a7ceedfc72444092872a54810c832ec2ff63418e7545b64ae087d493a445d8cba0d0b61ff41c737a31fbdf0c75cd4f8813eae2794d62daa360361cffa21f011d6d7bc3b39c643c2d7ed6e068fbc1e4f7f6c6b36f3056f24d01ab0fa65356bc179002f4e7ab024b8cd55a10cf32e9a2fa5b527112d3e8e423bf2f7be6ae624700318fc5667e40e3af4c912718861913e838a036660d6f2b3fde8c6b967b3870630c1c3905394e7ec2c220fc4b45bb10b42095afcf8de6fe98c7d2c3091add3c8c6f9587478641c9328f2be74b9a415de904ca18023d2db56f60fefa4d82242a083939a6b4c3c15f04f9fd0ba06eaf27da56c66cd84c2f6bdbc652bff7c81780bd9c3d4939d03980889f3835d60db60acf9c6558caa63ccb3a1548100eb6bbbc8f527dd301609f05f93a6db22a95bfe15506bd2916e0dd50dd2791d884f9add2f2b10b7854185e69bdd3b9c0c60beb0805e8fa2cbe5d21dfdb23c5eeeb80c14b3739a988ecc727a7a3f84306a4532acf0f43edde99062adc669da06c1e967c4d3fb2b5e85c8c76ff73ca6561cc1a0415bdbb609b042430c9db21743f51383cb908121ab456051577e5b0938e4edfdbf34363f13545d100862ee122f943f61458c52814b57d9146a0082cef62ca4001064ffaadce1f2f1b9ef4f39abba403e04db49508ce11a76634e4eb03a019eb74aa5fb97347b6da62cf0447141e1be32575cc5a226919c1b08e8bac499f2d86736be28c663f33ecbf4cf56d93f5e4ca9b89d772475628a88ba186a0f7567b8b5fa6d37ff6e0841ebb4f9f704819f218d28f5d780aa2a511c4b4bbb7f6722397e76cf226caf997e325c01e98bb3883316553bfd4c6f6aef2adc466f58846eb7ebf844a9a8b27fe328d72983bdcd6baea2be67fd009fdc2b589a51e627cbcd1ebe604511a953f25bf672a5fb9e76503eb1b2173297f143778606e38a211dd3b132d34bfcec579e4acf7528990b039e1a59bf3835658d8e0581c9d5b8901f22c3d991eb42799278956856a6f27a8c6112c970137dfc0044c6002badb861ab341bd17c87664db6ecb80d2a6136156aa2b425be7b66be288710549259135435f63c703e99661f9f1e6f0b049465e7f42ba0ab2ffdb7803adc575a5f1dc1144ef803618849ea19a4983566deb1285ab34e8afb567e01d26bba4456dc0499c8bf888a130acd613d4e2fec47d907b0e77fe3a3b2895092f7004d9c163be5f56de8136394c34f0152d919cebbdd7d9bf0586fda72b4ee6c87d8c889d4876ad05fdf77c6acb80fd3d0920ee901666cca03af1b68fcee8b56c92f9478429250e197abd60eee3210a7d563d6169483b820e910d6dfc6e547e5957b2311c54ab5acc97648d0c64ab377124f1ef0b24832b0be52098a88ac8c16a0fe5b40045f934c49974e0153244bca86ad4387d29dddc4fc57beb8e762fea81192163d108c856a6ffa58a0735af4ba7a13859818b7816b42e9745882fc901bb1777833da0c87635b13992bb0102fa794612dcd104aae566dce8e36073cd29976fabf0f98b52d62635b5205d4a05116354ed96171472175daa97dbbe170cf7087cfea4af52f94cb4ada574bda70b216f6ea3e1890e691bf34cb35bd1c323a7376b564a288d4488d10581125d4dfecedda8f1ab43ece7e6f52ff0105efa28f907dfae32b354c22ec3226e999dfcb11f80562adc7d4437cdc941fdfed64292f5c163f5201f2daf210a457c7c2d80b8eef98155e4be8efce727a3424eb8f2e48b416ef7b778a032f5a7b8c70c7eacebe3669935a52b2aa5a31c39ad5ffb36a57e2bbca25c98db628ffe2cf09f08c325fea00b0dde6b33825916d0d14b15fac905a4708180761ee6f118b65ad4ee96d3e09ae290ce08980ff01f0bc25629bc38d2ca8d9282ef9be031001a1ea60b38fa2205063b3cd39faec43cc060f78c34f06103ebd5f2ef3ca5a75aad1e5edf97ad6ef0fa63ef64e8a957bc0757a037ad7283251d2419978aea8a60d2dce9646651c53180feacb8139fca2415ee20c7b53e1be5995d371904267462eda89150fbc03ccdeace72b043cfd0a6b15ca9c232f5e08f953fec402b939e9c5a88373b0b32b8236300d0ede6f76e36914313977c67715c8619e32d253bf2d52f2fad1a39f01184625d97dddf7ce330996f46cb676248765fe0b9de5038bf1dc9aa9c431c3122c4692e0b94d46d6110fb8aed0d6d318f46623c1a23168e5ef07b6dedbfc1323a2aa66f8cb50949e2d6394ef35fa7684df08096a11401dcd48983ebe7887e68d14d9ec60faccd783ff67c059d1c2b138b4b266a0c359be645b3d25a683d3b8098023c45677e574369d5f1f2968ea8995886788d91903d5edf08e59a12a13aa7fbd947fa052e3260415749c64d5d319ff934ed81e8380af9b60fd9364b7accd69160d32f644b8b1b842f0ac956a86df2d8b9bc9f7dd5b990847e4c360a40dd54554f2376b8faa93786db4fa669fa6eb27a1389ad296e226fd863c7a3a061963b451a5e215dc0051c3112d54f7e973332f7f132a500eca00e30059f330d438c76e2ae913c6e0e161df2011bb870dee6120286b9893d2943f577b69d67b86db64c2b00ac46faa91ffdb5f232ca26e0a44c73a9225de83ce7fee1ab9d35cda03b9acee73635c1cbb9a4f90e26e3e71e3dec949defeb6eeb1f4d665ce70b1e503229c38648f4d54fc7f50d16852d6052f631251883ccbb7665585c1020c6d13d5299343b27369639902d7deadb4bc3ceea1d62796bcad9a11e63706b75ffc176576394ff602a5577d6cf268660d0c2807b3dda7d46c60e90f12276213d69a8fe55ccf3d32dabf4667f015c8bd5fc6db7c3608972734d1e33d523a869b8290ad05c33f40b0236653cfdfc93ee51f87b65afa210de67853a61f6798f2ecb66a06a677000d2cfa55554ac70a4f16238f530396cf677de8d7c8991a4aa4c9952f38c019e4575879a672420a23c1909b10f24d527a8a11a9f741fe502d2e511efd460d0b5c0e606ba2bb7a9db2f8b1ae401250284012ec7e00411f468c2b2b8b327034f50a0fdcbfb803358705e51e7d4087b91b17025c26327ebde16e5788472ed3185206bcb881071b4b0583e956f24168895a099c4d1c85aa80674a701c6b2d44237cb5b014f7b7797195e69fc61130bfc99d2aecb697c5ff16e2c7308d0c90e0e01133016b2ae3465e45b086823c3e84187ae436c60bf4c31b55e1a4225e8ad985fbf39d16c887b40a4268af22ff5864c704568e18cea6e6036b3fc6d24ad73384c3112f40ddbd0b57d7aa889e8221f0e6d4039bd623d8b0ee530eee1277c89c2949ebc19fe977815c1288fe9e3035d624e8ba1cf12a0f89994091603bcaa12a5501a4206d2686f793c1625a83480871793d8a6f38b17a6cbb5e9e0bece18279d9be532925b25ee2a2ff679ee7b29820d1551d76a870924d438c036fbc99041cec7bcc21c7cbd0c47d994192832ab53817df8d98e29604d69b3a1f3cbdb3cc452136487cffa9394044cff82dde5add1022edc694af", 0x1000}}, 0x1006) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$BLKTRACESETUP(0xffffffffffffffff, 0xc0481273, 0x0) ptrace$peeksig(0x4209, 0x0, 0x0, &(0x7f0000000880)=[{}, {}, {}, {}, {}, {}]) syz_open_dev$sndctrl(0x0, 0x0, 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) migrate_pages(0x0, 0x200, &(0x7f0000000000)=0xffffffff7fffffff, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r1, &(0x7f0000000780)='^', 0x1, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xda90) ioctl$SG_GET_REQUEST_TABLE(0xffffffffffffffff, 0x2286, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x10, 0x803, 0x0) capset(&(0x7f0000000000)={0x19980330}, &(0x7f0000000080)={0x3, 0xfb, 0x4, 0x3cda, 0x4, 0x285e}) sendmsg$nl_route_sched(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000000c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff5653f, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x81}, 0x0) accept4(r1, 0x0, 0x0, 0x0) syz_usb_connect$cdc_ecm(0x2, 0x5c, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000090000202505a1a440000000010109024a000101000000090400001702020000052406000005240000000d240f0100000000060000002006240704"], 0x0) 5.179456899s ago: executing program 0 (id=830): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc_mnt\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./proc_mnt\x00', &(0x7f00000000c0)='proc\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./proc_mnt/net/rpc/auth.unix.ip/channel\x00', 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000003c0)={{{@in=@empty, @in6=@private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@local}, 0x0, @in=@remote}}, &(0x7f0000000500)=0xe4) ioctl$TUNSETOWNER(r0, 0x400454cc, r2) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$radio(0x0, 0x2, 0x2) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r4 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/kernel/fscaps', 0x800, 0x4) read$char_usb(r4, &(0x7f0000000040)=""/236, 0xec) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000080)='./config\x00', &(0x7f00000000c0)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./config/usb_gadget/g1/functions/phonet.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r5, &(0x7f0000000280)='dummy_udc', 0x9) pselect6(0x40, &(0x7f0000000240)={0x3, 0x0, 0x7, 0x7d, 0x10000, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x8, 0x0, 0xf, 0x80000006, 0xb06c}, 0x0, 0x0) write(r0, &(0x7f0000000200)='nfsd 127.0.0.1 999999999 test\n', 0x1e) creat(&(0x7f0000000040)='./proc_mnt\x00', 0x64) 4.28951643s ago: executing program 2 (id=831): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) r0 = fsopen(&(0x7f00000002c0)='configfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) fchdir(r1) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0xe8) getdents(r2, &(0x7f0000000080)=""/43, 0x2b) getdents(r2, 0x0, 0xbb) openat$fuse(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) stat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000200)) getgroups(0x1, &(0x7f0000000280)=[0xee00]) r3 = open(&(0x7f00000000c0)='.\x00', 0x8000, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x183341, 0x0) fstat(r4, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0}) openat$cgroup_pressure(r4, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) prctl$PR_SET_NO_NEW_PRIVS(0x26, 0x1) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000240)={0x0, &(0x7f0000000200)}) openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, &(0x7f0000000340)) r7 = gettid() timer_create(0x1, &(0x7f0000000800)={0x0, 0x21, 0x4, @tid=r7}, &(0x7f0000000000)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(0x0, 0x1, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r6, 0xc0502100, &(0x7f0000000440)) fchown(r3, r5, 0xffffffffffffffff) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f00000002c0)) mount$fuseblk(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', &(0x7f0000000300), 0x10000, &(0x7f0000000440)=ANY=[]) 1.070375415s ago: executing program 0 (id=832): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) rename(0x0, &(0x7f0000000180)='./file0\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() ioctl$LOOP_CONFIGURE(0xffffffffffffffff, 0x4c0a, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1b5cb000) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4) setsockopt$packet_tx_ring(r4, 0x107, 0x5, 0x0, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) bind$netlink(r5, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x54, r8, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xf}}}, {0x14, 0x2, @in={0x2, 0x0, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, 0x0, 0x4040140) r9 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r9, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r9, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x800000000000, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private=0xa010102, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x2, 0x1, 0x7}}, 0xe8) 0s ago: executing program 5 (id=833): vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x3) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000a0)='./dev\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='devtmpfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./config\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./config\x00', &(0x7f0000000080)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1/configs/c.1\x00', 0x1ff) symlinkat(&(0x7f0000000400)='./config/usb_gadget/g1/functions/acm.usb0\x00', 0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/configs/c.1/acm.usb0\x00') r1 = openat(0xffffffffffffff9c, &(0x7f0000000600)='./config/usb_gadget/g1/UDC\x00', 0x1, 0x0) write(r1, &(0x7f0000000700)='dummy_udc.0', 0xb) openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000800)='./dev/ttyGS0\x00', 0x2, 0x0) write(r2, 0x0, 0x0) close(r2) close(0xffffffffffffffff) r3 = socket$inet_tcp(0x2, 0x1, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe5000/0x18000)=nil, 0x0, 0x0, 0x10c76b9bc40887f1, &(0x7f0000000140), 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000300)=0xffffffffffffffff, 0x4) connect$inet(r3, &(0x7f00000006c0)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f0000000900)=0xffffffffffffffff, 0x4) sendmmsg$inet(r3, &(0x7f0000000f00)=[{{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000080)="b5", 0x1}, {&(0x7f0000000200)="c9", 0x1}, {&(0x7f0000000340)="01", 0x1}, {&(0x7f0000000400)='Q', 0x1}, {&(0x7f0000000500)="d7", 0x1}, {&(0x7f0000000600)='J', 0x1}, {&(0x7f0000000700)=')', 0x1}, {&(0x7f0000000180)='<', 0x1}], 0x8}}, {{0x0, 0x0, &(0x7f0000002dc0)=[{&(0x7f0000000a40)}, {&(0x7f0000001a40)="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", 0x5b6}, {&(0x7f0000000840)="e3", 0x1}, {&(0x7f0000000140)="917769f0fbb38489b957dfcd55a7", 0xe}, {&(0x7f0000000540)='k', 0x1}, {&(0x7f00000002c0)="c8", 0x1}, {&(0x7f0000002bc0)='>', 0x1}], 0x7}}, {{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000940)="b2", 0x1}], 0x1}}], 0x3, 0x4048410) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x10500, 0x0) kernel console output (not intermixed with test programs): o=15 res=0 errno=0 [ 115.986354][ T4282] EXT4-fs error (device loop3): ext4_map_blocks:637: inode #2: block 4: comm syz-executor: lblock 0 mapped to illegal pblock 4 (length 1) [ 116.011353][ T4736] loop0: detected capacity change from 0 to 32768 [ 116.040014][ T4282] EXT4-fs warning (device loop3): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -117 reading directory block [ 116.057956][ T4282] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 1061109567 in block_group 0 [ 116.109715][ T4282] EXT4-fs error (device loop3) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 116.127466][ T4780] device syzkaller0 entered promiscuous mode [ 116.173452][ T4282] EXT4-fs error (device loop3): ext4_dirty_inode:6156: inode #2: comm syz-executor: mark_inode_dirty error [ 116.290088][ T4326] EXT4-fs error (device loop3): __ext4_get_inode_loc:4520: comm kworker/u4:5: Invalid inode table block 1061109567 in block_group 0 [ 116.362310][ T4282] EXT4-fs (loop3): unmounting filesystem. [ 116.376710][ T4783] binder: 4782:4783 ioctl 40046210 0 returned -14 [ 117.260726][ T40] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.987164][ T40] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.088453][ T40] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.292379][ T40] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.022974][ T4842] netlink: 12 bytes leftover after parsing attributes in process `syz.1.131'. [ 120.085185][ T4844] loop4: detected capacity change from 0 to 136 [ 120.241137][ T4844] netlink: 32 bytes leftover after parsing attributes in process `syz.4.132'. [ 120.489586][ T14] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 120.804077][ T14] usb 2-1: config 0 has no interfaces? [ 120.815842][ T14] usb 2-1: New USB device found, idVendor=1a34, idProduct=0802, bcdDevice= 0.00 [ 120.962807][ T4273] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 120.975692][ T4273] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 120.987782][ T4273] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 121.009190][ T4273] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 121.028370][ T14] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.028851][ T4273] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 121.049870][ T4273] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 121.232079][ T14] usb 2-1: config 0 descriptor?? [ 121.550470][ T4850] netlink: 32 bytes leftover after parsing attributes in process `syz.4.132'. [ 121.810485][ T4359] usb 2-1: USB disconnect, device number 2 [ 122.904316][ T4870] netlink: 'syz.2.137': attribute type 39 has an invalid length. [ 122.999573][ T32] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 123.129656][ T4275] Bluetooth: hci2: command 0x0409 tx timeout [ 123.203807][ T32] usb 5-1: config index 0 descriptor too short (expected 23569, got 27) [ 123.222354][ T32] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 123.262324][ T32] usb 5-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 123.309753][ T32] usb 5-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 123.343190][ T32] usb 5-1: Manufacturer: syz [ 123.391719][ T32] usb 5-1: config 0 descriptor?? [ 123.769534][ T32] rc_core: IR keymap rc-hauppauge not found [ 123.777819][ T32] Registered IR keymap rc-empty [ 123.805428][ T32] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0 [ 123.861855][ T32] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/rc/rc0/input7 [ 123.925387][ T4842] Zero length message leads to an empty skb [ 124.275527][ T4852] chnl_net:caif_netlink_parms(): no params data found [ 124.562676][ C1] igorplugusb 5-1:0.0: Error: urb status = -32 [ 124.566268][ T14] usb 5-1: USB disconnect, device number 3 [ 124.568939][ C1] igorplugusb 5-1:0.0: submit urb failed: -19 [ 125.377514][ T4275] Bluetooth: hci2: command 0x041b tx timeout [ 125.598927][ T4852] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.606841][ T4852] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.616086][ T4852] device bridge_slave_0 entered promiscuous mode [ 125.627035][ T4852] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.634358][ T4852] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.642788][ T4852] device bridge_slave_1 entered promiscuous mode [ 125.685776][ T40] device hsr_slave_0 left promiscuous mode [ 125.715421][ T40] device hsr_slave_1 left promiscuous mode [ 125.734444][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.755465][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.811825][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.819591][ T4359] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 125.856124][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.870241][ T40] device bridge_slave_1 left promiscuous mode [ 125.888279][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.911534][ T40] device bridge_slave_0 left promiscuous mode [ 125.924511][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.993393][ T40] device veth1_macvtap left promiscuous mode [ 126.006654][ T40] device veth0_macvtap left promiscuous mode [ 126.018162][ T40] device veth1_vlan left promiscuous mode [ 126.026400][ T4359] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 126.045970][ T40] device veth0_vlan left promiscuous mode [ 126.062288][ T4359] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 126.089732][ T4359] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 126.111252][ T4359] usb 2-1: Product: syz [ 126.119867][ T4359] usb 2-1: Manufacturer: syz [ 126.125579][ T4359] usb 2-1: SerialNumber: syz [ 126.241876][ T4939] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 126.373316][ T4359] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 3 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 126.744125][ C0] usblp0: nonzero write bulk status received: -71 [ 126.757456][ T4286] usb 2-1: USB disconnect, device number 3 [ 126.769274][ T4923] usblp0: removed [ 126.970099][ T14] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 127.185456][ T14] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 127.203246][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 127.212547][ T14] usb 1-1: Product: syz [ 127.217420][ T14] usb 1-1: Manufacturer: syz [ 127.226180][ T14] usb 1-1: SerialNumber: syz [ 127.234271][ T14] usb 1-1: config 0 descriptor?? [ 127.477653][ T4275] Bluetooth: hci2: command 0x040f tx timeout [ 127.495721][ T14] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 129.529755][ T4275] Bluetooth: hci2: command 0x0419 tx timeout [ 129.588150][ T14] dvb_usb_rtl28xxu: probe of 1-1:0.0 failed with error -71 [ 129.609691][ T14] usb 1-1: USB disconnect, device number 2 [ 129.742156][ T22] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 129.889931][ T40] team0 (unregistering): Port device team_slave_1 removed [ 129.932619][ T22] usb 5-1: Using ep0 maxpacket: 16 [ 129.948728][ T22] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 129.985363][ T22] usb 5-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 130.007800][ T22] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 130.029085][ T22] usb 5-1: Product: syz [ 130.042585][ T22] usb 5-1: Manufacturer: syz [ 130.054696][ T22] usb 5-1: SerialNumber: syz [ 130.089585][ T22] usb 5-1: config 0 descriptor?? [ 130.123529][ T22] em28xx 5-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 130.136121][ T22] em28xx 5-1:0.0: DVB interface 0 found: bulk [ 130.171629][ T40] team0 (unregistering): Port device team_slave_0 removed [ 130.433998][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 130.576342][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 130.715654][ T22] em28xx 5-1:0.0: unknown em28xx chip ID (0) [ 131.147169][ T22] em28xx 5-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 131.165379][ T22] em28xx 5-1:0.0: board has no eeprom [ 131.559522][ T22] em28xx 5-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 131.577106][ T22] em28xx 5-1:0.0: dvb set to bulk mode. [ 131.644390][ T40] bond0 (unregistering): Released all slaves [ 131.662845][ T126] em28xx 5-1:0.0: Binding DVB extension [ 131.856076][ T4852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.947061][ T4852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 132.072481][ T4852] team0: Port device team_slave_0 added [ 132.093017][ T4852] team0: Port device team_slave_1 added [ 132.178866][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 132.212104][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.250423][ T4852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 132.492856][ T4970] em28xx 5-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 132.554186][ T4852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 132.576065][ T4286] usb 5-1: USB disconnect, device number 4 [ 132.588156][ T4286] em28xx 5-1:0.0: Disconnecting em28xx [ 132.597781][ T4852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 132.699974][ T126] em28xx 5-1:0.0: Registering input extension [ 132.706664][ T4286] em28xx 5-1:0.0: Closing input extension [ 132.734365][ T4852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 132.767782][ T4286] em28xx 5-1:0.0: Freeing device [ 132.972899][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.981194][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.868634][ T5020] jffs2: notice: (5020) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 135.526232][ T5023] netlink: 'syz.2.163': attribute type 1 has an invalid length. [ 135.568231][ T5008] device syzkaller0 entered promiscuous mode [ 135.737171][ T4852] device hsr_slave_0 entered promiscuous mode [ 135.762490][ T4852] device hsr_slave_1 entered promiscuous mode [ 135.790001][ T4852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 135.797678][ T4852] Cannot create hsr debugfs directory [ 136.104357][ T5046] loop1: detected capacity change from 0 to 2048 [ 136.238363][ T5046] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 136.280222][ T5054] loop2: detected capacity change from 0 to 128 [ 136.295412][ T5046] ext4 filesystem being mounted at /36/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 136.326861][ C0] vkms_vblank_simulate: vblank timer overrun [ 136.327615][ T4852] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 136.346440][ T5054] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 136.362637][ T5054] ext4 filesystem being mounted at /38/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 136.420237][ T5058] netlink: 8 bytes leftover after parsing attributes in process `syz.4.169'. [ 136.448693][ T5058] netlink: 12 bytes leftover after parsing attributes in process `syz.4.169'. [ 136.521328][ T5058] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.530688][ T5058] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.539523][ T5058] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.545281][ T5063] netlink: 24 bytes leftover after parsing attributes in process `syz.0.171'. [ 136.548235][ T5058] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.596640][ T5046] fs-verity: sha512 using implementation "sha512-avx2" [ 136.614989][ T4852] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 136.632416][ T5060] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 136.815095][ T5060] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 136.879467][ T4852] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 136.901262][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 136.908266][ T4852] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 137.198317][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 137.270233][ T4852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.345045][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 137.356713][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 137.378791][ T4852] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.450373][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 137.471708][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 137.497424][ T4344] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.504650][ T4344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.585993][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 137.645109][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 137.694042][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 137.730380][ T4344] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.737577][ T4344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.780104][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 137.854648][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 137.869067][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 137.887146][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 137.896704][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 137.907367][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 137.947565][ T5095] device syzkaller0 entered promiscuous mode [ 137.967870][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 137.986772][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 138.020549][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 138.034927][ T4852] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 138.051852][ T4852] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 138.114550][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 138.153655][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 139.166123][ T5115] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 139.661880][ T5123] loop1: detected capacity change from 0 to 128 [ 140.155366][ T5123] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 140.279616][ T5123] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 140.518185][ T5137] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 140.951662][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 140.968150][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 141.029664][ T4852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.235803][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 143.097726][ T5172] binder: 5171:5172 unknown command 0 [ 143.110753][ T5173] loop4: detected capacity change from 0 to 512 [ 143.130761][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 143.156250][ T5172] binder: 5171:5172 ioctl c0306201 2000000001c0 returned -22 [ 143.238342][ T5173] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 143.267833][ T5173] ext4 filesystem being mounted at /38/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 143.560907][ T5185] loop4: detected capacity change from 512 to 0 [ 143.574036][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 143.607450][ C0] I/O error, dev loop4, sector 60 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 143.610389][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 143.618278][ T5187] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 143.662623][ T5187] EXT4-fs error (device loop4): ext4_write_dquot:6821: comm syz.4.192: Failed to commit dquot type 0 [ 143.697581][ C0] I/O error, dev loop4, sector 60 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 143.703910][ T5190] loop2: detected capacity change from 0 to 128 [ 143.710870][ T5173] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 143.723990][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 143.741003][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 143.767299][ T5190] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 143.783320][ T4852] device veth0_vlan entered promiscuous mode [ 143.803747][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 143.820417][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 143.853935][ T4852] device veth1_vlan entered promiscuous mode [ 143.869799][ T5173] EXT4-fs error (device loop4): ext4_write_dquot:6821: comm syz.4.192: Failed to commit dquot type 0 [ 143.892567][ T40] loop: Write error at byte offset 9223372036854775807, length 2048. [ 143.908932][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 143.918544][ C0] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 143.928659][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 143.959434][ T5187] EXT4-fs (loop4): I/O error while writing superblock [ 143.967651][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 143.988148][ T5173] EXT4-fs (loop4): previous I/O error to superblock detected [ 143.991512][ T5187] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.192: Error while async write back metadata [ 144.009082][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 144.063825][ T4852] device veth0_macvtap entered promiscuous mode [ 144.071275][ T4460] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.095374][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 144.100963][ T4852] device veth1_macvtap entered promiscuous mode [ 144.104970][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 144.120617][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.129114][ T5173] EXT4-fs (loop4): I/O error while writing superblock [ 144.167138][ T4460] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.185141][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 144.194523][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.194861][ C1] I/O error, dev loop4, sector 0 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 144.214689][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.224155][ T5187] EXT4-fs (loop4): I/O error while writing superblock [ 144.231037][ T4316] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 144.248901][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.272170][ T5173] EXT4-fs error (device loop4): ext4_check_bdev_write_error:218: comm syz.4.192: Error while async write back metadata [ 144.273384][ C1] I/O error, dev loop4, sector 140 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 144.284803][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.297265][ C1] I/O error, dev loop4, sector 144 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 144.321847][ T4457] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.334038][ T4275] Bluetooth: Wrong link type (-22) [ 144.341281][ T5187] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #19: block 35: comm syz.4.192: unable to read itable block [ 144.351294][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.364945][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.377394][ T126] usb 2-1: new full-speed USB device number 4 using dummy_hcd [ 144.384985][ T5173] EXT4-fs (loop4): I/O error while writing superblock [ 144.399731][ T5187] EXT4-fs (loop4): previous I/O error to superblock detected [ 144.407838][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.421439][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.431914][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.433395][ T4457] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.442910][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.450780][ T5173] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #16: block 34: comm syz.4.192: unable to read itable block [ 144.462183][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.487956][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 144.495996][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.504449][ T5187] EXT4-fs (loop4): I/O error while writing superblock [ 144.509639][ T4316] usb 3-1: Using ep0 maxpacket: 16 [ 144.517943][ T5187] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: IO failure [ 144.519972][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 144.527186][ T4457] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.542990][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.551535][ T5187] EXT4-fs (loop4): I/O error while writing superblock [ 144.551711][ T4316] usb 3-1: config 1 has an invalid descriptor of length 240, skipping remainder of the config [ 144.558694][ T5173] EXT4-fs (loop4): previous I/O error to superblock detected [ 144.577767][ T5187] EXT4-fs error (device loop4): ext4_ext_tree_init:879: inode #19: comm syz.4.192: mark_inode_dirty error [ 144.583522][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 144.597777][ T40] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.607866][ T4316] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 144.609555][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 144.619162][ T126] usb 2-1: config 0 interface 0 has no altsetting 0 [ 144.636502][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.647117][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.657936][ T40] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.662861][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.672668][ T126] usb 2-1: New USB device found, idVendor=0fc5, idProduct=b080, bcdDevice= 0.00 [ 144.682904][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.693591][ T5173] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: IO failure [ 144.697851][ T126] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 144.711893][ T5187] EXT4-fs error (device loop4): ext4_get_inode_loc:4658: inode #19: block 35: comm syz.4.192: unable to read itable block [ 144.725866][ T4316] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 144.728517][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.745568][ T4316] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 144.745611][ T4316] usb 3-1: Product: syz [ 144.745627][ T4316] usb 3-1: Manufacturer: syz [ 144.745643][ T4316] usb 3-1: SerialNumber: syz [ 144.769957][ T126] usb 2-1: config 0 descriptor?? [ 144.776295][ T40] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.784735][ C0] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.793371][ T4457] loop: Write error at byte offset 9223372036854775807, length 2048. [ 144.797364][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.809968][ C1] Buffer I/O error on dev loop4, logical block 0, lost sync page write [ 144.826860][ T5173] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 144.837193][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.852735][ T5187] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 144.857550][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.878134][ T5187] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -5) [ 144.890943][ T4852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.909477][ T4852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.926678][ C1] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 16 starting block 55) [ 144.938217][ C1] Buffer I/O error on device loop4, logical block 55 [ 144.940878][ T4852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 144.945278][ C1] Buffer I/O error on device loop4, logical block 56 [ 144.959246][ C1] Buffer I/O error on device loop4, logical block 57 [ 144.965955][ C1] Buffer I/O error on device loop4, logical block 58 [ 144.972722][ C1] Buffer I/O error on device loop4, logical block 59 [ 144.979425][ C1] Buffer I/O error on device loop4, logical block 60 [ 144.982957][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 16 starting block 20) [ 144.986189][ C1] Buffer I/O error on device loop4, logical block 61 [ 144.997303][ C0] Buffer I/O error on device loop4, logical block 20 [ 145.003892][ C1] Buffer I/O error on device loop4, logical block 62 [ 145.010555][ C0] Buffer I/O error on device loop4, logical block 21 [ 145.024718][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 145.041569][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 145.052211][ T5195] xt_TCPMSS: Only works on TCP SYN packets [ 145.054863][ T4852] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.067390][ T4852] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.076178][ T4852] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.089167][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 16 starting block 44) [ 145.100525][ C0] EXT4-fs warning (device loop4): ext4_end_bio:347: I/O error 10 writing to inode 16 starting block 38) [ 145.139657][ T4852] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.199736][ T4316] usb 3-1: 0:2 : does not exist [ 145.244622][ T4316] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 145.386529][ T40] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.425398][ T40] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.440318][ T4316] usb 3-1: USB disconnect, device number 2 [ 145.561619][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 145.588517][ T4462] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.626060][ T4462] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.637361][ T4460] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 145.746903][ T5193] udevd[5193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 145.875360][ T4462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 145.893978][ T126] usbhid 2-1:0.0: can't add hid device: -71 [ 145.909556][ T126] usbhid: probe of 2-1:0.0 failed with error -71 [ 145.949651][ T126] usb 2-1: USB disconnect, device number 4 [ 145.981332][ T4462] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.052014][ T4460] FAT-fs (loop2): Invalid FSINFO signature: 0x00000000, 0x61417272 (sector = 1) [ 146.177854][ T4462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.218018][ T4462] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.402610][ T4462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 146.535264][ T4462] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.116212][ T4462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.296586][ T4462] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.789084][ T4462] tipc: Left network mode [ 149.119894][ T4273] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.131396][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.140288][ T4273] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.153325][ T4273] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.170364][ T4273] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 149.178426][ T4273] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.209821][ T14] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 149.333752][ T5285] loop1: detected capacity change from 0 to 512 [ 149.412283][ T5285] EXT4-fs error (device loop1): ext4_orphan_get:1405: inode #15: comm syz.1.220: iget: bad i_size value: 38620345925642 [ 149.429430][ T14] usb 3-1: Using ep0 maxpacket: 32 [ 149.467494][ T14] usb 3-1: unable to get BOS descriptor or descriptor too short [ 149.481307][ T14] usb 3-1: no configurations [ 149.492998][ T5285] EXT4-fs error (device loop1): ext4_orphan_get:1410: comm syz.1.220: couldn't read orphan inode 15 (err -117) [ 149.507422][ T14] usb 3-1: can't read configurations, error -22 [ 149.525018][ T5285] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: writeback. [ 150.361773][ T5285] EXT4-fs (loop1): shut down requested (1) [ 150.579312][ T4284] EXT4-fs (loop1): unmounting filesystem. [ 150.832965][ T26] audit: type=1800 audit(1786770238.377:5): pid=5306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.224" name="enable" dev="configfs" ino=38371 res=0 errno=0 [ 151.152603][ T4462] bond0: (slave wlan1): Releasing backup interface [ 151.210256][ T4273] Bluetooth: hci0: command 0x0409 tx timeout [ 151.269037][ T5280] chnl_net:caif_netlink_parms(): no params data found [ 151.402793][ T4462] device hsr_slave_0 left promiscuous mode [ 151.425489][ T4462] device hsr_slave_1 left promiscuous mode [ 151.463529][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 151.486864][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 151.525239][ T4462] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 151.570790][ T4462] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 151.614388][ T4462] device bridge_slave_1 left promiscuous mode [ 151.641622][ T4462] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.827689][ T4462] device bridge_slave_0 left promiscuous mode [ 151.846306][ T4462] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.729791][ T4462] device veth1_macvtap left promiscuous mode [ 152.735840][ T4462] device veth0_macvtap left promiscuous mode [ 152.760215][ T4462] device veth1_vlan left promiscuous mode [ 152.776481][ T4462] device veth0_vlan left promiscuous mode [ 153.290828][ T4273] Bluetooth: hci0: command 0x041b tx timeout [ 154.434999][ T5346] input: syz0 as /devices/virtual/input/input9 [ 155.379778][ T4273] Bluetooth: hci0: command 0x040f tx timeout [ 155.980937][ T4462] team0 (unregistering): Port device team_slave_1 removed [ 156.044257][ T5362] using random self ethernet address [ 156.052014][ T4462] team0 (unregistering): Port device team_slave_0 removed [ 156.059902][ T5362] using random host ethernet address [ 156.226587][ T4462] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.801563][ T4273] Bluetooth: hci0: command 0x0419 tx timeout [ 157.950346][ T4462] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.402973][ T5371] Bluetooth: MGMT ver 1.22 [ 158.445969][ T5371] ntfs3: loop2: try to read out of volume at offset 0x0 [ 158.802736][ T4462] bond0 (unregistering): Released all slaves [ 159.406338][ T5280] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.444198][ T5280] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.473114][ T5280] device bridge_slave_0 entered promiscuous mode [ 159.490878][ T5280] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.498109][ T5280] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.516321][ T5280] device bridge_slave_1 entered promiscuous mode [ 159.602098][ T5386] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 159.717704][ T5280] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.831636][ T5280] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.896848][ T5392] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 162.363728][ T5280] team0: Port device team_slave_0 added [ 162.397603][ T5280] team0: Port device team_slave_1 added [ 162.488294][ T5280] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.528458][ T5280] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.609619][ T5280] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.641551][ T5280] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.648551][ T5280] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.742396][ T4316] usb 2-1: new full-speed USB device number 5 using dummy_hcd [ 162.755842][ T26] audit: type=1800 audit(1786770250.289:6): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.249" name="size" dev="configfs" ino=38513 res=0 errno=0 [ 162.779437][ T5280] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.781289][ T5409] null_blk: Zone size larger than device capacity [ 162.817635][ T26] audit: type=1800 audit(1786770250.289:7): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.249" name="zoned" dev="configfs" ino=38514 res=0 errno=0 [ 162.913515][ T5280] device hsr_slave_0 entered promiscuous mode [ 162.915972][ T26] audit: type=1800 audit(1786770250.289:8): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.249" name="zone_size" dev="configfs" ino=38515 res=0 errno=0 [ 162.942193][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 162.953807][ T5280] device hsr_slave_1 entered promiscuous mode [ 162.960240][ T4316] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 162.995384][ T4316] usb 2-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 163.050115][ T26] audit: type=1800 audit(1786770250.289:9): pid=5409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.249" name="power" dev="configfs" ino=38516 res=0 errno=0 [ 163.076011][ T4316] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 163.115852][ T4316] usb 2-1: config 0 descriptor?? [ 163.573737][ T4316] isku 0003:1E7D:319C.0001: hidraw0: USB HID v0.00 Device [HID 1e7d:319c] on usb-dummy_hcd.1-1/input0 [ 163.587253][ T5280] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 163.616906][ T5280] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 163.650940][ T5280] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 163.691482][ T5280] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 163.786304][ T4316] isku 0003:1E7D:319C.0001: couldn't init struct isku_device [ 163.808471][ T4316] isku 0003:1E7D:319C.0001: couldn't install keyboard [ 163.838052][ T4316] isku: probe of 0003:1E7D:319C.0001 failed with error -71 [ 163.886173][ T4316] usb 2-1: USB disconnect, device number 5 [ 163.932307][ T5280] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.981816][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 163.996398][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.027418][ T5280] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.054361][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.077407][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 165.403303][ T4462] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.410566][ T4462] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.419720][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 165.543653][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 165.580141][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 165.608584][ T5428] fido_id[5428]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 165.632778][ T4462] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.639963][ T4462] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.676605][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 165.760033][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 165.810929][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 165.843004][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 165.877349][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.024329][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.061390][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.069328][ T26] audit: type=1800 audit(1786770253.599:10): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.256" name="memory_backed" dev="configfs" ino=39343 res=0 errno=0 [ 166.078587][ T5444] null_blk: Zone size larger than device capacity [ 166.888674][ T5280] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 167.020301][ T26] audit: type=1800 audit(1786770253.599:11): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.256" name="zone_nr_conv" dev="configfs" ino=39344 res=0 errno=0 [ 167.041382][ T26] audit: type=1800 audit(1786770253.599:12): pid=5444 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.256" name="power" dev="configfs" ino=39345 res=0 errno=0 [ 167.111053][ T5280] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 168.123768][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.164933][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.169649][ T4286] usb 2-1: new full-speed USB device number 6 using dummy_hcd [ 168.191957][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.219319][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 169.668476][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 169.695612][ T4286] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 169.729477][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 169.737549][ T4286] usb 2-1: Product: syz [ 169.769484][ T4286] usb 2-1: Manufacturer: syz [ 169.784358][ T4286] usb 2-1: SerialNumber: syz [ 169.801122][ T4286] usb 2-1: config 0 descriptor?? [ 170.254109][ T4286] dvb_usb_rtl28xxu 2-1:0.0: chip type detection failed -71 [ 170.266419][ T4286] dvb_usb_rtl28xxu: probe of 2-1:0.0 failed with error -71 [ 171.045672][ T4286] usb 2-1: USB disconnect, device number 6 [ 173.034827][ T5280] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.182056][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 173.222999][ T4750] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 173.262053][ T5505] CIFS: Attempting to mount \\::1\share [ 174.195616][ T5505] CIFS: VFS: Error connecting to socket. Aborting operation. [ 174.370703][ T5505] CIFS: VFS: cifs_mount failed w/return code = -4 [ 174.764571][ T5526] dummy_hcd dummy_hcd.0: remove, state 1 [ 174.802882][ T5526] usb usb1: USB disconnect, device number 1 [ 174.896043][ T5526] dummy_hcd dummy_hcd.0: stopped [ 174.913505][ T5526] dummy_hcd dummy_hcd.0: USB bus 1 deregistered [ 175.323564][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 175.331998][ T5522] syz.5.262 (5522) used greatest stack depth: 17040 bytes left [ 175.385515][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 175.443298][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 175.460488][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 175.482061][ T5280] device veth0_vlan entered promiscuous mode [ 175.497030][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 175.527388][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 175.576094][ T5280] device veth1_vlan entered promiscuous mode [ 175.655773][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 175.684116][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 175.725349][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.747160][ T4344] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.825733][ T5280] device veth0_macvtap entered promiscuous mode [ 176.044928][ T5280] device veth1_macvtap entered promiscuous mode [ 176.361993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.438520][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.691732][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.695643][ T5565] loop5: detected capacity change from 0 to 512 [ 176.747032][ T5565] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 176.795747][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.855241][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.866256][ T5565] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 176.882662][ T5565] ext4 filesystem being mounted at /20/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 176.921344][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.932251][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.942964][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.952918][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.481533][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.154263][ T5280] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.178576][ T4852] EXT4-fs (loop5): unmounting filesystem. [ 179.239027][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.276567][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.347354][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.381991][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.427068][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.451275][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.488290][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.525420][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.019415][ T5280] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.179451][ T5280] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.223527][ T5280] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.286829][ T5280] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.339075][ T5280] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.369560][ T5280] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.378319][ T5280] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.422701][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 181.432634][ T4457] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 181.650887][ T4457] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.658783][ T4457] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.713854][ T1122] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 181.763103][ T5608] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.772015][ T5608] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.780779][ T5608] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.789508][ T5608] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 181.871371][ T5608] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 181.902369][ T4457] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.920657][ T4457] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.953643][ T4462] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 182.194860][ T26] audit: type=1800 audit(1786770269.729:13): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.292" name="zoned" dev="configfs" ino=40088 res=0 errno=0 [ 182.227603][ T5615] null_blk: Zone size larger than device capacity [ 182.262311][ T26] audit: type=1800 audit(1786770269.749:14): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.292" name="zone_nr_conv" dev="configfs" ino=39602 res=0 errno=0 [ 182.331299][ T26] audit: type=1800 audit(1786770269.749:15): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.292" name="power" dev="configfs" ino=39603 res=0 errno=0 [ 182.422137][ T26] audit: type=1800 audit(1786770269.829:16): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.292" name="zoned" dev="configfs" ino=39607 res=0 errno=0 [ 182.442094][ C0] vkms_vblank_simulate: vblank timer overrun [ 182.468586][ T5615] null_blk: disk nullb2 created [ 182.473860][ T26] audit: type=1800 audit(1786770269.839:17): pid=5615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.292" name="power" dev="configfs" ino=39608 res=0 errno=0 [ 182.493796][ C0] vkms_vblank_simulate: vblank timer overrun [ 183.893448][ T4320] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 186.428169][ T4320] usb 3-1: device descriptor read/all, error -71 [ 189.011581][ T4286] usb 3-1: new full-speed USB device number 7 using dummy_hcd [ 189.240698][ T4286] usb 3-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 189.259585][ T4286] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 189.267636][ T4286] usb 3-1: Product: syz [ 189.276579][ T4286] usb 3-1: Manufacturer: syz [ 189.281724][ T4286] usb 3-1: SerialNumber: syz [ 189.288337][ T4286] usb 3-1: config 0 descriptor?? [ 189.455949][ T5665] binder: 5664:5665 unknown command 0 [ 189.474724][ T5665] binder: 5664:5665 ioctl c0306201 2000000004c0 returned -22 [ 191.172036][ T4286] dvb_usb_rtl28xxu 3-1:0.0: chip type detection failed -110 [ 191.179481][ T4286] dvb_usb_rtl28xxu: probe of 3-1:0.0 failed with error -110 [ 191.300988][ T4286] usb 3-1: USB disconnect, device number 7 [ 192.484426][ T5691] null_blk: Zone size larger than device capacity [ 192.491692][ T26] audit: type=1800 audit(1786770280.019:18): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="zoned" dev="configfs" ino=40196 res=0 errno=0 [ 192.659608][ T26] audit: type=1800 audit(1786770280.019:19): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="zone_nr_conv" dev="configfs" ino=40197 res=0 errno=0 [ 193.417845][ T26] audit: type=1800 audit(1786770280.019:20): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="power" dev="configfs" ino=40198 res=0 errno=0 [ 193.490100][ T5699] device syzkaller0 entered promiscuous mode [ 194.384714][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.391408][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.400625][ T26] audit: type=1800 audit(1786770280.159:21): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="zoned" dev="configfs" ino=39764 res=0 errno=0 [ 194.430148][ T26] audit: type=1800 audit(1786770280.179:22): pid=5691 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.310" name="power" dev="configfs" ino=39765 res=0 errno=0 [ 194.441738][ T5699] tipc: Started in network mode [ 194.568415][ T5699] tipc: Node identity 626a12b4820b, cluster identity 4711 [ 194.596896][ T5699] tipc: Enabled bearer , priority 0 [ 194.941261][ T5697] tipc: Resetting bearer [ 195.431112][ T5697] tipc: Disabling bearer [ 197.773154][ T5731] CIFS: Attempting to mount \\::1\share [ 197.797216][ T5731] CIFS: VFS: Error connecting to socket. Aborting operation. [ 197.834902][ T5731] CIFS: VFS: cifs_mount failed w/return code = -4 [ 198.266718][ T5741] futex_wake_op: syz.6.322 tries to shift op by 144; fix this program [ 198.287221][ T5741] loop6: detected capacity change from 0 to 1024 [ 200.710469][ T5750] device syzkaller0 entered promiscuous mode [ 202.099216][ T5773] smc: net device lo applied user defined pnetid SYZ0 [ 203.409544][ T4289] Bluetooth: hci3: command 0x0406 tx timeout [ 203.415619][ T4289] Bluetooth: hci1: command 0x0406 tx timeout [ 203.541638][ T5773] syz.5.329 (5773) used obsolete PPPIOCDETACH ioctl [ 204.825250][ T5794] sd 0:0:1:0: PR command failed: 1026 [ 204.831130][ T5794] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 204.838280][ T5794] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 205.375729][ T5797] netlink: 'syz.0.336': attribute type 1 has an invalid length. [ 205.416771][ T5797] 8021q: adding VLAN 0 to HW filter on device bond1 [ 208.069032][ T5811] sctp: failed to load transform for md5: -2 [ 208.097149][ T5797] bond1: (slave veth3): Enslaving as an active interface with a down link [ 208.338873][ T5803] device bond1 entered promiscuous mode [ 209.699891][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 210.874549][ T5846] netlink: 4 bytes leftover after parsing attributes in process `syz.2.345'. [ 210.916788][ T5846] device bridge0 entered promiscuous mode [ 211.084068][ T5846] device macvtap1 entered promiscuous mode [ 212.408753][ T5851] device bridge0 left promiscuous mode [ 212.459722][ T5851] device macvtap1 left promiscuous mode [ 215.166234][ T5876] sctp: failed to load transform for md5: -2 [ 219.783792][ T5898] loop6: detected capacity change from 0 to 512 [ 219.832257][ T5898] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 220.243323][ T5908] FAT-fs (loop6): error, fat_get_cluster: invalid start cluster (i_pos 0, start 22000003) [ 221.968314][ T5916] device syzkaller0 entered promiscuous mode [ 222.001833][ T5921] loop2: detected capacity change from 0 to 2048 [ 222.162256][ T5926] overlayfs: overlapping lowerdir path [ 222.191171][ T5921] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 223.261417][ T5937] SET target dimension over the limit! [ 223.309535][ T4360] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 223.519489][ T4360] usb 3-1: Using ep0 maxpacket: 16 [ 223.532604][ T4360] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 223.949755][ T4360] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 224.022355][ T4360] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 224.046812][ T4360] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.077902][ T4360] usb 3-1: Product: syz [ 224.088039][ T4360] usb 3-1: Manufacturer: syz [ 224.103700][ T4360] usb 3-1: SerialNumber: syz [ 224.147036][ T5947] semctl(GETNCNT/GETZCNT) is since 3.16 Single Unix Specification compliant. [ 224.147036][ T5947] The task syz.1.363 (5947) triggered the difference, watch for misbehavior. [ 224.324516][ T4360] usb 3-1: 0:2 : does not exist [ 224.354699][ T4360] usb 3-1: 5:0: failed to get current value for ch 0 (-22) [ 224.421703][ T4360] usb 3-1: USB disconnect, device number 8 [ 225.353517][ T5193] udevd[5193]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 226.101260][ T4281] EXT4-fs (loop2): unmounting filesystem. [ 228.975577][ T5979] mmap: syz.2.373 (5979) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 230.188347][ T26] audit: type=1326 audit(1786770317.719:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 230.232886][ T26] audit: type=1326 audit(1786770317.719:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=200 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 230.308575][ T26] audit: type=1326 audit(1786770317.719:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 230.390764][ T26] audit: type=1326 audit(1786770317.719:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 230.584257][ T26] audit: type=1326 audit(1786770317.719:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 230.677108][ T5996] o2cb: This node has not been configured. [ 230.683389][ T5996] o2cb: Cluster check failed. Fix errors before retrying. [ 230.691401][ T5996] (syz.6.366,5996,0):user_dlm_register:674 ERROR: status = -22 [ 230.699037][ T5996] (syz.6.366,5996,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file2" [ 231.519872][ T26] audit: type=1326 audit(1786770317.719:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 234.293263][ T26] audit: type=1326 audit(1786770317.719:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 234.589403][ T26] audit: type=1326 audit(1786770317.719:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 235.185869][ T6016] sctp: failed to load transform for md5: -2 [ 235.298876][ T26] audit: type=1326 audit(1786770317.719:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 235.753472][ T26] audit: type=1326 audit(1786770317.719:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 236.445435][ T26] audit: type=1326 audit(1786770317.719:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 236.938662][ T26] audit: type=1326 audit(1786770317.719:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 237.100676][ T26] audit: type=1326 audit(1786770317.739:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 237.369460][ T4275] Bluetooth: hci4: command 0x0406 tx timeout [ 237.749444][ T26] audit: type=1326 audit(1786770317.739:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 238.090625][ T26] audit: type=1326 audit(1786770317.739:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 239.651761][ T26] audit: type=1326 audit(1786770317.739:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 239.749866][ T26] audit: type=1326 audit(1786770317.739:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 239.799813][ T26] audit: type=1326 audit(1786770317.739:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=5974 comm="syz.2.373" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 241.131946][ T6132] tipc: Started in network mode [ 241.139509][ T6132] tipc: Node identity da8a571756e7, cluster identity 4711 [ 241.179613][ T6132] tipc: Enabled bearer , priority 0 [ 241.188592][ T6132] device syzkaller0 entered promiscuous mode [ 241.275433][ T6132] tipc: Resetting bearer [ 241.347477][ T6131] tipc: Resetting bearer [ 241.450897][ T6131] tipc: Disabling bearer [ 242.856454][ T6140] sctp: failed to load transform for md5: -2 [ 243.267778][ T6152] syz.1.390 (6152): drop_caches: 2 [ 243.356606][ T6162] netlink: 'syz.5.391': attribute type 1 has an invalid length. [ 244.197378][ T6167] sctp: failed to load transform for md5: -2 [ 244.366474][ T6163] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 244.737014][ T6184] nftables ruleset with unbound set [ 245.494856][ T6165] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 245.665810][ T6175] netlink: 28 bytes leftover after parsing attributes in process `syz.5.391'. [ 246.565464][ T6175] 8021q: adding VLAN 0 to HW filter on device bond1 [ 246.580532][ T6089] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 246.594892][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 246.751467][ T6089] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 247.619680][ T4289] Bluetooth: hci2: command 0x0406 tx timeout [ 247.810015][ T26] kauditd_printk_skb: 34 callbacks suppressed [ 247.810035][ T26] audit: type=1800 audit(1786770335.339:75): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="ipv4_address" dev="configfs" ino=40753 res=0 errno=0 [ 247.920124][ T6201] o2net: Error -99 while binding socket at 127.0.0.1:7 [ 247.967241][ T26] audit: type=1800 audit(1786770335.389:76): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="ipv4_port" dev="configfs" ino=40754 res=0 errno=0 [ 248.059533][ T6210] program syz.5.400 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 248.070244][ T6210] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 248.431829][ T26] audit: type=1800 audit(1786770335.389:77): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="num" dev="configfs" ino=40755 res=0 errno=0 [ 248.639861][ T6201] o2cb: This node has not been configured. [ 248.681059][ T26] audit: type=1800 audit(1786770335.389:78): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.399" name="local" dev="configfs" ino=40756 res=0 errno=0 [ 248.709744][ T6201] o2cb: Cluster check failed. Fix errors before retrying. [ 248.737350][ T6201] (syz.1.399,6201,1):user_dlm_register:674 ERROR: status = -22 [ 248.829764][ T6201] (syz.1.399,6201,0):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "mydomain" [ 248.855276][ T6217] netlink: 12 bytes leftover after parsing attributes in process `syz.6.401'. [ 249.900766][ T4318] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 251.439488][ T4318] usb 7-1: Using ep0 maxpacket: 8 [ 251.548874][ T4318] usb 7-1: unable to get BOS descriptor or descriptor too short [ 251.570465][ T4318] usb 7-1: unable to read config index 0 descriptor/start: -71 [ 251.619463][ T4318] usb 7-1: can't read configurations, error -71 [ 254.034663][ T6258] netlink: 'syz.5.412': attribute type 1 has an invalid length. [ 254.095577][ T6258] 8021q: adding VLAN 0 to HW filter on device bond2 [ 254.516435][ T6261] bond2: (slave syz_tun): making interface the new active one [ 254.744825][ T6261] bond2: (slave syz_tun): Enslaving as an active interface with an up link [ 255.917848][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.924289][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.719757][ T6299] netlink: 8 bytes leftover after parsing attributes in process `syz.6.417'. [ 256.733086][ T6299] device erspan1 entered promiscuous mode [ 257.100919][ T4360] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 259.399415][ T4360] usb 6-1: Using ep0 maxpacket: 16 [ 260.803008][ T26] audit: type=1326 audit(1786770347.619:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.1.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f71fe99e0d9 code=0x7fc00000 [ 260.881883][ T4360] usb 6-1: device descriptor read/all, error -71 [ 260.980398][ T26] audit: type=1326 audit(1786770348.149:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6312 comm="syz.1.423" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f71fe93f459 code=0x7fc00000 [ 264.674965][ T6348] CacheFiles: Failed to register: -95 [ 266.703770][ T6357] fuse: Bad value for 'fd' [ 267.232667][ T6379] loop6: detected capacity change from 0 to 1024 [ 270.506958][ T32] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 270.877437][ T6403] loop1: detected capacity change from 0 to 8 [ 270.929599][ T32] usb 7-1: Using ep0 maxpacket: 16 [ 270.960226][ T32] usb 7-1: config index 0 descriptor too short (expected 16456, got 72) [ 270.968643][ T32] usb 7-1: config 0 has an invalid interface number: 125 but max is 1 [ 271.179400][ T32] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 271.219382][ T32] usb 7-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 271.514575][ T32] usb 7-1: config 0 has no interface number 0 [ 271.553510][ T32] usb 7-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 271.589111][ T6456] SQUASHFS error: Failed to read block 0x4de: -5 [ 271.600581][ T6456] SQUASHFS error: Failed to read block 0x4de: -5 [ 271.779696][ T26] audit: type=1800 audit(1786770359.139:81): pid=6456 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.440" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 272.139042][ T32] usb 7-1: config 0 interface 125 altsetting 4 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 272.408596][ T32] usb 7-1: config 0 interface 125 has no altsetting 0 [ 273.397217][ T32] usb 7-1: string descriptor 0 read error: -71 [ 273.471772][ T32] usb 7-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 273.579710][ T32] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 273.660492][ T32] usb 7-1: config 0 descriptor?? [ 273.868454][ T32] usb 7-1: can't set config #0, error -71 [ 273.875544][ T32] usb 7-1: USB disconnect, device number 4 [ 277.505803][ T6515] loop6: detected capacity change from 0 to 512 [ 277.540897][ T6515] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 281.974394][ T6536] device syzkaller0 entered promiscuous mode [ 286.681347][ T6579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 286.858526][ T6579] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 287.614963][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.2.470'. [ 287.882801][ T6588] netlink: 'syz.1.471': attribute type 1 has an invalid length. [ 292.337502][ T6621] fuse: Bad value for 'fd' [ 294.621347][ T4359] smpboot: CPU 1 is now offline [ 298.934259][ T4289] Bluetooth: hci0: command 0x0406 tx timeout [ 301.972049][ T6746] device syzkaller0 entered promiscuous mode [ 302.047592][ T6746] tipc: Started in network mode [ 302.082326][ T6746] tipc: Node identity e24cf482433c, cluster identity 4711 [ 303.341328][ T6746] tipc: Enabled bearer , priority 0 [ 303.393795][ T6751] tipc: Resetting bearer [ 303.428822][ T6745] tipc: Resetting bearer [ 303.446635][ T6757] jffs2: notice: (6757) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 303.539013][ T6745] tipc: Disabling bearer [ 308.146849][ T6790] jffs2: notice: (6790) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 308.906632][ T6799] netlink: 8 bytes leftover after parsing attributes in process `syz.2.513'. [ 309.144993][ T4318] libceph: connect (1)[c::]:6789 error -101 [ 309.171472][ T4318] libceph: mon0 (1)[c::]:6789 connect error [ 310.529709][ T7] libceph: connect (1)[c::]:6789 error -101 [ 310.535742][ T7] libceph: mon0 (1)[c::]:6789 connect error [ 310.562644][ T6803] ceph: No mds server is up or the cluster is laggy [ 315.213255][ T6859] loop5: detected capacity change from 0 to 256 [ 315.301944][ T6859] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 315.410576][ T6859] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 315.501899][ T6859] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 315.931362][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 315.937693][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.988966][ T6887] nvme_fabrics: unknown parameter or missing value 'tr' in ctrl creation request [ 319.269488][ T4318] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 319.540777][ T4318] usb 7-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 319.604468][ T4318] usb 7-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 319.671908][ T4318] usb 7-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 319.766826][ T4318] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 319.851687][ T6885] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 319.940028][ T4275] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 319.949983][ T4275] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 319.966664][ T4275] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 319.990680][ T4275] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 319.998269][ T4273] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 320.008162][ T4273] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.566667][ T4318] usb 7-1: USB disconnect, device number 5 [ 322.143411][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 322.371907][ T6898] chnl_net:caif_netlink_parms(): no params data found [ 323.816583][ T6915] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.826021][ T6915] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.846064][ T6915] device bond1 left promiscuous mode [ 324.169768][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 325.053526][ T6898] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.262903][ T4289] Bluetooth: hci5: command 0x040f tx timeout [ 326.299837][ T6898] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.270086][ T6898] device bridge_slave_0 entered promiscuous mode [ 327.438048][ T6898] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.479566][ T6898] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.533826][ T6898] device bridge_slave_1 entered promiscuous mode [ 327.718687][ T6898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.846185][ T6898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.064475][ T6898] team0: Port device team_slave_0 added [ 328.136977][ T6898] team0: Port device team_slave_1 added [ 328.334464][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 328.681489][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.689112][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.837784][ T6952] kvm: pic: non byte write [ 328.914245][ T6952] kvm: vcpu 0: requested 1536 ns lapic timer period limited to 200000 ns [ 328.964089][ T6898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.596468][ T6085] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.688295][ T6898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.726168][ T6898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.990411][ T6898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 331.079089][ T6085] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.208258][ T6986] sctp: [Deprecated]: syz.6.545 (pid 6986) Use of int in maxseg socket option. [ 331.208258][ T6986] Use struct sctp_assoc_value instead [ 332.893444][ T6990] "syz.5.547" (6990) uses obsolete ecb(arc4) skcipher [ 332.900754][ T6990] syz.5.547 sent an empty control message without MSG_MORE. [ 332.987035][ T6085] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.384048][ T6898] device hsr_slave_0 entered promiscuous mode [ 334.975168][ T6898] device hsr_slave_1 entered promiscuous mode [ 335.026676][ T6898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.074179][ T6898] Cannot create hsr debugfs directory [ 335.312422][ T6085] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.235524][ T7022] device bond0 entered promiscuous mode [ 337.260667][ T7022] device bond_slave_0 entered promiscuous mode [ 337.304112][ T7022] device bond_slave_1 entered promiscuous mode [ 338.556574][ T6085] tipc: Left network mode [ 338.608119][ T6898] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 338.901023][ T6898] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 339.096476][ T7045] loop6: detected capacity change from 0 to 512 [ 339.105376][ T6898] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 339.429050][ T7045] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 339.451827][ T6898] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 340.157207][ T4635] Quota error (device loop6): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 340.492596][ T7045] EXT4-fs (loop6): 1 orphan inode deleted [ 340.518723][ T7045] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 340.528158][ T4635] EXT4-fs error (device loop6): ext4_release_dquot:6877: comm kworker/u4:16: Failed to release dquot type 1 [ 340.622858][ T7045] ext4 filesystem being mounted at /49/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 341.413491][ T5280] EXT4-fs (loop6): unmounting filesystem. [ 345.557117][ T6898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.944741][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 345.954886][ T7093] kvm [7091]: vcpu0, guest rIP: 0x1b8 Unhandled WRMSR(0x11e) = 0xbe702111 [ 345.978467][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 346.126363][ T6898] 8021q: adding VLAN 0 to HW filter on device team0 [ 346.424457][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 347.613627][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 347.668516][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.675708][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 348.690802][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 348.763538][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 348.813521][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.820642][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 348.923324][ T7124] syz.0.574 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 349.074937][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 349.105206][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 349.137086][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 349.194372][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 349.263749][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 349.325726][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 349.387370][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 349.458085][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 349.529965][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 349.613654][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 349.712594][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 349.789927][ T6898] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 350.035723][ T7128] netlink: 36 bytes leftover after parsing attributes in process `syz.0.574'. [ 350.078266][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 350.452984][ T7157] loop6: detected capacity change from 0 to 256 [ 351.780487][ T7162] netlink: 16 bytes leftover after parsing attributes in process `syz.5.579'. [ 354.452240][ T7189] overlayfs: failed to clone upperpath [ 355.690290][ T6085] device hsr_slave_0 left promiscuous mode [ 355.731945][ T6085] device hsr_slave_1 left promiscuous mode [ 355.906968][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.939681][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.804954][ T7205] ecryptfs_parse_options: eCryptfs: unrecognized option [³(] [ 356.812534][ T7205] ecryptfs_parse_options: eCryptfs: unrecognized option [{\)] [ 356.820072][ T7205] ecryptfs_parse_options: You must supply at least one valid auth tok signature as a mount parameter; see the eCryptfs README [ 356.833361][ T7205] Error parsing options; rc = [-22] [ 356.956349][ T6085] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.996796][ T6085] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 357.043918][ T6085] device bridge_slave_1 left promiscuous mode [ 357.093626][ T6085] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.170329][ T6085] device bridge_slave_0 left promiscuous mode [ 357.198421][ T6085] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.240684][ T6085] device veth1_macvtap left promiscuous mode [ 358.280324][ T6085] device veth0_macvtap left promiscuous mode [ 358.342410][ T6085] device veth1_vlan left promiscuous mode [ 358.348213][ T6085] device veth0_vlan left promiscuous mode [ 361.330498][ T7232] UBIFS error (pid: 7232): cannot open "c:::", error -22 [ 364.268718][ T6085] team0 (unregistering): Port device team_slave_1 removed [ 364.472891][ T6085] team0 (unregistering): Port device team_slave_0 removed [ 365.002698][ T6085] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 365.127007][ T6085] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.457349][ T6085] bond0 (unregistering): Released all slaves [ 367.991217][ T7204] device bond0 entered promiscuous mode [ 368.121722][ T7204] device bond_slave_0 entered promiscuous mode [ 368.138181][ T7204] device bond_slave_1 entered promiscuous mode [ 368.155101][ T7204] device vxlan0 entered promiscuous mode [ 368.405763][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 368.445434][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 368.550701][ T6898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 372.842731][ T7306] loop5: detected capacity change from 0 to 64 [ 372.857679][ T7306] BFS-fs: bfs_fill_super(): loop5 is unclean, continuing [ 375.551433][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 375.588238][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 375.697997][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 375.736632][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 375.875642][ T6898] device veth0_vlan entered promiscuous mode [ 375.893154][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 376.749979][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 376.815007][ T6898] device veth1_vlan entered promiscuous mode [ 377.114129][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 377.210226][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 377.279979][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 377.341219][ T6898] device veth0_macvtap entered promiscuous mode [ 377.445013][ T6898] device veth1_macvtap entered promiscuous mode [ 377.525503][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.591854][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.652502][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.704741][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.717472][ T26] audit: type=1326 audit(1786770465.259:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 377.801828][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.831061][ T7362] netlink: 16 bytes leftover after parsing attributes in process `syz.2.623'. [ 377.869055][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.885368][ T26] audit: type=1326 audit(1786770465.289:83): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 377.942894][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.989238][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 378.029185][ T26] audit: type=1326 audit(1786770465.289:84): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 378.104167][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.168316][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 378.224956][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 378.282355][ T26] audit: type=1326 audit(1786770465.289:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 378.330346][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 378.386310][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 378.538478][ T7371] binder: 7369:7371 ioctl 4018620d 0 returned -22 [ 378.797354][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.807540][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.816964][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 378.861341][ T26] audit: type=1326 audit(1786770465.289:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 378.918469][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.001110][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.074350][ T26] audit: type=1326 audit(1786770465.289:87): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 379.107014][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.187367][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.386667][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.409369][ T26] audit: type=1326 audit(1786770465.289:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 379.483090][ T6898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 380.351232][ T6898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 380.387983][ T26] audit: type=1326 audit(1786770465.289:89): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 380.569379][ T6898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 380.698746][ T26] audit: type=1326 audit(1786770465.289:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 380.723004][ T7396] device bond0 entered promiscuous mode [ 380.859348][ T7396] device bond_slave_0 entered promiscuous mode [ 380.941507][ T7396] device bond_slave_1 entered promiscuous mode [ 381.043836][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 381.058218][ T26] audit: type=1326 audit(1786770465.289:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7356 comm="syz.5.622" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7feb7139e0d9 code=0x7fc00000 [ 381.122818][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 381.300212][ T7371] syz.5.624 (7371): drop_caches: 2 [ 381.309532][ T4273] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 381.322009][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 381.331131][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 381.339612][ T4273] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 381.347312][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 381.354814][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.354805][ T7423] netlink: 12 bytes leftover after parsing attributes in process `syz.2.633'. [ 383.418274][ T4289] Bluetooth: hci4: command 0x0409 tx timeout [ 383.683119][ T26] kauditd_printk_skb: 29 callbacks suppressed [ 383.683187][ T26] audit: type=1326 audit(1786770471.219:121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 383.928643][ T26] audit: type=1326 audit(1786770471.219:122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=294 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 384.239431][ T26] audit: type=1326 audit(1786770471.259:123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 384.931555][ T26] audit: type=1326 audit(1786770471.259:124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 385.244092][ T7401] chnl_net:caif_netlink_parms(): no params data found [ 385.785119][ T4289] Bluetooth: hci4: command 0x041b tx timeout [ 385.856332][ T26] audit: type=1326 audit(1786770471.259:125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 387.302066][ T26] audit: type=1326 audit(1786770471.259:126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 387.473213][ T7474] loop5: detected capacity change from 0 to 256 [ 387.512833][ T7401] bridge0: port 1(bridge_slave_0) entered blocking state [ 387.542660][ T7401] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.768347][ T7401] device bridge_slave_0 entered promiscuous mode [ 388.017914][ T4289] Bluetooth: hci4: command 0x040f tx timeout [ 388.029184][ T7480] FAT-fs (loop5): error, fat_free_clusters: deleting FAT entry beyond EOF [ 388.074868][ T26] audit: type=1326 audit(1786770471.259:127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 388.157442][ T7401] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.232020][ T7401] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.347370][ T7401] device bridge_slave_1 entered promiscuous mode [ 388.541705][ T26] audit: type=1326 audit(1786770471.259:128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 388.700946][ T7401] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.766881][ T26] audit: type=1326 audit(1786770471.259:129): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 388.807435][ T7401] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.953715][ T26] audit: type=1326 audit(1786770471.259:130): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 389.269759][ T7496] loop5: detected capacity change from 0 to 512 [ 389.545385][ T26] audit: type=1326 audit(1786770471.259:131): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 389.587544][ T7496] EXT4-fs (loop5): encrypted files will use data=ordered instead of data journaling mode [ 389.647006][ T7401] team0: Port device team_slave_0 added [ 389.690032][ T7496] EXT4-fs warning (device loop5): ext4_expand_extra_isize_ea:2802: Unable to expand inode 15. Delete some EAs or run e2fsck. [ 389.747502][ T26] audit: type=1326 audit(1786770471.259:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 389.793209][ T7401] team0: Port device team_slave_1 added [ 389.811099][ T7496] EXT4-fs (loop5): 1 truncate cleaned up [ 389.856446][ T7496] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 390.014900][ T26] audit: type=1326 audit(1786770471.259:133): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 390.200684][ T4289] Bluetooth: hci4: command 0x0419 tx timeout [ 391.406159][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.437254][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.523822][ T26] audit: type=1326 audit(1786770471.259:134): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 391.618246][ T7401] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.633987][ T26] audit: type=1326 audit(1786770471.259:135): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 392.851126][ T7521] overlayfs: unrecognized mount option "/" or missing value [ 392.966208][ T4852] EXT4-fs (loop5): unmounting filesystem. [ 393.043402][ T7401] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 394.176562][ T26] audit: type=1326 audit(1786770471.259:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 394.264038][ T7401] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 394.829127][ T26] audit: type=1326 audit(1786770471.259:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 394.873243][ T7401] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 395.036424][ T26] audit: type=1326 audit(1786770471.259:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 396.357788][ T26] audit: type=1326 audit(1786770471.259:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 396.544079][ T26] audit: type=1326 audit(1786770471.259:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 396.651115][ T7401] device hsr_slave_0 entered promiscuous mode [ 396.713629][ T7401] device hsr_slave_1 entered promiscuous mode [ 396.721709][ T7549] overlayfs: missing 'lowerdir' [ 396.748200][ T26] audit: type=1326 audit(1786770471.259:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 396.782831][ T7401] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.891964][ T7401] Cannot create hsr debugfs directory [ 396.923272][ T7552] loop5: detected capacity change from 0 to 128 [ 396.934549][ T7552] EXT4-fs (loop5): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 397.017121][ T7249] udevd[7249]: incorrect ext4 checksum on /dev/loop5 [ 397.055559][ T26] audit: type=1326 audit(1786770471.259:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 397.318694][ T4335] device hsr_slave_0 left promiscuous mode [ 397.348907][ T26] audit: type=1326 audit(1786770471.259:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 397.390882][ T4335] device hsr_slave_1 left promiscuous mode [ 397.455428][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.476518][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.489247][ T26] audit: type=1326 audit(1786770471.259:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 397.554823][ T4335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.598064][ T4335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.647544][ T4335] device bridge_slave_1 left promiscuous mode [ 397.670871][ T26] audit: type=1326 audit(1786770471.259:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7432 comm="syz.2.634" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb719b9e0d9 code=0x7fc00000 [ 397.707728][ T4335] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.742952][ T4335] device bridge_slave_0 left promiscuous mode [ 397.758649][ T4335] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.022195][ T4335] device veth1_macvtap left promiscuous mode [ 398.028254][ T4335] device veth0_macvtap left promiscuous mode [ 398.112770][ T4335] device veth1_vlan left promiscuous mode [ 398.580753][ T7577] xt_TCPMSS: Only works on TCP SYN packets [ 398.594038][ T4335] device veth0_vlan left promiscuous mode [ 402.618151][ T4335] team0 (unregistering): Port device team_slave_1 removed [ 402.675710][ T4335] team0 (unregistering): Port device team_slave_0 removed [ 402.731895][ T4335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.788982][ T4335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.736380][ T4335] bond0 (unregistering): Released all slaves [ 403.914962][ T7577] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 408.228732][ T7648] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 408.814506][ T7401] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 408.876294][ T7401] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 408.931069][ T7401] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 409.082040][ T7401] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 410.652166][ T7401] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.750785][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 410.791191][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 410.851150][ T7401] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.924240][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 410.970364][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 411.034315][ T4635] bridge0: port 1(bridge_slave_0) entered blocking state [ 411.041455][ T4635] bridge0: port 1(bridge_slave_0) entered forwarding state [ 411.181765][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 411.220223][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 411.307722][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 411.362596][ T4635] bridge0: port 2(bridge_slave_1) entered blocking state [ 411.369741][ T4635] bridge0: port 2(bridge_slave_1) entered forwarding state [ 411.935766][ T7686] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 412.197458][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 412.232466][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 412.365735][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 412.496836][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 413.732725][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 414.212713][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 414.275145][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 414.427025][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 415.788940][ T7708] hub 8-0:1.0: USB hub found [ 415.794919][ T7708] hub 8-0:1.0: 1 port detected [ 415.837758][ T4635] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 416.024851][ T7706] loop5: detected capacity change from 0 to 40427 [ 416.111645][ T7706] F2FS-fs (loop5): Invalid log_blocksize (268), supports only 12 [ 416.119480][ T7706] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 416.130628][ T7706] F2FS-fs (loop5): invalid crc value [ 416.188337][ T7401] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 416.210129][ T7706] F2FS-fs (loop5): Found nat_bits in checkpoint [ 416.262175][ T7706] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 416.269423][ T7706] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e5 [ 416.443493][ T7401] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 416.530484][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 416.585758][ T6085] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 418.938007][ T7745] netlink: 36 bytes leftover after parsing attributes in process `syz.0.703'. [ 421.988240][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 422.026841][ T6077] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 422.177382][ T7401] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.927233][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 425.963407][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 426.047063][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 426.092897][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 426.154461][ T7401] device veth0_vlan entered promiscuous mode [ 426.209070][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 426.249028][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 426.672894][ T7798] netlink: 32 bytes leftover after parsing attributes in process `syz.2.712'. [ 426.780891][ T7401] device veth1_vlan entered promiscuous mode [ 426.942563][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 426.966882][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 429.012749][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 429.047528][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 429.184321][ T7401] device veth0_macvtap entered promiscuous mode [ 429.252322][ T7401] device veth1_macvtap entered promiscuous mode [ 429.383043][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 429.473539][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 429.546762][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.024006][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.097442][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.174267][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.228353][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 430.258745][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 430.409408][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 430.419041][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 430.444850][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 430.510431][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 430.575848][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 430.660016][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 432.153574][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.169294][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.248026][ T7843] futex_wake_op: syz.5.720 tries to shift op by 144; fix this program [ 433.295216][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.338754][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.401818][ T7401] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 433.436994][ T7401] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 433.558819][ T7401] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.627915][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 433.657836][ T6065] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 434.854348][ T7855] random: crng reseeded on system resumption [ 434.884529][ T7851] team0: Device wg0 is of different type [ 434.998430][ T7855] Restarting kernel threads ... done. [ 435.026482][ T7851] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 435.087920][ T7401] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.185275][ T7401] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.431288][ T7401] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.599239][ T7401] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.888632][ T7874] loop6: detected capacity change from 0 to 164 [ 438.009689][ T4323] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 438.022975][ T6085] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.082318][ T6085] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.132374][ T4335] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 438.626418][ T7881] tmpfs: Unknown parameter 'quota' [ 438.633881][ T4323] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 438.699157][ T40] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.743283][ T40] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 438.751839][ T4323] usb 6-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 438.808004][ T40] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 438.835079][ T4323] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 438.895302][ T4323] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 438.947713][ T7872] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 439.731659][ T7872] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 439.836211][ T4323] usb 6-1: USB disconnect, device number 4 [ 440.102778][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.109077][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.070373][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 444.295653][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 444.311008][ T4275] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 444.320848][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 444.337493][ T4275] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 444.344805][ T4275] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 445.141694][ T7938] loop6: detected capacity change from 0 to 256 [ 445.385294][ T7939] loop5: detected capacity change from 0 to 8 [ 445.494000][ T40] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.409430][ T4275] Bluetooth: hci4: command 0x0409 tx timeout [ 447.474741][ T7950] fuse: Unknown parameter 'ÿÿÿÿÿÿÿÿ0xffffffffffffffff' [ 447.523785][ T7950] netlink: 'syz.0.742': attribute type 21 has an invalid length. [ 447.838757][ T40] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.919332][ T4286] usb 6-1: new full-speed USB device number 5 using dummy_hcd [ 448.790013][ T4275] Bluetooth: hci4: command 0x041b tx timeout [ 448.968443][ T7965] loop6: detected capacity change from 0 to 1024 [ 449.002930][ T40] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.040399][ T4286] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 449.220643][ T4286] usb 6-1: config 0 interface 0 altsetting 254 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 449.533736][ T4286] usb 6-1: config 0 interface 0 has no altsetting 0 [ 449.681350][ T4286] usb 6-1: New USB device found, idVendor=054c, idProduct=0374, bcdDevice= 0.00 [ 449.704359][ T4286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 450.004681][ T4286] usb 6-1: config 0 descriptor?? [ 450.046591][ T4286] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 450.195355][ T4635] hfsplus: b-tree write err: -5, ino 25 [ 450.255380][ T4635] hfsplus: b-tree write err: -5, ino 4 [ 450.277396][ T40] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.294425][ T4635] hfsplus: b-tree write err: -5, ino 2 [ 450.363527][ T7973] sctp: failed to load transform for md5: -2 [ 450.809394][ T4275] Bluetooth: hci4: command 0x040f tx timeout [ 451.598693][ T7927] chnl_net:caif_netlink_parms(): no params data found [ 453.049458][ T4275] Bluetooth: hci4: command 0x0419 tx timeout [ 453.176642][ T4323] usb 6-1: USB disconnect, device number 5 [ 453.252460][ T8001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.747'. [ 454.487407][ T7927] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.658484][ T7927] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.938785][ T8021] loop5: detected capacity change from 0 to 164 [ 454.986390][ T7927] device bridge_slave_0 entered promiscuous mode [ 455.681790][ T8028] loop6: detected capacity change from 0 to 128 [ 455.692045][ T7927] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.741864][ T7927] bridge0: port 2(bridge_slave_1) entered disabled state [ 455.945465][ T7927] device bridge_slave_1 entered promiscuous mode [ 457.991865][ T7927] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 458.704523][ T7927] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 460.107702][ T8035] sctp: failed to load transform for md5: -2 [ 461.792263][ T7927] team0: Port device team_slave_0 added [ 463.719009][ T7927] team0: Port device team_slave_1 added [ 463.832252][ T40] device hsr_slave_0 left promiscuous mode [ 463.869372][ T40] device hsr_slave_1 left promiscuous mode [ 463.888957][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 463.896410][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 463.953591][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 464.001070][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 464.012702][ T8086] 9pnet_virtio: no channels available for device syz [ 464.044716][ T40] device bridge_slave_1 left promiscuous mode [ 464.072054][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.163232][ T40] device bridge_slave_0 left promiscuous mode [ 464.193265][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.239148][ T40] device veth1_macvtap left promiscuous mode [ 465.442588][ T40] device veth0_macvtap left promiscuous mode [ 465.488185][ T40] device veth1_vlan left promiscuous mode [ 465.518694][ T40] device veth0_vlan left promiscuous mode [ 469.356532][ T8119] autofs4:pid:8119:autofs_fill_super: called with bogus options [ 473.866518][ T8140] loop5: detected capacity change from 0 to 164 [ 475.789969][ T8138] sctp: failed to load transform for md5: -2 [ 476.312093][ T40] team0 (unregistering): Port device team_slave_1 removed [ 476.475004][ T40] team0 (unregistering): Port device team_slave_0 removed [ 476.778679][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 477.303004][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 480.751820][ T8179] fuse: Bad value for 'fd' [ 481.934593][ T40] bond0 (unregistering): Released all slaves [ 482.228106][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.6.774'. [ 482.468833][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 482.475801][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.297353][ T4289] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.307769][ T4273] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.316171][ T4289] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.324670][ T4289] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.333767][ T4289] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 484.341180][ T4289] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.364414][ T7927] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.547946][ T7927] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.593620][ T7927] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.773236][ T7927] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.011116][ T7927] device hsr_slave_0 entered promiscuous mode [ 485.114242][ T7927] device hsr_slave_1 entered promiscuous mode [ 485.171246][ T8201] cgroup: name respecified [ 485.314325][ T7927] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.727678][ T7927] Cannot create hsr debugfs directory [ 486.773789][ T4289] Bluetooth: hci0: command 0x0409 tx timeout [ 487.751034][ T40] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.547568][ T8211] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 488.556929][ T8211] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 488.566624][ T8211] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 488.744089][ T40] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 488.917347][ T4289] Bluetooth: hci0: command 0x041b tx timeout [ 489.015122][ T8191] chnl_net:caif_netlink_parms(): no params data found [ 489.407772][ T40] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 490.967383][ T4289] Bluetooth: hci0: command 0x040f tx timeout [ 492.103764][ T8228] kAFS: unable to lookup cell '/,c¾ûL' [ 492.115830][ T8228] binder: BINDER_SET_CONTEXT_MGR already set [ 492.122319][ T8228] binder: 8227:8228 ioctl 4018620d 200000004a80 returned -16 [ 492.164363][ T40] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 493.047210][ T4289] Bluetooth: hci0: command 0x0419 tx timeout [ 494.115562][ T8191] bridge0: port 1(bridge_slave_0) entered blocking state [ 494.164606][ T8191] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.215116][ T8191] device bridge_slave_0 entered promiscuous mode [ 494.330780][ T8191] bridge0: port 2(bridge_slave_1) entered blocking state [ 494.381914][ T8191] bridge0: port 2(bridge_slave_1) entered disabled state [ 494.432650][ T8191] device bridge_slave_1 entered promiscuous mode [ 494.665093][ T8191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.888596][ T8191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.151647][ T8255] netlink: 48 bytes leftover after parsing attributes in process `syz.0.802'. [ 495.320282][ T8191] team0: Port device team_slave_0 added [ 495.350590][ T40] tipc: Left network mode [ 495.391799][ T8191] team0: Port device team_slave_1 added [ 495.692401][ T7927] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 496.320839][ T7927] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 496.347100][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.371653][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.495344][ T8191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.752572][ T8274] Bluetooth: MGMT ver 1.22 [ 496.757556][ T7927] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 496.804617][ T8191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.831006][ T8191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.956120][ T8191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 497.071844][ T7927] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 498.255739][ T8287] netlink: 12 bytes leftover after parsing attributes in process `syz.2.805'. [ 498.615164][ T8191] device hsr_slave_0 entered promiscuous mode [ 499.828947][ T8191] device hsr_slave_1 entered promiscuous mode [ 499.962199][ T8191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 500.025514][ T8191] Cannot create hsr debugfs directory [ 500.091299][ T8301] tmpfs: Unknown parameter 'quota' [ 501.677138][ T1280] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.683459][ T1280] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.980046][ T4275] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 501.990627][ T4275] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 501.998994][ T4273] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 502.008467][ T4275] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 502.021694][ T4273] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 502.029685][ T4273] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 502.465054][ T8322] loop5: detected capacity change from 0 to 256 [ 502.573330][ T40] device hsr_slave_0 left promiscuous mode [ 502.587925][ T8322] FAT-fs (loop5): Directory bread(block 64) failed [ 502.618228][ T40] device hsr_slave_1 left promiscuous mode [ 502.632767][ T8322] FAT-fs (loop5): Directory bread(block 65) failed [ 502.655913][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 502.676050][ T8322] FAT-fs (loop5): Directory bread(block 66) failed [ 502.703412][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 502.720968][ T8322] FAT-fs (loop5): Directory bread(block 67) failed [ 502.744496][ T40] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 502.758654][ T8322] FAT-fs (loop5): Directory bread(block 68) failed [ 502.782943][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 502.798900][ T8322] FAT-fs (loop5): Directory bread(block 69) failed [ 502.825490][ T8322] FAT-fs (loop5): Directory bread(block 70) failed [ 502.834578][ T40] device bridge_slave_1 left promiscuous mode [ 502.863052][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 502.873526][ T8322] FAT-fs (loop5): Directory bread(block 71) failed [ 502.909670][ T8322] FAT-fs (loop5): Directory bread(block 72) failed [ 502.920031][ T40] device bridge_slave_0 left promiscuous mode [ 502.938496][ T8322] FAT-fs (loop5): Directory bread(block 73) failed [ 502.948755][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.095841][ T40] device veth1_macvtap left promiscuous mode [ 503.261351][ T40] device veth0_macvtap left promiscuous mode [ 505.131601][ T4273] Bluetooth: hci4: command 0x0409 tx timeout [ 505.158792][ T40] device veth1_vlan left promiscuous mode [ 506.126754][ T8321] syz.5.814: attempt to access beyond end of device [ 506.126754][ T8321] loop5: rw=2049, sector=1256, nr_sectors = 12 limit=256 [ 506.173678][ T40] device veth0_vlan left promiscuous mode [ 507.428992][ T4273] Bluetooth: hci4: command 0x041b tx timeout [ 509.427965][ T8338] loop5: detected capacity change from 0 to 128 [ 509.446310][ T4273] Bluetooth: hci4: command 0x040f tx timeout [ 509.468221][ T8341] capability: warning: `syz.2.821' uses deprecated v2 capabilities in a way that may be insecure [ 509.510243][ T8338] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 509.560317][ T8338] ext4 filesystem being mounted at /142/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 509.950155][ T4852] EXT4-fs (loop5): unmounting filesystem. [ 510.090488][ T8352] genirq: Flags mismatch irq 4. 00000000 (pcl812) vs. 00000000 (ttyS0) [ 511.526085][ T4273] Bluetooth: hci4: command 0x0419 tx timeout [ 514.215188][ T40] team0 (unregistering): Port device team_slave_1 removed [ 514.273815][ T40] team0 (unregistering): Port device team_slave_0 removed [ 514.324918][ T40] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 514.338307][ T40] device bond_slave_1 left promiscuous mode [ 514.420514][ T40] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 514.439210][ T40] device bond_slave_0 left promiscuous mode [ 514.830800][ T8368] PKCS7: Unknown OID: [4] 0.0 [ 514.835802][ T8368] PKCS7: Only support pkcs7_signedData type [ 514.843568][ T8368] xt_policy: output policy not valid in PREROUTING and INPUT [ 515.229058][ T40] bond0 (unregistering): Released all slaves [ 516.537649][ T8191] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 518.185421][ T8191] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 518.325222][ T8191] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 518.399278][ T8191] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 518.662091][ T8316] chnl_net:caif_netlink_parms(): no params data found [ 518.775815][ T4286] usb 6-1: new full-speed USB device number 6 using dummy_hcd [ 518.950406][ T8191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 518.997171][ T4286] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 519.026338][ T8316] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.061006][ T4286] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 23 [ 519.087349][ T8316] bridge0: port 1(bridge_slave_0) entered disabled state [ 519.126072][ T8316] device bridge_slave_0 entered promiscuous mode [ 519.133308][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 519.171544][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 519.216147][ T4286] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 519.228093][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.272108][ T8316] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.279870][ T4286] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 519.298305][ T8316] bridge0: port 2(bridge_slave_1) entered disabled state [ 519.336804][ T4286] usb 6-1: SerialNumber: syz [ 519.353426][ T8316] device bridge_slave_1 entered promiscuous mode [ 519.392107][ T4286] hub 6-1:1.0: bad descriptor, ignoring hub [ 519.421532][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 519.439659][ T4286] hub: probe of 6-1:1.0 failed with error -5 [ 519.472761][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 519.494515][ T4286] cdc_acm 6-1:1.0: Control and data interfaces are not separated! [ 519.544237][ T6087] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.551579][ T6087] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.570108][ T4286] cdc_acm 6-1:1.0: This needs exactly 3 endpoints [ 519.610446][ T4286] cdc_acm: probe of 6-1:1.0 failed with error -22 [ 519.731616][ T4286] usb 6-1: USB disconnect, device number 6 [ 520.719050][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 520.803014][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 520.861018][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 520.919547][ T8411] general protection fault, probably for non-canonical address 0xdffffc0000000000: 0000 [#1] PREEMPT SMP KASAN [ 520.931735][ T8411] KASAN: null-ptr-deref in range [0x0000000000000000-0x0000000000000007] [ 520.940172][ T8411] CPU: 0 PID: 8411 Comm: syz.5.833 Not tainted syzkaller #0 [ 520.947444][ T8411] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 520.957491][ T8411] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 520.963561][ T8411] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 520.983180][ T8411] RSP: 0018:ffffc900034377e0 EFLAGS: 00010246 [ 520.989263][ T8411] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 520.997225][ T8411] RDX: ffff8880268d1e00 RSI: 0000000000000003 RDI: 0000000000000005 [ 521.005185][ T8411] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 521.013161][ T8411] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 521.021124][ T8411] R13: ffff888026c5c4a8 R14: ffff8880280b1238 R15: 0000000000000000 [ 521.029091][ T8411] FS: 00007feb721d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 521.038011][ T8411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 521.044585][ T8411] CR2: 0000001b31717ff8 CR3: 000000004c46f000 CR4: 00000000003506f0 [ 521.052564][ T8411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 521.060526][ T8411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 521.068490][ T8411] Call Trace: [ 521.071796][ T8411] [ 521.074749][ T8411] ? dummy_wakeup+0x260/0x260 [ 521.079454][ T8411] usb_gadget_set_selfpowered+0x6a/0x2b0 [ 521.085082][ T8411] composite_dev_prepare+0x2f3/0x310 [ 521.090379][ T8411] configfs_composite_bind+0xa1/0xf60 [ 521.095742][ T8411] ? kernfs_put+0x442/0x480 [ 521.100248][ T8411] ? os_desc_qw_sign_store+0x100/0x100 [ 521.105698][ T8411] gadget_bind_driver+0x2af/0x760 [ 521.110716][ T8411] ? gadget_match_driver+0x130/0x130 [ 521.115994][ T8411] really_probe+0x24a/0xb40 [ 521.120531][ T8411] ? pm_runtime_barrier+0x147/0x1c0 [ 521.125740][ T8411] __driver_probe_device+0x1f5/0x390 [ 521.131017][ T8411] driver_probe_device+0x4f/0x420 [ 521.136032][ T8411] __driver_attach+0x43d/0x6c0 [ 521.140786][ T8411] ? driver_attach+0x40/0x40 [ 521.145365][ T8411] bus_for_each_dev+0x182/0x1f0 [ 521.150220][ T8411] ? __lock_acquire+0x7c40/0x7c40 [ 521.155265][ T8411] ? bus_remove_file+0xd0/0xd0 [ 521.160032][ T8411] ? do_raw_spin_unlock+0x11d/0x230 [ 521.165230][ T8411] bus_add_driver+0x324/0x5d0 [ 521.169934][ T8411] driver_register+0x32d/0x430 [ 521.174700][ T8411] usb_gadget_register_driver_owner+0xf5/0x260 [ 521.180859][ T8411] gadget_dev_desc_UDC_store+0x1c3/0x2e0 [ 521.186503][ T8411] configfs_write_iter+0x30b/0x400 [ 521.191624][ T8411] ? gadget_dev_desc_UDC_show+0x80/0x80 [ 521.197186][ T8411] vfs_write+0x482/0x9a0 [ 521.201502][ T8411] ? file_end_write+0x250/0x250 [ 521.206363][ T8411] ? __fget_files+0x3fc/0x460 [ 521.211046][ T8411] ? __fdget_pos+0x2ae/0x360 [ 521.215627][ T8411] ? ksys_write+0x70/0x260 [ 521.220036][ T8411] ksys_write+0x14d/0x260 [ 521.224360][ T8411] ? __ia32_sys_read+0x80/0x80 [ 521.229118][ T8411] ? lockdep_hardirqs_on+0x94/0x140 [ 521.234325][ T8411] do_syscall_64+0x4c/0xa0 [ 521.238742][ T8411] ? clear_bhb_loop+0x60/0xb0 [ 521.243458][ T8411] ? clear_bhb_loop+0x60/0xb0 [ 521.248126][ T8411] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 521.254025][ T8411] RIP: 0033:0x7feb7139e0d9 [ 521.258430][ T8411] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 521.278290][ T8411] RSP: 002b:00007feb721d6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 521.286714][ T8411] RAX: ffffffffffffffda RBX: 00007feb71625fa0 RCX: 00007feb7139e0d9 [ 521.294677][ T8411] RDX: 000000000000000b RSI: 0000200000000700 RDI: 0000000000000005 [ 521.302639][ T8411] RBP: 00007feb71435024 R08: 0000000000000000 R09: 0000000000000000 [ 521.310596][ T8411] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.318555][ T8411] R13: 00007feb71626038 R14: 00007feb71625fa0 R15: 00007ffd90917e08 [ 521.326520][ T8411] [ 521.329528][ T8411] Modules linked in: [ 521.343904][ T6087] bridge0: port 2(bridge_slave_1) entered blocking state [ 521.351014][ T6087] bridge0: port 2(bridge_slave_1) entered forwarding state [ 521.404413][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 521.440324][ T6087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 521.471938][ T8405] tipc: Started in network mode [ 521.477181][ T8405] tipc: Node identity ac14140f, cluster identity 4711 [ 521.484080][ T8405] tipc: New replicast peer: 255.255.255.255 [ 521.490315][ T8405] tipc: Enabled bearer , priority 10 [ 521.560416][ T8316] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 521.605149][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 521.634089][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 521.672186][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 521.721308][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 521.763662][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 521.793618][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 521.818744][ T8316] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 521.852004][ T8191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 521.882174][ T8191] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 521.903058][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 521.918993][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 521.943570][ T6097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 522.003355][ T8316] team0: Port device team_slave_0 added [ 522.040771][ T8316] team0: Port device team_slave_1 added [ 522.111566][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 522.146686][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.232195][ T8316] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 522.259350][ T8316] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 522.283297][ T8316] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 522.373251][ T8316] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 522.430318][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 522.449007][ T4494] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 522.494260][ T8316] device hsr_slave_0 entered promiscuous mode [ 522.509181][ T8316] device hsr_slave_1 entered promiscuous mode [ 522.524542][ T8191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 522.607160][ T4323] tipc: Node number set to 2886997007 [ 522.929143][ T40] device hsr_slave_0 left promiscuous mode [ 522.949056][ T40] device hsr_slave_1 left promiscuous mode [ 522.969161][ T40] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 522.984090][ T8411] ---[ end trace 0000000000000000 ]--- [ 523.001903][ T40] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 523.012824][ T8411] RIP: 0010:dummy_set_selfpowered+0xb7/0x150 [ 523.033151][ T8411] Code: 94 c0 4d 8d b4 c6 38 06 00 00 4c 89 f0 48 c1 e8 03 42 80 3c 20 00 74 08 4c 89 f7 e8 03 b2 53 fb 4d 8b 3e 4c 89 f8 48 c1 e8 03 <42> 80 3c 20 00 74 08 4c 89 ff e8 ea b1 53 fb 41 be 30 12 00 00 4d [ 523.034544][ T40] device bridge_slave_1 left promiscuous mode [ 523.062939][ T8411] RSP: 0018:ffffc900034377e0 EFLAGS: 00010246 [ 523.083100][ T8411] RAX: 0000000000000000 RBX: 0000000000000001 RCX: 0000000000000002 [ 523.111035][ T8411] RDX: ffff8880268d1e00 RSI: 0000000000000003 RDI: 0000000000000005 [ 523.129662][ T8411] RBP: 0000000000000003 R08: ffff8880174734df R09: 1ffff11002e8e69b [ 523.142727][ T40] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.156545][ T8411] R10: dffffc0000000000 R11: ffffed1002e8e69c R12: dffffc0000000000 [ 523.167347][ T40] device bridge_slave_0 left promiscuous mode [ 523.181044][ T8411] R13: ffff888026c5c4a8 R14: ffff8880280b1238 R15: 0000000000000000 [ 523.189718][ T40] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.211033][ T8411] FS: 00007feb721d66c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 523.243052][ T8411] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 523.265712][ T8411] CR2: 00007fc7c6488000 CR3: 000000004c46f000 CR4: 00000000003506f0 [ 523.292783][ T8411] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 523.330597][ T8411] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 523.363229][ T8411] Kernel panic - not syncing: Fatal exception [ 523.369375][ T8411] Kernel Offset: disabled [ 523.373702][ T8411] Rebooting in 86400 seconds..