last executing test programs: 3m37.927024712s ago: executing program 1 (id=1435): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000200)='./file0\x00', 0x800, &(0x7f0000000000), 0x26, 0x756, &(0x7f00000002c0)="$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") bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) ioctl$TIOCGPKT(0xffffffffffffffff, 0x80045438, &(0x7f0000000080)) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$PIO_UNISCRNMAP(0xffffffffffffffff, 0x4b6a, &(0x7f0000000b00)="cc3aeeaccf96d11507c3f901cfa7dafb3ec49c9bd686e87bbde5871b2694cabde13b5b104bcf442d92733cef238f4f10b74f58efdd6bd87cd453e251fccc5af43ea942a6b53bafb44428") sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000061157c00000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9}, 0x80) r3 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) connect$inet6(r3, &(0x7f0000000300)={0xa, 0x4e1d, 0x9, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x2}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f00000001c0)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @multicast, @void, {@ipv6={0x86dd, @udp={0xa, 0x6, '\x00', 0x48, 0x11, 0x0, @local, @local, {[], {0x4e1d, 0x4e20, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "dc521c259b538a2bf2a113dc2eeec0a072edf20b6d59027f", "d646c098cfc27eb8549d66e7b219c2c3b85e4508546e551af9e59631718ba089"}}}}}}}, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x10) socket$nl_route(0x10, 0x3, 0x0) ioctl$FS_IOC_READ_VERITY_METADATA(r4, 0xc0286687, &(0x7f0000000d00)={0x1, 0x0, 0x0, 0x0}) 3m36.425539893s ago: executing program 1 (id=1440): prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) syz_emit_ethernet(0x42, &(0x7f0000000040)={@multicast, @empty, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "76b2af", 0x4, 0x2f, 0x0, @private0, @mcast2, {[], {0x0, 0x883e, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = fsopen(&(0x7f00000000c0)='binfmt_misc\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r3, 0x6, 0x0, 0x0, 0x0) fsmount(r3, 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) lseek(r4, 0x73d, 0x0) fsmount(r3, 0x0, 0x107) r5 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ip_vs\x00') preadv(r5, &(0x7f0000002600)=[{0x0}, {&(0x7f0000000140)=""/228, 0xe4}, {0x0}, {0x0}], 0x4, 0x4, 0x6) socket$nl_route(0x10, 0x3, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000440)={0x1, @pix_mp={0x0, 0x0, 0x34565559}}) 3m33.977724001s ago: executing program 1 (id=1444): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) pipe(&(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) r3 = socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r4 = add_key$user(&(0x7f0000000200), &(0x7f0000000300)={'syz', 0x0}, &(0x7f0000000180)="f5a33db6", 0x4, 0xfffffffffffffffe) ioctl$UI_SET_EVBIT(0xffffffffffffffff, 0x40045564, 0x1) ioctl$UI_SET_KEYBIT(0xffffffffffffffff, 0x40045565, 0x1000000f7) r5 = add_key$user(0x0, &(0x7f0000000440), &(0x7f00000000c0), 0x0, 0xfffffffffffffffd) keyctl$dh_compute(0x17, &(0x7f0000000140)={r4, r5, r4}, &(0x7f0000000240)=""/69, 0x45, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000000)={0x30, r6, 0x1, 0x70bd2b, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x25}]}, 0x30}, 0x1, 0x0, 0x0, 0x2400c891}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000), 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0xc229, 0x0) r8 = add_key$fscrypt_v1(0x0, &(0x7f0000000340)={'fscrypt:', @desc4}, &(0x7f0000000380)={0x0, "8a4168218b26dd03f73a4ebbd53e5c084db849137d6873e7a8388c464018eefcfefd4d8d350a561b41c3d00cdf50620c542a38af2e23770f8bcce8027946754e", 0x3a}, 0x48, 0xffffffffffffffff) keyctl$chown(0x4, r8, 0xffffffffffffffff, 0x0) syz_emit_ethernet(0x14, &(0x7f0000001fc0)=ANY=[@ANYBLOB="ffff0088fb3e4800"/20], 0x0) io_uring_register$IORING_REGISTER_RESTRICTIONS(0xffffffffffffffff, 0xb, 0x0, 0x0) keyctl$dh_compute(0x17, &(0x7f0000000300), 0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={'sha3-512\x00'}}) keyctl$instantiate_iov(0x14, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000080)="9ab8294f60586f36ffc5be3f68eed6419b130924b1e2a3f5dff059", 0x1b}, {&(0x7f0000000b40)="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", 0xf00}], 0x2, r4) 3m32.657626088s ago: executing program 1 (id=1451): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0xb, &(0x7f0000000000)=0x40b, 0x4) sched_setscheduler(0x0, 0x1, &(0x7f00000000c0)=0x7) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() timer_settime(0x0, 0x1, &(0x7f0000000300)={{0x77359400}}, 0x0) pread64(0xffffffffffffffff, &(0x7f0000001240)=""/102400, 0x19000, 0xffffffff8) sched_setscheduler(r2, 0x2, &(0x7f0000000080)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xd6d1c000) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./proc\x00', 0x1ff) mount(0x0, 0x0, &(0x7f0000000010)='proc\x00', 0x0, 0x0) r4 = fsopen(&(0x7f0000000240)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) r5 = fsmount(r4, 0x0, 0x0) fchdir(r5) openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x42, 0x0) 3m31.673883352s ago: executing program 1 (id=1455): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) connect$inet(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001280)={0x0, 0x7c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r4 = mq_open(&(0x7f000084dff0)='\xa1sxt\x1a\x00\x00\x00\x00\x00\x00\x00\x01\x88\xbdd', 0x6e93ebbbcc0884f2, 0x100, &(0x7f0000000300)={0x0, 0x1, 0x3}) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x0, 0x0) mq_timedreceive(r4, &(0x7f0000000180)=""/204, 0xcc, 0x0, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) sendmsg$NFT_BATCH(r1, 0x0, 0x24040040) sendto$inet(r0, 0x0, 0x0, 0x2c00, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) 3m28.810012627s ago: executing program 1 (id=1460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r6, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 3m12.443280738s ago: executing program 32 (id=1460): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=r2], 0x28}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x2001, 0x0) write$P9_RSTATFS(r6, 0x0, 0x72) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, 0x0, &(0x7f0000000300)) syz_emit_vhci(0x0, 0xb) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000003c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r9, @ANYBLOB="08002600940900000800b7"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 22.84614086s ago: executing program 2 (id=1793): sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x48011) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) r3 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2e, 0x0, 0x0) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DONE(r4, 0x29, 0xc9, 0x12, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, 0x0, 0x610) r5 = socket(0xa, 0x1, 0x0) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x2, 0x3}, 0x6) setsockopt$inet6_group_source_req(r5, 0x29, 0x2a, 0x0, 0x0) socket(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x3, 0x1) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000100)={'bridge0\x00', @ifru_ivalue=0xb}) ioctl$sock_ifreq(r6, 0x89a2, &(0x7f0000000340)={'bridge0\x00', @ifru_ivalue=0xc}) 21.752849924s ago: executing program 2 (id=1796): bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x12, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setpriority(0x0, 0x0, 0x2a14b58) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r0 = socket$inet6_udp(0xa, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xc, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) munlock(&(0x7f0000ffc000/0x4000)=nil, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002500)=@raw={'raw\x00', 0x3c1, 0x3, 0x5f0, 0x3b8, 0xffffff80, 0x178, 0x3b8, 0x178, 0x520, 0x22b, 0x258, 0x520, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x398, 0x3b8, 0x340, {0x1e0002a8, 0x7203000000000000}, [@common=@unspec=@bpf1={{0x230}, @bytecode={0x0, 0x1a, 0x64, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xa}]}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "e22e50439abb066265e088a63e13552b8b2fec412753ac647d17d2ebca69d17a9722bd2f5be411676d5993fb4cc74168209fb9f43b63bab2a88206d7dd8158d916b865d0f713f772c59ad6e6b572e9a6c498fb6459888a281e8c071a9a7229f9fe02cb8e9ba7637a2591a5367c770c87034734be6eda195ce135517efa85da52"}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_to_bridge\x00', 'geneve1\x00'}, 0x0, 0x100, 0x168, 0x0, {}, [@common=@ah={{0x30}}, @common=@ipv6header={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x12, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x650) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0x5, &(0x7f0000000140)={0x8, 0x4}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getrlimit(0x8, &(0x7f0000000000)) lstat(&(0x7f0000019080)='./file1\x00', &(0x7f0000019100)) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0xa, 0x1, 0x0) setsockopt$inet6_group_source_req(r4, 0x29, 0x2e, &(0x7f00000001c0)={0x3, {{0xa, 0x4e24, 0x2, @loopback={0xff00000000000000}, 0x4}}, {{0xa, 0x4e00, 0xa3, @local, 0x4f1}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000cc0)=ANY=[@ANYBLOB="03000000000000000a004e2300000049ff0000000000000000000000000000010800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a"], 0x590) 20.487666841s ago: executing program 2 (id=1802): madvise(&(0x7f00002f0000/0x2000)=nil, 0x2000, 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) openat$binfmt_format(0xffffff9c, &(0x7f0000000000)='/proc/sys/fs/binfmt_misc/syz1\x00', 0x2, 0x0) r0 = openat$pfkey(0xffffff9c, &(0x7f0000000080), 0x180, 0x0) fcntl$getown(r0, 0x9) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000100), 0x22c82, 0x0) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000340), 0x20001) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x48815}, 0xc000) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505330, &(0x7f0000000040)={{}, {0x18}, 0x10003, 0x2, 0x1}) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r1, 0x40605346, &(0x7f0000000d00)={0x4d5, 0x2, {0x1, 0x0, 0x8, 0x2, 0xfffffffe}, 0x2}) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000180), 0x0) syz_open_dev$sndctrl(&(0x7f0000000300), 0x1, 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r3, 0x40505331, &(0x7f0000000540)={{}, {0x18}, 0x3, 0x2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r4) socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff1}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x2}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x400c8c1}, 0x20) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xd}, {0xfff7, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x6}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000440)="bed386ddc7180869ab2b83b48ae1", 0xe, 0x40015, &(0x7f00000001c0)={0x11, 0x8100, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xb}}, 0x14) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) 19.9570016s ago: executing program 2 (id=1804): socket$inet(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x2136dbec, 0x800001000089}, 0x0) syz_emit_ethernet(0xd8, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000080)=0x6) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(r2, 0x2, &(0x7f0000000000)=0x80000000000003) fanotify_init(0x40, 0x40000) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) io_uring_enter(0xffffffffffffffff, 0x2000, 0xfffffffd, 0x9, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) setns(0xc9, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x6003, 0x5000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0xfffffffffffffcff}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x75d5}]}, 0x95}}, 0x10000800) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_SIOCGIFCONF(r5, 0x8912, 0x0) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) 19.075430565s ago: executing program 2 (id=1806): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0xa302, 0x0) ioctl$TIOCSSOFTCAR(r2, 0x541a, 0xffffffffffffffff) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r2, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) mount(0x0, &(0x7f00000001c0)='./dev\x00', &(0x7f0000000200)='devtmpfs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./dev/sda\x00', 0x2, 0x0) pwritev(r4, &(0x7f0000000480)=[{&(0x7f0000000040)='l', 0x1}, {0x0, 0x8b}], 0x2, 0x8b, 0x800) sendmmsg(r3, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmsg$inet(r3, &(0x7f0000000580)={&(0x7f0000000000)={0x2, 0x4e23, @empty}, 0x10, 0x0}, 0x4) r5 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./dev/sda\x00', 0x101042, 0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x40000000) 19.020016325s ago: executing program 0 (id=1808): socket$packet(0x11, 0x3, 0x300) fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f0000000140), 0x8) listen(r2, 0x5) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = getpid() sched_setscheduler(r4, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ptrace$ARCH_MAP_VDSO_64(0x1e, r4, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) syz_open_dev$usbfs(0x0, 0x76, 0x101301) bind$bt_sco(r3, &(0x7f0000000000), 0x8) write$UHID_INPUT(r1, &(0x7f0000000040)={0xf, {"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", 0x1000}}, 0x1006) 17.113679141s ago: executing program 4 (id=1811): mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0xb, 0x59032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000380)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) syz_open_dev$tty1(0xc, 0x4, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000280)}, 0x10) sched_setscheduler(r0, 0x2, &(0x7f0000000140)=0x40) sendto$inet(r3, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000100)='bbr', 0x3) sendmmsg$inet(r3, &(0x7f0000001680), 0x0, 0x2090) sendmmsg(r3, &(0x7f0000008d80)=[{{0x0, 0x0, &(0x7f00000008c0)=[{&(0x7f00000007c0)="c8b7df938dc9c0fcc8a7e84a57fa9059b9cfa4132462f9c45b583e8ce1f19a82364b01b4bc3436dcea3f3380b3269f2c986b7f8205fa231eac99a9de63cd1a85c820fc43c24662a22f18183bb042a742ac921efe546daedbd31cd4b5cda70186dd7ec449169ea58ebc3f3456774ea76202bc9969ea7026a8d7090c085a769e47294e4ea5b8ce3f6187e5ca87549e75b0b2980a21dc7b809da3f544d061ad96d06e0864906297353deefe8b52d519dd67f3f41dd7dd1cda0601b77e8415521d7dbb9893", 0xc3}], 0x1}}, {{0x0, 0x0, &(0x7f0000003300)=[{0x0}], 0x1}}], 0x2, 0x0) 17.089816706s ago: executing program 0 (id=1812): recvfrom$unix(0xffffffffffffffff, &(0x7f0000000200)=""/4096, 0x1000, 0x20, &(0x7f0000001200)=@abs={0x0, 0x0, 0x4e22}, 0x6e) r0 = syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x1d, &(0x7f0000000100)=0x800, 0x4) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x48, 0x0, 0x0) r5 = syz_open_dev$dri(&(0x7f00000008c0), 0xd21, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f00000001c0)={0x0, &(0x7f00000000c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) ioctl$DRM_IOCTL_MODE_GETCRTC(r5, 0xc06864a1, &(0x7f00000003c0)={0x0, 0x0, r6, 0x0}) ioctl$DRM_IOCTL_MODE_GETFB2(r5, 0xc06864ce, &(0x7f0000000780)={r7, 0xfffffffd, 0x6, 0x0, 0x2, [0x0], [0x0, 0x2, 0x400, 0x9], [0x0, 0x0, 0xfffffffc, 0x3], [0x1, 0xfffffffffffffffd, 0x8000000000000001]}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ipvs(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x14, r10, 0x6c04073ee59f7719, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) ioctl$DRM_IOCTL_MODE_CREATE_DUMB(r0, 0xc02064b2, &(0x7f0000000440)={0x7, 0x3, 0x7}) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(r0, 0xc00c642d, &(0x7f0000000080)={r8, 0x0, 0xffffffffffffffff}) ioctl$DRM_IOCTL_PRIME_FD_TO_HANDLE(r5, 0xc00c642e, &(0x7f0000000300)={0x0, 0x0, r11}) 15.204726759s ago: executing program 5 (id=1814): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000280)={0xa, 0x4e22, 0x10000009, @loopback, 0x2}, 0x1c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x56202329, @empty, 0x4000005}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000000a00)=[{{0x0, 0x0, &(0x7f00000031c0)=[{&(0x7f0000002140)}], 0x1}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000001c0)="a37d3b31", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)='G)', 0x2}], 0x1}}], 0x3, 0x4040881) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f00000020c0)={&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000e40)=""/4096, 0x1000, 0x0, 0x0}, &(0x7f0000002100)=0x40) write$UHID_INPUT(r1, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) syz_mount_image$erofs(&(0x7f00000003c0), &(0x7f0000000880)='./file0\x00', 0x18000c6, &(0x7f0000000000)=ANY=[@ANYRES16=0x0, @ANYRES32, @ANYRES16=0x0, @ANYRES8], 0x0, 0x17d, &(0x7f0000001ac0)="$eJzsmLFP+kAUx7/vyg/yMy6uLg4SxcHSFjUuxLA5mogaNwlUghYx0EGYdPH/cHZwdvOPMM7qYFwY3Uxqej3oQQR10MT4PsPj+7h313evyXcoGIb5szw+vNyvFe+EAWASaaTU/89GXCO0+tfb83Jraj1/OfeUv041robPIwBB8PnnJwDcFAz4Kg+Cwd1p9VuE6OstCCwovQOCqfQeBLaVdkHYVfpA042w3jT3a55rlhteJRRWGOwwOGHIDffXPSNUtP5IW2+1O4clz3Ob3yg+ml+3IJDX+tPfV282ljY/GwK20jkQNpVeRao3m2gk2v2nE/H5xg/fnwULFr9NxP4UXBDmNX9KaP6R9evH2Va7s1irl6pu1T1ynNyKtWRZy05WGlEUx/jff+lPE9r5/0bUJimJk5LvN+0o9nMniu85rpD+J5CZjfLQ+5Mju4nWSe0jqTLGmHKGYRiGYRiGYRiGYRiGYZgvMAOSX0EldIo4GcDZkNVvAQAA///an3MA") mkdir(&(0x7f0000000300)='./bus\x00', 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0x10, 0x2, 0x4) ptrace(0x4207, 0x0) mount$overlay(0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 14.363942186s ago: executing program 0 (id=1815): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @empty}, 0x10) socket$inet(0x2, 0x3, 0x4) listen(0xffffffffffffffff, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./cifs\x00', 0x0) mount(&(0x7f0000000300)=@filename='\\\\127.0.0.1\\share\x00', &(0x7f0000000200)='./cifs\x00', &(0x7f0000000400)='cifs\x00', 0x0, &(0x7f0000000500)='vers=1.0,user=root,pass=root\x00') setsockopt$inet_opts(0xffffffffffffffff, 0x0, 0x4, &(0x7f0000000100), 0x0) socket$inet6(0xa, 0x4, 0xff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r3, 0x40505330, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f00000002c0), 0x2000) read(r3, &(0x7f0000000000)=""/107, 0x6b) sendmsg$nl_generic(r2, 0x0, 0x804) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 14.363217416s ago: executing program 3 (id=1816): syz_mount_image$udf(&(0x7f0000000c40), &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='noadinicb,nostrict,mode=00000000000000000000004,uid=forget,noadinicb,umask=00000000000000040002000,lastblock=00000000000000000013,undelete,partition=00000000000000000005,\x00', @ANYRES16=0x0], 0x47, 0xc15, &(0x7f0000001940)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x1c, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x6b, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffccb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xff}, 0x94) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) ptrace$ARCH_SHSTK_ENABLE(0x1e, r0, 0x3, 0x5001) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000280)='./bus\x00', 0x0, 0x0, 0xff, 0x0, &(0x7f00000007c0)) syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) rmdir(&(0x7f0000000040)='./bus\x00') bind$inet6(0xffffffffffffffff, 0x0, 0x0) rseq(&(0x7f0000000180)={0x0, 0x0, 0x0, 0x1}, 0x20, 0x0, 0x0) unshare(0x40400) r3 = socket$alg(0x26, 0x5, 0x0) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, r4, &(0x7f0000000140)) accept$alg(r3, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000480)={{0x1}, 0x0, 0x0}, 0x20) 14.362990416s ago: executing program 4 (id=1817): mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./dev\x00', 0x1ff) mount(0x0, &(0x7f0000000240)='./dev\x00', &(0x7f0000000280)='devtmpfs\x00', 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x6) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) pipe2(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000100)=0x3ff) dup3(0xffffffffffffffff, r2, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000740)=ANY=[@ANYBLOB="14000000020601"], 0x14}}, 0x4000084) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) syz_open_pts(r3, 0x101843) rt_sigqueueinfo(0x0, 0x21, &(0x7f00000002c0)={0xb, 0x4, 0xfffffffe}) write$tcp_mem(0xffffffffffffffff, &(0x7f00000002c0)={0x17, 0x2d, 0x5, 0x3a, 0x73be, 0x2c}, 0x48) r4 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000180)='./dev\x00', 0x1ff) openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(r4, 0x0, 0x0) sendmmsg(r4, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) 12.513973342s ago: executing program 0 (id=1818): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6(0xa, 0x3, 0x9) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(r1, 0x1, &(0x7f0000000180)=0x3) setrlimit(0xa, &(0x7f0000000000)={0x80000000, 0xffffffffffff0f53}) shmget$private(0x0, 0x1000, 0x0, &(0x7f00008f0000/0x1000)=nil) shmat(0x0, &(0x7f0000ffd000/0x1000)=nil, 0x7000) shmctl$SHM_LOCK(0x0, 0xb) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, 0xffffffffffffffff, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@ipv4, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @dev}, 0x0, 0x3c}, 0x2, @in=@loopback, 0x0, 0x1}}, 0xe8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000b40)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0x260, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev={0xfe, 0x80, '\x00', 0x29}, @private2, [0xffffffff, 0xff000000, 0xff, 0xffffff00], [0xffffff00, 0xffffffff, 0xffffffff, 0xffffffff], 'hsr0\x00', 'sit0\x00', {}, {}, 0x87, 0x3, 0x4, 0x5}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [0xff], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbe, 0x7, 0x5aa9, @ipv4={'\x00', '\xff\xff', @empty}, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffffff, 0xff000000, 0xff], [0x0, 0xffffff, 0xff, 0x7fffff7f], 0x3c80}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x1, {0x2000010}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x4, 0x7, @private1={0xfc, 0x1, '\x00', 0x1}, @mcast1, @private1, [0x0, 0x0, 0xff, 0xff], [0x0, 0xffffff00], [0x0, 0xff000000], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) 12.330756396s ago: executing program 5 (id=1819): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@ipv4_newroute={0x24, 0x18, 0x35f32a6dfa748ddd, 0x70bd26, 0x25dfdbfc, {0x2, 0x14, 0x10, 0x0, 0xfd, 0x0, 0x0, 0x6, 0x20002200}, [@RTA_TABLE={0x8, 0xf, 0x7fe}]}, 0x24}, 0x1, 0x0, 0x0, 0x4a044}, 0x4010) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) socket$inet6_sctp(0xa, 0x1, 0x84) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x6, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x101000, 0x0) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./tracing\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='./tracing\x00', &(0x7f0000000280)='tracefs\x00', 0x0, 0x0) r4 = openat(0xffffffffffffff9c, &(0x7f0000000700)='./tracing/events/enable\x00', 0x1, 0x0) write(r4, &(0x7f0000000800)='0', 0x1) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB, @ANYRES16=r2], 0x44}}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}}, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r7, {0x0, 0xfff3}, {0xffff, 0xffff}, {0xffe0, 0x9}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x7}}]}}]}, 0x48}}, 0x4c840) r8 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/consoles\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r8) 12.002346757s ago: executing program 4 (id=1820): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 11.787432387s ago: executing program 3 (id=1821): bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) 10.050201692s ago: executing program 0 (id=1822): socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$kcm(0x2, 0xa, 0x2) socket$kcm(0x11, 0x2, 0x300) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000200)) socket$nl_generic(0x10, 0x3, 0x10) socket$inet(0x2, 0x2, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) openat$sw_sync(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) mmap$IORING_OFF_SQ_RING(0x0, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r0 = syz_open_dev$mtd(&(0x7f0000000200), 0x0, 0x8000) readv(r0, &(0x7f0000001980)=[{&(0x7f0000001940)=""/13, 0xd}, {0x0, 0xffb6}], 0x2) socketpair$unix(0x1, 0x3, 0x0, 0x0) r1 = gettid() tkill(r1, 0x21) 8.405900659s ago: executing program 5 (id=1823): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) ptrace(0x10, 0x1) r3 = syz_open_dev$sndpcmc(&(0x7f0000000140), 0x0, 0x0) ioctl$SNDRV_PCM_IOCTL_DRAIN(r3, 0x4144, 0x0) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000080)='/proc/asound/timers\x00', 0x0, 0x0) read$FUSE(r4, &(0x7f0000000480)={0x2020}, 0x2020) lseek(r4, 0xfffffffffffffff5, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 8.40121578s ago: executing program 4 (id=1824): r0 = io_uring_setup(0x2a8d, &(0x7f0000000240)={0x0, 0x86a1, 0x2, 0x3, 0x1fb}) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000240), 0x48103, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) getpid() openat$sysfs(0xffffffffffffff9c, 0x0, 0x122102, 0x0) times(0xfffffffffffffffe) syz_open_dev$I2C(&(0x7f0000000000), 0x2, 0x40402) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_CONTROL(r3, 0xc0185500, 0x0) sendmsg$nl_route(r2, 0x0, 0x4054) setns(0xc9, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000200), 0x4) bind$rds(r4, &(0x7f0000000400)={0x2, 0x4e21, @loopback}, 0x10) socketpair$unix(0x1, 0x2, 0x0, 0x0) io_uring_setup(0x5ba8, 0x0) syz_usb_connect(0x5, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000cc1ef420890b070064ef000000010902"], 0x0) writev(0xffffffffffffffff, 0x0, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 7.660929306s ago: executing program 3 (id=1825): mmap$IORING_OFF_SQ_RING(0x110c230000, 0x7, 0x3000003, 0x401d031, 0xffffffffffffffff, 0x0) r0 = memfd_create(&(0x7f00000001c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9\xd6\x1c\x1b*\x9a!?\x7f\xa5\xad\x9a,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf#2\x99\x1e\xa1`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\f<\x8f\xc1\x99\x89r\xe1?\xbdu\x98\xc3\xf8\xd2Q#\xc6g\xa0\x85\xd6G\x85\x11X\x8d,\x02\xd45\xb8\xca\x97\x9d\xcb\x1e\x80\xd6\xd5>N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec\x8aog\x87BR\x9d\xad\xd4FcB\xda\x95\xc3\xdd\x9d\x8f\x1a\xce\x18\x80\"j\xe1\xba\x1e\x97uX\xccv\xd6\vcz\x92A^\xbc\xceF\xf7\xe5:\xaf\xc5~\xbcJ e\r\x88c\x9d\xb92\xb6i4zq\xb3c\x0f\xb2t\x93\xf2E6b\xfa\xcdJ5\xe3W]`4\xd8D\x05\v\xfc)\xca\xedQ\xd0]Ot\'\xc2tDF\xf9\xa7\xb5(\x83\xa5\x0f\x1d\x1d\x06Dg\x13>\x19\xe85#\aaT\x89=\x104\xd5\x85Q\x96\x91\xea\x172P\xb3:\xadZ\xbc\xbe\x00\xf0\x14\x96\xd9M\xd7\x88QZs\xb2\xe1+$jfQodH\x05/y`~Mx\x02\x00(v\xe6`\x026\xfcgC\xb5\xf0\x13.zb\xc5bj+@\x00\x00\x00\x00\x00\x8e[\xb3\xa3\x87\xb9\xe2_Z\x11\xef\xc2]V\xf3\x03\x94\xb9\xe1\xa68\x8d\\\xe5\xef\xacpM\xf0\xa6\x04\x10\xb7\xc0t\x83\\\xf7\x12k\x9f\x10\xd5Z\x19\xc1\xc1\x80\\o\x97\xce=U\xdd\xaa\x1b\x05\x14\x13\xa6\xbd#\xde\x04\xe6$\xec$3\xf6\x97\xc6\xeaSL\xb7A72M\x88k@\xe5\xa3\n&\x1e\xc84\xa9\xe2\xccM\x906\x95xQ-2p\xd62\'\xec\x0f\x13;I\x95TE_\r\xe7\t!A\x05\xe4\x8f\x9e0\xf8/T\x18\xf7\xa1\x9f\xde1\xd5\x80<\xf5\b\xa9\xec\x85\xaeW\xb3\xd8#)bn \xfb\xf2\x88\xfaR\xff\xdd\x80\x96_\xec5\xf0\x1c\a\x8a\x80\x00@=\r8u+%f:\x1e\x82\xfap\xf6\x89\xea\xba\xe3\xbbM%F\xdb\\\xd1eJJ*\xc67\xca\x03\xa3\xf7(\xbb\xecN\xd4\xe7\xf2:u\x8a\b\xd5\v\xca\xfd\\\xd6\xe3\x05\xb3\x03\xd5\xe0\xd2\xf2{&\x8b\xdf\xa1\xbe}\xb2\xe4y\xbb\xe6\x1f\x10c\xf5WQ\x82\x04\x01C\x83,\x90\x1a\xfa\x8e\x17\x89\xe2\xedX\x8d\rmq\t\xb5$\xb4\x9b\x92z\xd6/-\x13,\xb5%\x8eM/\x04\xa7\x7f\x1b\x85\xf1\xa4X\x17\xbb\x1cR14\xfb!\b\x10\xe8\xb2\xd41gK\xe4\xea\xe39d\bL\xe5\x1b\xbd[\x9bWD:\r&\xe9\vn^\xcc\x86\xe3\xce1>3{\xaa{\xbd0P\x9f\xa68\xf5\x82\xb8\x9aD\x9c{\xe6\xf8\xcbD\xb5aJ\xb0\x92\x89\xbc\x80\x1ch\x89\xe7\xdd]q\x0e,>/\xaf|\xf0\x01V\x7f\xc9?\xba\x16\xe4$+\x02\x00\x00\x00\x00\x00\x00\x00\xa5\x94d9\xaf\xcfq\x8b=\x026\xef\r\x91\x18\xc5\xb6\xb9fM\x8ayZ\xbcd\xa5\x8a\x88\x98\xc3\xfc`\xa6\xba\x1f\x17\v$\x88g\xb4\xad\b\xc1\xddW\xa6\xc1\xb7\xb0\xa3\x84Q\x13GoU\xe2\xb7\x03\x9c\xd5\x0f\xa8\x0ef\"\x15\x82\xe7\xbd\xf8\xca\x10f\xfe6h\xe9\xc3\xc2\xa0O:\xac~\x1a\xf7\xbeF\xbe\xe5\xf0\x81\xd6&\xc00xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSPGRP(r0, 0x5410, &(0x7f0000000240)=r1) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) r4 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./sys/module/usbcore/parameters/quirks\x00', 0x2, 0x0) write(r4, &(0x7f00000005c0)="306663353a313232373a3f7092c0f0bc085a193376cf620afaf6379a248d1d6534058f1095109da34b6d6537a6e78b0dc4b7bc0b", 0x34) write(r0, &(0x7f0000000300)='1', 0x1) r5 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./sys/bus/pci/rescan\x00', 0x1, 0x0) write(r5, &(0x7f0000000300)='1', 0x1) 7.295629748s ago: executing program 3 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x100000000e2) sendmsg$inet6(0xffffffffffffffff, 0x0, 0xc000) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000001040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x2c, r3, 0x1, 0x70bd22, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x10, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xf0}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0xc081}, 0x0) ptrace$ARCH_MAP_VDSO_64(0x1e, r0, 0x7, 0x2003) syz_open_dev$usbmon(&(0x7f0000000280), 0x8000000, 0x200) r6 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r6, 0x8108551b, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000001c0)='./file1\x00', 0x8000, &(0x7f0000000040)=ANY=[], 0x1, 0x14fe, &(0x7f0000002a80)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000001180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000000}, 0x8040) openat(0xffffffffffffff9c, 0x0, 0x42, 0x0) unshare(0x64000400) 5.532274664s ago: executing program 5 (id=1828): r0 = socket$inet_tcp(0x2, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) r4 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x101001, 0x0) ioctl$FBIOBLANK(r4, 0x4611, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, 0x0, &(0x7f0000000440)) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f00000002c0)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000580), 0x0, 0x24004c41) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001000010700000000004000000a000000060001001800000008000a"], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r6) 5.520247086s ago: executing program 4 (id=1829): modify_ldt$write2(0x11, 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000380)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000003, 0x4c831, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) bpf$BPF_PROG_TEST_RUN_LIVE(0xa, &(0x7f0000001900)={r0, 0x0, 0x9d, 0x0, &(0x7f0000000140)="4c8a96bd0651ea9ac9792b3214b119e1f651b845c42e7ce1983ac5932bcdeca6b56aca9c67c6b3e53f85a5026853c332b41db764b067e69ae58430ed5a4beca7d24426f9da3fced8dd84b65645ff7b9d05c6c4923ec6a779ee478d5ed47f1282f54b67071cb3f2c8957114c640826140e02da49ab11fcf3df67a6481bf66335ab8eb320949efffe597d051debeb29d231a7c7eb5763a8f1ba4532f7e12", 0x0, 0x5, 0x0, 0xfc0, 0x0, &(0x7f0000000900)="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", 0x0, 0x2, 0x0, 0x2}, 0x4c) recvmmsg(r2, &(0x7f0000005700)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000001f80)=""/132, 0x84}], 0x1}, 0x4}], 0x1, 0x0, 0x0) syz_emit_ethernet(0x86, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x3, 0x1, "56805c734ee222c29de4125f81f6e030a5441a99f362cd24e0a1ac2291500733", "467f517bd818d5a4a8d26ae61b4cbf13", {"31ffc21d2e9bfb1eb3c03976ed837b6f", "876605ac29dcb96a8901e0711afb3db3"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x64, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x5, 0x0, 0x0, 0x60ff78ce1cb3c070, 0x0, '\x00', 0x0, 0x25, r0}, 0x94) ioctl$EVIOCSMASK(0xffffffffffffffff, 0x40104593, 0x0) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000002000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) open$dir(&(0x7f0000000200)='./file0\x00', 0x8400, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000007300)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000006200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x4c, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) close(0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x40850) 3.239071494s ago: executing program 2 (id=1830): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) add_key$keyring(&(0x7f0000000440), 0x0, 0x0, 0x0, 0x0) r3 = dup(0xffffffffffffffff) write$UHID_INPUT(r3, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000200)={0x20, 0x140c, 0x125, 0x70bd2c, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0xc004}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x14, &(0x7f00000007c0)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x0, 0x487, &(0x7f0000000140)={{0x84, @private=0xa010100, 0x4e21, 0x3, 'wrr\x00', 0x23, 0x81, 0x5}, {@dev={0xac, 0x14, 0x14, 0x3c}, 0x4e23, 0x10000, 0x1cb, 0x12d61, 0x12d58}}, 0x44) ioctl$sock_SIOCSIFVLAN_DEL_VLAN_CMD(r5, 0x8983, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) 3.050686991s ago: executing program 3 (id=1831): gettid() bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x17, &(0x7f0000000800)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) openat$sw_sync(0xffffffffffffff9c, 0x0, 0x800, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, 0x0) syz_open_dev$sndpcmp(&(0x7f00000000c0), 0x0, 0x2882) r3 = socket$inet(0x2b, 0x801, 0x0) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x48f, &(0x7f00000000c0)={0x1, @private, 0x0, 0x0, 'sed\x00', 0xa, 0xfffffffb, 0x14}, 0x2c) pselect6(0x40, &(0x7f00000001c0)={0x8, 0x0, 0x5, 0xfffffffffffffffd, 0x0, 0x0, 0x7}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x20000000009, 0x5, 0x0, 0x1, 0x9}, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r4, 0x10e, 0x4, 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000240)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r5, 0xffffffffffffffff, 0x100000000000000) rt_sigtimedwait(&(0x7f00000000c0)={[0x4000000a]}, 0x0, 0x0, 0x8) 1.233308968s ago: executing program 4 (id=1832): openat$tun(0xffffffffffffff9c, 0x0, 0x40000, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0xffffffffffffffff}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) bind$netlink(r0, &(0x7f00000003c0)={0x10, 0x0, 0x25dfdbfc}, 0xc) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, 0x0, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x7fffffffffffffff, 0x15) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x240, 0x0) ioctl$TIOCGSOFTCAR(r4, 0x5414, &(0x7f0000000040)) bpf$BPF_LINK_CREATE(0x1c, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000040000000000000024"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x3d, '\x00', 0x0, @sk_skb=0xe0145e606114eef8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$SEG6(0x0, 0xffffffffffffffff) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0x2275, 0xffffffffffffffff) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) 1.06931624s ago: executing program 5 (id=1833): capset(&(0x7f0000000080)={0x20071026}, &(0x7f0000001080)={0x200000, 0x200000}) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r0, 0x400448d4, &(0x7f0000000000)) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r1, &(0x7f0000000100), 0x8) listen(r1, 0x5) syz_emit_vhci(&(0x7f0000000200)=@HCI_EVENT_PKT={0x4, @hci_ev_conn_request={{0x4, 0xa}, {@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}}}, 0xd) nanosleep(0x0, 0x0) syz_emit_vhci(&(0x7f0000000300)=@HCI_EVENT_PKT={0x4, @hci_ev_sync_conn_complete={{0x2c, 0x11}, {0x0, 0xc8, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x0, 0x0, 0x3c, 0x3c}}}, 0x14) nanosleep(&(0x7f0000000400)={0x0, 0x2faf080}, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) sendto(r2, 0x0, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f00000000c0)='./debug\x00', &(0x7f0000000100)='debugfs\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0b0000000b000000010001004900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) openat(0xffffffffffffff9c, 0x0, 0xf40, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) pipe2$watch_queue(0x0, 0x80) sendmsg$NFNL_MSG_CTHELPER_NEW(0xffffffffffffffff, 0x0, 0x81) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0xd, &(0x7f0000000180)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x35, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000240)={{{@in6=@private2, @in=@multicast2, 0x4e24, 0xffff, 0x4e20, 0x6, 0x2, 0x30, 0x60, 0x2b, 0x0, 0xffffffffffffffff}, {0x100000000, 0x2, 0x4, 0x3, 0x7, 0x9, 0x7, 0x2}, {0x1, 0x8001, 0x9, 0x4}, 0x7ff, 0x6e6bbe, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x4d6, 0x3013015ccdd6850d}, 0x2, @in=@local, 0x0, 0x0, 0x3, 0xd, 0xfffffff9, 0x5, 0x3}}, 0xe8) 1.015044901s ago: executing program 0 (id=1834): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x2481, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0xae0, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000380), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r6) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r7, 0x0, 0x8004) ioctl$SIOCSIFHWADDR(r6, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 0s ago: executing program 3 (id=1835): bpf$MAP_CREATE(0x0, 0x0, 0x50) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r0 = getpid() sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) r1 = gettid() socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ppoll(0x0, 0x0, 0x0, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) fcntl$setsig(r2, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r3}], 0x1, 0x0, 0x0, 0x0) dup2(r2, r3) fcntl$setown(r3, 0x8, r1) tkill(r1, 0x13) kernel console output (not intermixed with test programs): -fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.650870][ T4668] FAT-fs (loop4): Filesystem has been set read-only [ 110.657865][ T4668] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.668676][ T4668] FAT-fs (loop4): error, fat_get_cluster: invalid start cluster (i_pos 196, start 00000001) [ 110.684567][ T4668] FAT-fs (loop4): error, invalid access to FAT (entry 0x00000001) [ 111.760389][ T26] audit: type=1800 audit(1790719283.677:3): pid=4668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.80" name="file1" dev="loop4" ino=1048592 res=0 errno=0 [ 111.817376][ T13] Process accounting resumed [ 112.139604][ T4664] FAT-fs (loop0): Directory bread(block 1285) failed [ 112.380446][ T4664] FAT-fs (loop0): Directory bread(block 1286) failed [ 112.387278][ T4664] FAT-fs (loop0): Directory bread(block 1287) failed [ 112.394245][ T4664] FAT-fs (loop0): Directory bread(block 1288) failed [ 112.624144][ T4677] loop3: detected capacity change from 0 to 16 [ 113.969467][ T4677] erofs: (device loop3): check_layout_compatibility: unidentified incompatible feature 8, please upgrade kernel version [ 115.382662][ T4696] netlink: 36 bytes leftover after parsing attributes in process `syz.0.88'. [ 115.487429][ T4701] 8021q: adding VLAN 0 to HW filter on device bond1 [ 115.496505][ T4701] team0: Port device bond1 added [ 115.505574][ T4289] team0: Failed to send port change of device bond1 via netlink (err -105) [ 116.898948][ T4717] overlayfs: "xino" feature enabled using 3 upper inode bits. [ 117.512884][ T4719] loop2: detected capacity change from 0 to 512 [ 117.573030][ T4719] EXT4-fs (loop2): Quota format mount options ignored when QUOTA feature is enabled [ 119.066701][ T4719] EXT4-fs (loop2): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 119.163812][ T4719] ext4 filesystem being mounted at /16/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 120.606453][ T4742] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 121.258500][ T4745] device syzkaller0 entered promiscuous mode [ 121.504826][ T23] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 121.873837][ T23] usb 4-1: Using ep0 maxpacket: 8 [ 122.033954][ T23] usb 4-1: config 0 has no interfaces? [ 122.040102][ T23] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 122.078715][ T4751] mmap: syz.2.103 (4751) uses deprecated remap_file_pages() syscall. See Documentation/vm/remap_file_pages.rst. [ 122.313176][ T23] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 122.447973][ T23] usb 4-1: config 0 descriptor?? [ 122.742120][ T4761] netlink: 4 bytes leftover after parsing attributes in process `syz.1.105'. [ 123.047257][ T1344] usb 4-1: USB disconnect, device number 2 [ 123.111968][ T4767] device syzkaller0 entered promiscuous mode [ 123.142533][ T4767] tipc: Started in network mode [ 123.158992][ T4767] tipc: Node identity 7e116ceb430e, cluster identity 4711 [ 123.178454][ T4767] tipc: Enabled bearer , priority 0 [ 123.275771][ T4767] tipc: Resetting bearer [ 123.314555][ T4766] tipc: Resetting bearer [ 123.407053][ T4766] tipc: Disabling bearer [ 124.739073][ T4782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 124.879256][ T1344] Bluetooth: hci0: command 0x0c3a tx timeout [ 125.156341][ T4782] netlink: 20 bytes leftover after parsing attributes in process `syz.3.111'. [ 126.967460][ T1344] Bluetooth: hci0: command 0x0c1a tx timeout [ 127.883829][ T4804] loop1: detected capacity change from 0 to 1024 [ 129.127379][ T4804] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 129.166993][ T4804] ext4 filesystem being mounted at /30/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 129.203068][ T4804] EXT4-fs error (device loop1): ext4_map_blocks:741: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 3) [ 129.225877][ T4804] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 129.247149][ T4804] EXT4-fs (loop1): This should not happen!! Data will be lost [ 129.247149][ T4804] [ 129.262314][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.284724][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.305084][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.322125][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.339260][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.358346][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.400910][ T4825] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.416867][ T4800] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.431603][ T4800] EXT4-fs error (device loop1): ext4_map_blocks:631: inode #15: block 3: comm syz.1.114: lblock 3 mapped to illegal pblock 3 (length 1) [ 129.742994][ T4829] pci 0000:00:00.0: [8086:1237] type 00 class 0x060000 [ 130.365215][ T4826] EXT4-fs (loop1): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 130.377709][ T4826] EXT4-fs (loop1): This should not happen!! Data will be lost [ 130.377709][ T4826] [ 130.387402][ T4826] EXT4-fs (loop1): Total free blocks count 0 [ 130.393401][ T4826] EXT4-fs (loop1): Free/Dirty block details [ 130.399388][ T4826] EXT4-fs (loop1): free_blocks=0 [ 130.404435][ T4826] EXT4-fs (loop1): dirty_blocks=64 [ 130.409567][ T4826] EXT4-fs (loop1): Block reservation details [ 130.415592][ T4826] EXT4-fs (loop1): i_reserved_data_blocks=4 [ 130.581552][ T4833] netlink: 2 bytes leftover after parsing attributes in process `syz.4.123'. [ 130.690733][ T4837] loop1: detected capacity change from 0 to 512 [ 132.073605][ T4847] loop0: detected capacity change from 0 to 512 [ 132.122636][ T4837] EXT4-fs (loop1): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 132.158974][ T4837] ext4 filesystem being mounted at /31/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.262717][ T4847] fscrypt (loop0, inode 2): Error -61 getting encryption context [ 132.332607][ T4847] EXT4-fs (loop0): Cannot turn on journaled quota: type 1: error -61 [ 132.383035][ T4847] EXT4-fs error (device loop0): ext4_orphan_get:1410: inode #13: comm syz.0.127: iget: bad i_size value: 12154757448730 [ 133.289305][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.353768][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.397700][ T4847] EXT4-fs error (device loop0): ext4_orphan_get:1415: comm syz.0.127: couldn't read orphan inode 13 (err -117) [ 133.440343][ T4847] EXT4-fs (loop0): mounted filesystem without journal. Opts: jqfmt=vfsold,nojournal_checksum,noload,noinit_itable,usrjquota=,grpjquota=.subj_type=[]*:[,,errors=continue. Quota mode: writeback. [ 133.501884][ T4865] se_dev->se_dev_ptr already set for storage object [ 136.834061][ T4885] sg_write: data in/out 132/14 bytes for SCSI command 0x0-- guessing data in; [ 136.834061][ T4885] program syz.2.133 not setting count and/or reply_len properly [ 139.406875][ T4902] MTRR 1 not used [ 143.754485][ T4935] comedi comedi0: comedi_test: 1000000 microvolt, 100000 microsecond waveform attached [ 144.363535][ T4937] ODEBUG: Out of memory. ODEBUG disabled [ 144.436427][ T4944] nvmet: adding nsid 1 to subsystem testnqn [ 144.470098][ T26] audit: type=1800 audit(1790719317.467:4): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.149" name="device_path" dev="configfs" ino=35082 res=0 errno=0 [ 144.510992][ T4944] nvmet: failed to open block device (null): (-22) [ 144.596450][ T26] audit: type=1800 audit(1790719317.497:5): pid=4944 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.149" name="enable" dev="configfs" ino=35083 res=0 errno=0 [ 144.690748][ T26] audit: type=1804 audit(1790719317.637:6): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.140" name="bus" dev="ramfs" ino=35881 res=1 errno=0 [ 144.763755][ T26] audit: type=1804 audit(1790719317.647:7): pid=4952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.140" name="bus" dev="ramfs" ino=35881 res=1 errno=0 [ 151.178306][ T5026] device syzkaller0 entered promiscuous mode [ 153.620448][ T5075] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 154.973504][ T5095] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 158.606465][ T4314] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 161.506355][ T5161] device syzkaller0 entered promiscuous mode [ 161.517132][ T5161] tipc: Started in network mode [ 161.524013][ T5161] tipc: Node identity a25db79fb423, cluster identity 4711 [ 161.531407][ T5161] tipc: Enabled bearer , priority 0 [ 161.557313][ T5159] tipc: Resetting bearer [ 161.609217][ T5159] tipc: Disabling bearer [ 162.565179][ T5178] device syzkaller0 entered promiscuous mode [ 162.633927][ T5181] loop2: detected capacity change from 0 to 1024 [ 163.357817][ T5181] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 163.368638][ T5181] ext4 filesystem being mounted at /41/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 163.390165][ T5192] EXT4-fs error (device loop2): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 163.393529][ T5174] EXT4-fs error (device loop2): ext4_map_blocks:741: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 3) [ 163.474657][ T5174] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 163.487141][ T5174] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.487141][ T5174] [ 163.499217][ T5181] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.517744][ T5172] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.532377][ T5172] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.551635][ T5181] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.568120][ T5172] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.584097][ T5181] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.598949][ T5172] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.615447][ T5181] EXT4-fs error (device loop2): ext4_map_blocks:631: inode #15: block 3: comm syz.2.196: lblock 3 mapped to illegal pblock 3 (length 1) [ 163.772537][ T5204] loop4: detected capacity change from 0 to 2048 [ 163.803913][ T5198] EXT4-fs (loop2): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 163.816412][ T5198] EXT4-fs (loop2): This should not happen!! Data will be lost [ 163.816412][ T5198] [ 163.826141][ T5198] EXT4-fs (loop2): Total free blocks count 0 [ 163.832154][ T5198] EXT4-fs (loop2): Free/Dirty block details [ 163.838114][ T5198] EXT4-fs (loop2): free_blocks=0 [ 163.843079][ T5198] EXT4-fs (loop2): dirty_blocks=64 [ 163.849020][ T5198] EXT4-fs (loop2): Block reservation details [ 163.855067][ T5198] EXT4-fs (loop2): i_reserved_data_blocks=4 [ 163.944951][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 163.968595][ T5204] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 165.288937][ T5218] loop2: detected capacity change from 0 to 128 [ 165.310185][ T5218] EXT4-fs warning (device loop2): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 165.329137][ T5218] EXT4-fs (loop2): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 165.374910][ T5130] udevd[5130]: incorrect ext4 checksum on /dev/loop2 [ 165.628950][ T5225] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 166.500251][ T5223] netlink: 128 bytes leftover after parsing attributes in process `syz.3.206'. [ 167.569990][ T5237] loop0: detected capacity change from 0 to 64 [ 167.769051][ T26] audit: type=1800 audit(1790719340.767:8): pid=5237 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.210" name="file1" dev="loop0" ino=21 res=0 errno=0 [ 167.805828][ T5242] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 167.822351][ T5242] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 168.065329][ T4185] hfs: node 4:3 still has 1 user(s)! [ 168.157194][ T150] block nbd3: Attempted send on invalid socket [ 168.164619][ T150] blk_update_request: I/O error, dev nbd3, sector 128 op 0x0:(READ) flags 0x1000 phys_seg 1 prio class 0 [ 168.176956][ T150] gfs2: error 10 reading superblock [ 169.391752][ T5266] loop4: detected capacity change from 0 to 512 [ 169.601645][ T5266] EXT4-fs (loop4): Quota format mount options ignored when QUOTA feature is enabled [ 169.689425][ T5266] EXT4-fs (loop4): mounted filesystem without journal. Opts: grpquota,quota,quota,stripe=0x0000000000000003,jqfmt=vfsold,,errors=continue. Quota mode: writeback. [ 169.757576][ T5266] ext4 filesystem being mounted at /46/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 172.357939][ T5295] loop0: detected capacity change from 0 to 1024 [ 172.557041][ T5295] hfsplus: unable to parse mount options [ 175.992175][ T5353] netlink: 16 bytes leftover after parsing attributes in process `syz.0.237'. [ 176.003720][ T5353] netlink: 20 bytes leftover after parsing attributes in process `syz.0.237'. [ 176.975348][ T9] rpcbind: server 127.0.0.1 not responding, timed out [ 177.275571][ T5364] tipc: Enabling of bearer rejected, failed to enable media [ 177.474630][ T5369] netlink: 64 bytes leftover after parsing attributes in process `syz.0.230'. [ 177.503393][ T5365] device syzkaller0 entered promiscuous mode [ 177.591383][ T5367] tipc: Enabled bearer , priority 0 [ 177.717275][ T5365] tipc: Resetting bearer [ 177.762747][ T5363] tipc: Resetting bearer [ 177.811429][ T5377] loop0: detected capacity change from 0 to 256 [ 177.834527][ T5363] tipc: Disabling bearer [ 177.894107][ T5381] tipc: Enabling of bearer rejected, failed to enable media [ 177.921634][ T5377] exFAT-fs (loop0): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 178.860197][ T5390] loop2: detected capacity change from 0 to 8 [ 179.822015][ T5395] overlayfs: overlapping lowerdir path [ 181.174255][ T5415] loop3: detected capacity change from 0 to 2048 [ 181.200592][ T5415] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 181.268097][ T5419] netlink: 16 bytes leftover after parsing attributes in process `syz.2.242'. [ 181.279577][ T5419] netlink: 20 bytes leftover after parsing attributes in process `syz.2.242'. [ 183.809356][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.816008][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.822217][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.828438][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.834643][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.840822][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.847041][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.853241][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.859494][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.865691][ T5442] tc action pedit 'at' offset 19 out of bounds [ 183.871894][ T5442] 0: reclassify loop, rule prio 0, protocol 800 [ 184.937648][ T5460] tipc: Enabling of bearer rejected, failed to enable media [ 184.978730][ T5447] device syzkaller0 entered promiscuous mode [ 185.007738][ T5447] tipc: Started in network mode [ 185.012668][ T5447] tipc: Node identity d2ae6f132882, cluster identity 4711 [ 185.079455][ T5447] tipc: Enabled bearer , priority 0 [ 185.124662][ T5467] loop2: detected capacity change from 0 to 256 [ 185.141578][ T5447] tipc: Resetting bearer [ 185.183821][ T5446] tipc: Resetting bearer [ 185.205339][ T5446] tipc: Disabling bearer [ 185.230563][ T5467] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x5d6de3ec, utbl_chksum : 0xe619d30d) [ 185.563678][ T4235] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 185.950736][ T4236] Bluetooth: hci1: command 0x0406 tx timeout [ 185.997866][ T4236] Bluetooth: hci2: command 0x0406 tx timeout [ 186.486675][ T4236] Bluetooth: hci3: command 0x0406 tx timeout [ 186.505827][ T4236] Bluetooth: hci4: command 0x0406 tx timeout [ 186.557054][ T5476] device syzkaller0 entered promiscuous mode [ 187.723946][ T4235] usb 2-1: Using ep0 maxpacket: 8 [ 187.844039][ T4235] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 187.877297][ T4235] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 188.273113][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 188.290268][ T5499] loop2: detected capacity change from 0 to 128 [ 188.317581][ T4235] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 188.477154][ T5499] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 188.542587][ T4235] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 188.626417][ T4235] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 188.675226][ T4235] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 188.863832][ T4235] usb 2-1: can't set config #16, error -71 [ 188.873053][ T4235] usb 2-1: USB disconnect, device number 2 [ 189.040524][ T5506] loop1: detected capacity change from 0 to 512 [ 189.074568][ T5513] device syzkaller0 entered promiscuous mode [ 189.088237][ T5507] tipc: Enabling of bearer rejected, failed to enable media [ 190.514322][ T5506] EXT4-fs (loop1): Ignoring removed oldalloc option [ 190.542836][ T5506] EXT4-fs (loop1): filesystem is read-only [ 190.555901][ T5506] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 190.611857][ T5506] EXT4-fs (loop1): filesystem is read-only [ 190.633790][ T5506] EXT4-fs (loop1): orphan cleanup on readonly fs [ 191.510456][ T5506] EXT4-fs error (device loop1): ext4_validate_block_bitmap:438: comm syz.1.261: bg 0: block 64: padding at end of block bitmap is not set [ 191.565459][ T5506] EXT4-fs error (device loop1) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 191.729943][ T5506] EXT4-fs (loop1): 1 orphan inode deleted [ 191.738689][ T5506] EXT4-fs (loop1): mounted filesystem without journal. Opts: resuid=0x0000000000000000,noauto_da_alloc,auto_da_alloc=0x0000000000000000,stripe=0x0000000000000004,bsdgroups,noblock_validity,minixdf,nouid32,dioread_lock,nolazytime,oldalloc,usrquota,,errors=continue. Quota mode: writeback. [ 192.581436][ T5541] loop2: detected capacity change from 0 to 1024 [ 192.711842][ T5541] EXT4-fs (loop2): Ignoring removed bh option [ 192.853092][ T5546] loop3: detected capacity change from 0 to 2048 [ 192.958778][ T5541] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,dioread_lock,jqfmt=vfsv1,abort,debug_want_extra_isize=0x0000000000000008,lazytime,errors=remount-ro,stripe=0x0000000000000007,bh,auto_da_alloc,. Quota mode: none. [ 193.019903][ T5546] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 193.040277][ T5550] xt_HMARK: spi-set and port-set can't be combined [ 194.019875][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.032367][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.389753][ T5559] netlink: 'syz.0.275': attribute type 15 has an invalid length. [ 195.411440][ T5559] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 2816 - 0 [ 195.421631][ T5559] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 2816 - 0 [ 195.430657][ T5559] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 2816 - 0 [ 195.439428][ T5559] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 2816 - 0 [ 195.453492][ T5559] netlink: 'syz.0.275': attribute type 15 has an invalid length. [ 195.573383][ T5563] device syzkaller0 entered promiscuous mode [ 196.379007][ T5563] tipc: Started in network mode [ 196.384001][ T5563] tipc: Node identity d2d0a246b219, cluster identity 4711 [ 196.391419][ T5563] tipc: Enabled bearer , priority 0 [ 196.408098][ T5562] tipc: Resetting bearer [ 196.433141][ T5562] tipc: Disabling bearer [ 197.426139][ T13] tipc: Node number set to 1623827014 [ 198.935394][ T5581] loop1: detected capacity change from 0 to 2048 [ 199.364766][ T5598] xt_HMARK: spi-set and port-set can't be combined [ 199.959018][ T5581] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 201.569687][ T5611] xt_HMARK: spi-set and port-set can't be combined [ 201.605264][ T5493] libceph: connect (1)[c::]:6789 error -101 [ 201.633061][ T5608] ceph: No mds server is up or the cluster is laggy [ 201.642952][ T5493] libceph: mon0 (1)[c::]:6789 connect error [ 203.183760][ T5634] tipc: Enabling of bearer rejected, failed to enable media [ 203.449466][ T5635] fuse: Bad value for 'fd' [ 204.105865][ T5646] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 205.270582][ T5646] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 206.947753][ T5672] netlink: 8 bytes leftover after parsing attributes in process `syz.1.305'. [ 207.195685][ T5679] fuse: Bad value for 'fd' [ 208.638941][ T5690] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 209.205196][ T5697] tipc: Enabling of bearer rejected, failed to enable media [ 211.278389][ T5722] xt_HMARK: spi-set and port-set can't be combined [ 211.712988][ T5736] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 213.017889][ T5743] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[5743] [ 214.329403][ T5747] netlink: 24 bytes leftover after parsing attributes in process `syz.2.327'. [ 215.247654][ T5751] device syzkaller0 entered promiscuous mode [ 215.277393][ T5751] tipc: Enabled bearer , priority 0 [ 216.641067][ T5763] loop3: detected capacity change from 0 to 128 [ 216.675206][ T5749] tipc: Resetting bearer [ 216.704928][ T5763] FAT-fs (loop3): Unrecognized mount option "shor name=lower" or missing value [ 216.767305][ T5749] tipc: Disabling bearer [ 216.825795][ T4659] tipc: Node number set to 4197216019 [ 216.843079][ T5763] loop3: detected capacity change from 0 to 2048 [ 216.888367][ T5763] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 217.403880][ T5773] netlink: 'syz.1.334': attribute type 21 has an invalid length. [ 217.411863][ T5773] netlink: 128 bytes leftover after parsing attributes in process `syz.1.334'. [ 217.421333][ T5773] netlink: 'syz.1.334': attribute type 4 has an invalid length. [ 217.429114][ T5773] netlink: 'syz.1.334': attribute type 3 has an invalid length. [ 217.437069][ T5773] netlink: 3 bytes leftover after parsing attributes in process `syz.1.334'. [ 217.449062][ T5773] netlink: 'syz.1.334': attribute type 21 has an invalid length. [ 217.456968][ T5773] netlink: 128 bytes leftover after parsing attributes in process `syz.1.334'. [ 217.466226][ T5773] netlink: 'syz.1.334': attribute type 4 has an invalid length. [ 217.474005][ T5773] netlink: 'syz.1.334': attribute type 3 has an invalid length. [ 217.481764][ T5773] netlink: 3 bytes leftover after parsing attributes in process `syz.1.334'. [ 218.164533][ T5777] device syzkaller0 entered promiscuous mode [ 218.222054][ T5777] tipc: Enabled bearer , priority 0 [ 218.635235][ T5777] tipc: Resetting bearer [ 218.843984][ T5776] tipc: Resetting bearer [ 219.270676][ T5776] tipc: Disabling bearer [ 220.568299][ T5797] loop3: detected capacity change from 0 to 2048 [ 220.874091][ T5797] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 222.381266][ T5816] netlink: 8 bytes leftover after parsing attributes in process `syz.0.347'. [ 222.556814][ T5820] device syzkaller0 entered promiscuous mode [ 222.892597][ T5820] tipc: Enabled bearer , priority 0 [ 223.175752][ T5819] tipc: Resetting bearer [ 223.400720][ T5819] tipc: Disabling bearer [ 223.509315][ T5829] tipc: Enabled bearer , priority 0 [ 223.631227][ T5835] tipc: Disabling bearer [ 224.374025][ T26] audit: type=1800 audit(1790719397.357:9): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.355" name="addr_trtype" dev="configfs" ino=37591 res=0 errno=0 [ 224.453865][ T26] audit: type=1800 audit(1790719397.357:10): pid=5848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.355" name="addr_traddr" dev="configfs" ino=37592 res=0 errno=0 [ 225.684976][ T5862] netlink: 28 bytes leftover after parsing attributes in process `syz.1.359'. [ 225.704111][ T5867] netlink: 8 bytes leftover after parsing attributes in process `syz.2.360'. [ 227.316874][ T5890] loop0: detected capacity change from 0 to 2048 [ 227.340059][ T5891] tipc: Enabling of bearer rejected, failed to enable media [ 227.420262][ T5890] EXT4-fs (loop0): failed to initialize system zone (-117) [ 227.445439][ T5890] EXT4-fs (loop0): mount failed [ 227.469960][ T5908] fuse: Bad value for 'group_id' [ 227.493984][ T5909] xt_HMARK: spi-set and port-set can't be combined [ 227.503700][ T4659] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 227.838391][ T5916] netlink: 8 bytes leftover after parsing attributes in process `syz.3.373'. [ 227.843889][ T4659] usb 3-1: Using ep0 maxpacket: 16 [ 227.973889][ T4659] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 228.493782][ T4659] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 228.502960][ T4659] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 228.543648][ T4659] usb 3-1: Product: syz [ 228.547863][ T4659] usb 3-1: Manufacturer: syz [ 228.552496][ T4659] usb 3-1: SerialNumber: syz [ 228.608949][ T4659] usb 3-1: config 0 descriptor?? [ 228.633889][ T144] wlan1: Trigger new scan to find an IBSS to join [ 228.668235][ T4659] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 228.693750][ T4659] em28xx 3-1:0.0: DVB interface 0 found: bulk [ 229.174618][ T5936] xt_HMARK: spi-set and port-set can't be combined [ 229.353849][ T4659] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 230.006331][ T5946] fuse: Bad value for 'group_id' [ 230.017539][ T4659] em28xx 3-1:0.0: reading from i2c device at 0xa0 failed (error=-5) [ 230.073086][ T4659] em28xx 3-1:0.0: board has no eeprom [ 230.213719][ T5950] tipc: Enabling of bearer rejected, failed to enable media [ 230.445354][ T5952] em28xx 3-1:0.0: reading from i2c device at 0xe failed (error=-5) [ 230.673794][ T4659] em28xx 3-1:0.0: Identified as PCTV tripleStick (292e) (card=94) [ 230.702090][ T4659] em28xx 3-1:0.0: dvb set to bulk mode. [ 230.835913][ T4659] usb 3-1: USB disconnect, device number 2 [ 230.869489][ T5897] em28xx 3-1:0.0: Binding DVB extension [ 230.894371][ T4659] em28xx 3-1:0.0: Disconnecting em28xx [ 230.903519][ T5962] netlink: 8 bytes leftover after parsing attributes in process `syz.3.384'. [ 230.977682][ T5897] em28xx 3-1:0.0: Registering input extension [ 231.153166][ T4659] em28xx 3-1:0.0: Closing input extension [ 231.181402][ T4659] em28xx 3-1:0.0: Freeing device [ 232.589342][ T144] wlan1: Trigger new scan to find an IBSS to join [ 232.603732][ T4313] wlan1: Trigger new scan to find an IBSS to join [ 233.098752][ T5990] xt_HMARK: spi-set and port-set can't be combined [ 233.350876][ T5993] fuse: Bad value for 'group_id' [ 233.528415][ T6002] tipc: Enabling of bearer rejected, failed to enable media [ 237.068390][ T4244] wlan1: Trigger new scan to find an IBSS to join [ 237.080862][ T4243] wlan1: Trigger new scan to find an IBSS to join [ 238.909585][ T6055] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 239.199112][ T4243] wlan1: Creating new IBSS network, BSSID d2:39:e6:05:1d:03 [ 239.778337][ T6060] loop2: detected capacity change from 0 to 2048 [ 239.869191][ T6060] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.704221][ T6074] xt_HMARK: spi-set and port-set can't be combined [ 241.625763][ T4313] wlan1: Creating new IBSS network, BSSID 82:3b:0f:30:fa:6b [ 242.864680][ T6094] xt_HMARK: spi-set and port-set can't be combined [ 243.897893][ T19] process 6103 (syz.2.424) no longer affine to cpu1 [ 244.493701][ T6106] smpboot: CPU 1 is now offline [ 247.094204][ T6131] jffs2: notice: (6131) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 247.247707][ T6121] xt_HMARK: spi-set and port-set can't be combined [ 250.881535][ T6159] loop0: detected capacity change from 0 to 128 [ 251.964504][ T6159] FAT-fs (loop0): Unrecognized mount option "shor name=lower" or missing value [ 252.592621][ T6159] loop0: detected capacity change from 0 to 2048 [ 252.698936][ T6159] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 252.978905][ T6166] tc action pedit offset must be on 32 bit boundaries [ 252.985769][ T6166] tc action pedit offset must be on 32 bit boundaries [ 252.992555][ T6166] tc action pedit offset must be on 32 bit boundaries [ 252.999342][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.006114][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.012863][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.019646][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.026411][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.033272][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.040058][ T6166] tc action pedit offset must be on 32 bit boundaries [ 253.046861][ T6166] TC_ACT_REPEAT abuse ? [ 253.097564][ T6168] jffs2: notice: (6168) jffs2_build_xattr_subsystem: complete building xattr subsystem, 0 of xdatum (0 unchecked, 0 orphan) and 0 of xref (0 dead, 0 orphan) found. [ 255.545009][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.552620][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 262.369556][ T6228] loop2: detected capacity change from 0 to 512 [ 262.510406][ T6228] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e000e01c, mo2=0002] [ 262.611477][ T6228] System zones: 1-12 [ 262.665262][ T6232] netlink: 'syz.1.466': attribute type 10 has an invalid length. [ 262.688546][ T6228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:401: inode #12: comm syz.2.463: missing EA_INODE flag [ 262.737881][ T6232] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.747107][ T6232] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.803983][ T6228] EXT4-fs error (device loop2): ext4_xattr_inode_iget:406: comm syz.2.463: error while reading EA inode 12 err=-117 [ 263.074064][ T6228] EXT4-fs (loop2): 1 orphan inode deleted [ 263.079828][ T6228] EXT4-fs (loop2): mounted filesystem without journal. Opts: debug,resuid=0x000000000000ee01,,errors=continue. Quota mode: writeback. [ 264.978187][ T6247] xt_HMARK: spi-set and port-set can't be combined [ 266.172989][ T6232] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.180221][ T6232] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.188128][ T6232] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.195217][ T6232] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.507655][ T6232] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 266.572622][ T6236] netlink: 32 bytes leftover after parsing attributes in process `syz.0.467'. [ 269.873932][ T4244] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.272895][ T4244] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 272.348849][ T6291] loop0: detected capacity change from 0 to 128 [ 273.078363][ T6301] CIFS: Bad mount helper ver=1.0. Did you want SMB1 (CIFS) dialect and mean to type vers=1.0 instead? [ 274.006060][ T6319] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 274.021054][ T4316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 274.061610][ T6322] loop3: detected capacity change from 0 to 512 [ 274.260276][ T6295] xt_HMARK: spi-set and port-set can't be combined [ 279.042776][ T6353] device syzkaller0 entered promiscuous mode [ 279.400719][ T6356] netlink: 'syz.3.507': attribute type 10 has an invalid length. [ 279.426843][ T6356] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.435857][ T6356] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.521759][ T6365] loop2: detected capacity change from 0 to 1024 [ 283.586902][ T6381] loop2: detected capacity change from 0 to 128 [ 283.751530][ T6356] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.758683][ T6356] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.766036][ T6356] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.773091][ T6356] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.263537][ T6356] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 287.303442][ T6421] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 289.474522][ T6449] loop0: detected capacity change from 0 to 128 [ 289.996588][ T6449] EXT4-fs warning (device loop0): ext4_fill_super:4027: metadata_csum and uninit_bg are redundant flags; please run fsck. [ 290.036541][ T6450] udevd[6450]: incorrect ext4 checksum on /dev/loop0 [ 291.049349][ T6449] EXT4-fs (loop0): VFS: Found ext4 filesystem with invalid superblock checksum. Run e2fsck? [ 291.060374][ T6461] fuse: Unknown parameter 'group_id00000000000000000000' [ 291.088646][ T6456] device bridge0 entered promiscuous mode [ 291.846039][ T6449] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 291.870663][ T6449] loop0: detected capacity change from 0 to 2048 [ 293.384387][ T6449] UDF-fs: error (device loop0): udf_read_tagged: tag checksum failed, block 160: 0xa1 != 0xd4 [ 293.397094][ T6449] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 296.749611][ T6499] loop2: detected capacity change from 0 to 512 [ 296.803738][ T6499] EXT4-fs (loop2): Mount option "noacl" will be removed by 3.5 [ 296.803738][ T6499] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 296.803738][ T6499] [ 296.890068][ T6501] xt_HMARK: spi-set and port-set can't be combined [ 296.931845][ T6499] EXT4-fs (loop2): Mount option "dax=inode" incompatible with ext2 [ 297.607205][ T5493] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 297.634408][ T6499] loop2: detected capacity change from 0 to 2048 [ 297.688241][ T6499] UDF-fs: bad mount option "" or missing value [ 297.885036][ T5493] usb 4-1: Using ep0 maxpacket: 32 [ 299.280175][ T5493] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 299.374559][ T5493] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 299.434709][ T5493] usb 4-1: config 0 descriptor?? [ 299.495928][ T5493] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 299.729870][ T5493] gspca_vc032x: reg_r err -71 [ 299.734604][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.783207][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.802732][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.819254][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.855858][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.871318][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.884195][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.911287][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.937518][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.942844][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 299.982735][ T6518] tipc: Enabling of bearer rejected, failed to enable media [ 300.001819][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.021891][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.047538][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.075017][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.080331][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.131740][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.159305][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 300.186742][ T5493] gspca_vc032x: I2c Bus Busy Wait 00 [ 301.538526][ T5493] gspca_vc032x: Unknown sensor... [ 301.570535][ T5493] vc032x: probe of 4-1:0.0 failed with error -22 [ 301.728632][ T5493] usb 4-1: USB disconnect, device number 3 [ 302.093201][ T6535] device syzkaller0 entered promiscuous mode [ 302.484979][ T6539] netlink: 24 bytes leftover after parsing attributes in process `syz.4.560'. [ 303.753951][ T6550] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6550] [ 304.466048][ T6566] tipc: Enabled bearer , priority 0 [ 304.524325][ T6566] tipc: Resetting bearer [ 304.567307][ T6565] tipc: Disabling bearer [ 304.890570][ T4244] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 305.061218][ T6579] xt_HMARK: spi-set and port-set can't be combined [ 305.505842][ T6582] xt_HMARK: spi-set and port-set can't be combined [ 306.213401][ T6584] 9pnet: Insufficient options for proto=fd [ 307.906227][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 308.890600][ T5493] Bluetooth: hci4: command 0x0405 tx timeout [ 309.392087][ T6593] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6593] [ 310.418279][ T6596] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6596] [ 310.803540][ T6598] tc action pedit offset 132 out of bounds [ 310.980363][ T6605] tipc: Enabling of bearer rejected, failed to enable media [ 311.824263][ T6613] device syzkaller0 entered promiscuous mode [ 311.952330][ T6613] simple: /dev/video#_1 [ 311.956823][ T6613] simple: /dev/video#_2 [ 311.961038][ T6613] simple: /dev/video#_3 [ 311.965190][ T6613] simple: /dev/video#_4 [ 311.969364][ T6613] simple: /dev/video#_5 [ 311.973511][ T6613] simple: /dev/video#_6 [ 311.977656][ T6613] simple: /dev/video#_7 [ 311.981819][ T6613] simple: /dev/video#_8 [ 311.985961][ T6613] simple: /dev/video#_9 [ 311.990113][ T6613] simple: /dev/video#_10 [ 311.994384][ T6613] simple: /dev/video#_11 [ 311.998619][ T6613] simple: /dev/video#_12 [ 312.002868][ T6613] simple: /dev/video#_13 [ 312.007125][ T6613] simple: /dev/video#_14 [ 312.011360][ T6613] simple: /dev/video#_15 [ 312.015626][ T6613] simple: /dev/video#_16 [ 312.019882][ T6613] simple: /dev/video#_17 [ 312.024133][ T6613] simple: /dev/video#_18 [ 312.028377][ T6613] simple: /dev/video#_19 [ 312.032607][ T6613] simple: /dev/video#_20 [ 312.036857][ T6613] simple: /dev/video#_21 [ 312.041093][ T6613] simple: /dev/video#_22 [ 312.045368][ T6613] simple: /dev/video#_23 [ 312.049603][ T6613] simple: /dev/video#_24 [ 312.054587][ T6613] simple: /dev/video#_25 [ 312.058848][ T6613] simple: /dev/video#_26 [ 312.063092][ T6613] simple: /dev/video#_27 [ 312.067360][ T6613] simple: /dev/video#_28 [ 312.071609][ T6613] simple: /dev/video#_29 [ 312.075838][ T6613] simple: /dev/video#_30 [ 312.080121][ T6613] simple: /dev/video#_31 [ 312.084357][ T6613] simple: /dev/video#_32 [ 312.088618][ T6613] TC_ACT_REPEAT abuse ? [ 312.211202][ T6620] netlink: 8 bytes leftover after parsing attributes in process `syz.0.584'. [ 312.243398][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.4.583'. [ 312.338206][ T6622] overlayfs: failed to clone upperpath [ 313.492305][ T6637] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6637] [ 313.537664][ T6640] fuse: Unknown parameter 'grou00000000000000000000' [ 313.653397][ T6643] xt_HMARK: spi-set and port-set can't be combined [ 315.351779][ T6656] tipc: Enabling of bearer rejected, failed to enable media [ 318.753542][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.760255][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.752406][ T6681] ip_tables: iptables: counters copy to user failed while replacing table [ 319.810496][ T6682] fuse: Unknown parameter 'grou00000000000000000000' [ 320.252469][ T6685] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6685] [ 321.176714][ T6698] device syzkaller0 entered promiscuous mode [ 321.432473][ T6697] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 321.558752][ T6699] tipc: Enabled bearer , priority 0 [ 321.610706][ T6698] tipc: Resetting bearer [ 321.649764][ T6696] tipc: Resetting bearer [ 321.695063][ T6696] tipc: Disabling bearer [ 324.156886][ T6718] loop2: detected capacity change from 0 to 2048 [ 324.310475][ T6718] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 324.358125][ T6727] fuse: Unknown parameter 'grou00000000000000000000' [ 325.138339][ T6737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.620'. [ 325.323852][ T6744] xt_HMARK: spi-set and port-set can't be combined [ 332.198514][ T6764] loop2: detected capacity change from 0 to 512 [ 334.435607][ T6764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.497916][ T6770] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 334.513269][ T6770] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 335.137004][ T6785] ubi0: attaching mtd0 [ 335.143042][ T6785] ubi0: scanning is finished [ 335.147675][ T6785] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 335.185671][ T6785] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 338.211186][ T6796] device vlan0 entered promiscuous mode [ 339.170547][ T6817] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6817] [ 339.816396][ T6823] xt_HMARK: spi-set and port-set can't be combined [ 341.967446][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 342.181943][ T6846] loop3: detected capacity change from 0 to 512 [ 342.286230][ T6846] EXT4-fs (loop3): Mount option "noacl" will be removed by 3.5 [ 342.286230][ T6846] Contact linux-ext4@vger.kernel.org if you think we should keep it. [ 342.286230][ T6846] [ 342.377637][ T6847] loop2: detected capacity change from 0 to 4096 [ 343.065001][ T6846] EXT4-fs (loop3): Mount option "dax=inode" incompatible with ext2 [ 344.650030][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 344.795918][ T6846] loop3: detected capacity change from 0 to 2048 [ 344.896015][ T6846] UDF-fs: bad mount option "" or missing value [ 345.547133][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 345.719887][ T6863] netlink: 4 bytes leftover after parsing attributes in process `syz.4.655'. [ 346.437177][ T6871] xt_HMARK: spi-set and port-set can't be combined [ 347.198135][ T6885] fuse: Bad value for 'fd' [ 348.677236][ T6887] ip_tables: iptables: counters copy to user failed while replacing table [ 352.027811][ T6898] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.934332][ T6909] xt_HMARK: spi-set and port-set can't be combined [ 355.765193][ T6917] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[6917] [ 358.880586][ T6925] fuse: Bad value for 'fd' [ 359.778460][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 359.855246][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 359.939035][ T6933] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 361.622912][ T6933] device bridge_slave_0 left promiscuous mode [ 361.662409][ T6933] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.785081][ T6933] device bridge_slave_1 left promiscuous mode [ 361.793530][ T6949] loop0: detected capacity change from 0 to 256 [ 361.837407][ T6933] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.935524][ T6933] bond0: (slave bond_slave_0): Releasing backup interface [ 362.014567][ T6933] bond0: (slave bond_slave_1): Releasing backup interface [ 362.344954][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz.2.685'. [ 362.416506][ T6933] team0: Port device team_slave_0 removed [ 362.469547][ T6933] team0: Port device team_slave_1 removed [ 362.491814][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.520752][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.554004][ T6933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.578358][ T6933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.638382][ T6949] netlink: 'syz.0.684': attribute type 29 has an invalid length. [ 362.686052][ T6949] netlink: 8 bytes leftover after parsing attributes in process `syz.0.684'. [ 362.735675][ T6949] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 363.054986][ T6972] fuse: Bad value for 'fd' [ 363.300726][ T6969] xt_HMARK: spi-set and port-set can't be combined [ 363.453022][ T6979] tipc: Enabled bearer , priority 0 [ 363.474524][ T6979] tipc: Resetting bearer [ 363.488139][ T6977] tipc: Disabling bearer [ 367.052410][ T6981] blk_update_request: I/O error, dev loop2, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 367.063740][ T6981] hpfs: hpfs_map_sector(): read error [ 369.767994][ T7019] fuse: Bad value for 'fd' [ 370.977515][ T7028] tipc: Enabled bearer , priority 0 [ 371.227332][ T7030] xt_HMARK: spi-set and port-set can't be combined [ 371.254929][ T7028] tipc: Resetting bearer [ 371.274944][ T7025] tipc: Disabling bearer [ 376.036823][ T4243] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 376.873372][ T7081] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7081] [ 378.574473][ T7104] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 378.598763][ T7104] dlm: dev_write: no op 0 0 [ 380.086261][ T7115] overlayfs: failed to clone upperpath [ 380.097132][ T4243] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 380.526652][ T7116] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7116] [ 381.031346][ T7121] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7121] [ 381.235935][ T7127] loop3: detected capacity change from 0 to 16 [ 381.285481][ T7127] erofs: (device loop3): mounted with root inode @ nid 36. [ 381.524889][ T7126] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7126] [ 385.504638][ T7155] xt_HMARK: spi-set and port-set can't be combined [ 385.935394][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 385.941709][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 386.615924][ T7163] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7163] [ 388.151134][ T7169] fuse: Bad value for 'rootmode' [ 388.577997][ T7176] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7176] [ 389.845021][ T7201] xt_HMARK: spi-set and port-set can't be combined [ 390.215084][ T7212] fuse: Bad value for 'rootmode' [ 390.814996][ T7220] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7220] [ 392.288788][ T7238] xt_HMARK: spi-set and port-set can't be combined [ 392.864815][ T7255] fuse: Unknown parameter 'use00000000000000000000' [ 393.873736][ T26] audit: type=1400 audit(1790719559.204:11): apparmor="STATUS" operation="profile_load" profile="unconfined" name="foo" pid=7260 comm="syz.2.776" [ 394.405192][ T7269] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7269] [ 394.736662][ T7274] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7274] [ 394.997915][ T7277] xt_HMARK: spi-set and port-set can't be combined [ 395.502572][ T7284] fuse: Unknown parameter 'use00000000000000000000' [ 395.546874][ T7286] fuse: Unknown parameter 'group_id00000000000000000000' [ 396.321894][ C0] hrtimer: interrupt took 19370 ns [ 397.859620][ T7308] fuse: Bad value for 'rootmode' [ 398.774220][ T7317] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7317] [ 398.948992][ T7322] fuse: Unknown parameter 'use00000000000000000000' [ 399.233081][ T7323] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7323] [ 399.859864][ T7331] fuse: Unknown parameter 'group_id00000000000000000000' [ 400.394464][ T7336] xt_HMARK: spi-set and port-set can't be combined [ 400.526372][ T7340] fuse: Bad value for 'rootmode' [ 401.006616][ T7342] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7342] [ 403.666848][ T7356] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7356] [ 403.809608][ T7360] fuse: Unknown parameter 'user_i00000000000000000000' [ 404.087036][ T7362] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7362] [ 404.304137][ T7364] fuse: Bad value for 'user_id' [ 405.578274][ T7376] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7376] [ 405.818298][ T7380] fuse: Bad value for 'rootmode' [ 406.050279][ T7378] xt_HMARK: spi-set and port-set can't be combined [ 409.768729][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 410.528520][ T7396] fuse: Bad value for 'user_id' [ 410.701334][ T7402] fuse: Bad value for 'fd' [ 410.970268][ T7400] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7400] [ 411.583345][ T7407] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7407] [ 412.054341][ T7415] xt_HMARK: spi-set and port-set can't be combined [ 412.282124][ T7414] fuse: Unknown parameter 'use00000000000000000000' [ 412.768238][ T7426] xt_HMARK: spi-set and port-set can't be combined [ 412.897505][ T7434] fuse: Bad value for 'user_id' [ 412.969930][ T7437] fuse: Unknown parameter 'user_i00000000000000000000' [ 413.511363][ T7445] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7445] [ 414.400142][ T7450] xt_HMARK: spi-set and port-set can't be combined [ 414.408264][ T7449] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7449] [ 414.475948][ T7454] fuse: Unknown parameter 'use00000000000000000000' [ 415.195888][ T7465] fuse: Bad value for 'fd' [ 415.332653][ T7472] fuse: Unknown parameter 'user_id00000000000000000000' [ 415.452712][ T7478] loop3: detected capacity change from 0 to 1024 [ 416.081690][ T7481] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7481] [ 416.851898][ T7488] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7488] [ 417.467356][ T7496] xt_HMARK: spi-set and port-set can't be combined [ 417.497160][ T7495] fuse: Unknown parameter 'use00000000000000000000' [ 417.665045][ T7500] fuse: Bad value for 'fd' [ 417.772573][ T7504] loop2: detected capacity change from 0 to 128 [ 417.828688][ T7506] fuse: Unknown parameter 'user_id00000000000000000000' [ 418.251069][ T7507] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7507] [ 418.445648][ T7516] tipc: Enabling of bearer rejected, failed to enable media [ 418.947116][ T7524] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7524] [ 419.535470][ T9] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 420.766090][ T7533] fuse: Unknown parameter 'user_i00000000000000000000' [ 421.537573][ T7539] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7539] [ 422.827812][ T7542] fuse: Bad value for 'fd' [ 423.212321][ T7554] fuse: Unknown parameter 'user_id00000000000000000000' [ 423.452695][ T7549] xt_HMARK: spi-set and port-set can't be combined [ 424.421198][ T7563] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7563] [ 424.707698][ T7565] netlink: 'syz.2.879': attribute type 21 has an invalid length. [ 424.715684][ T7565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.879'. [ 424.724759][ T7565] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 424.732621][ T7565] netlink: 'syz.2.879': attribute type 3 has an invalid length. [ 424.740451][ T7565] netlink: 3 bytes leftover after parsing attributes in process `syz.2.879'. [ 424.750145][ T7565] netlink: 'syz.2.879': attribute type 21 has an invalid length. [ 424.757965][ T7565] netlink: 128 bytes leftover after parsing attributes in process `syz.2.879'. [ 424.766992][ T7565] netlink: 'syz.2.879': attribute type 4 has an invalid length. [ 424.774662][ T7565] netlink: 'syz.2.879': attribute type 3 has an invalid length. [ 424.782795][ T7565] netlink: 3 bytes leftover after parsing attributes in process `syz.2.879'. [ 425.405320][ T7578] tipc: Enabling of bearer rejected, failed to enable media [ 425.425218][ T7577] fuse: Unknown parameter 'user_i00000000000000000000' [ 425.866326][ T7583] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7583] [ 425.995533][ T7587] fuse: Bad value for 'fd' [ 426.538831][ T7596] xt_HMARK: spi-set and port-set can't be combined [ 426.808226][ T7600] fuse: Bad value for 'fd' [ 428.105347][ T7602] overlayfs: failed to clone upperpath [ 429.319951][ T7608] loop3: detected capacity change from 0 to 1024 [ 429.349317][ T7613] loop2: detected capacity change from 0 to 128 [ 429.385209][ T7608] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 429.852876][ T7617] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7617] [ 430.383928][ T7613] EXT4-fs (loop2): VFS: Found ext4 filesystem with unknown checksum algorithm. [ 430.453328][ T7618] udevd[7618]: incorrect ext4 checksum on /dev/loop2 [ 431.867455][ T7622] blk_update_request: I/O error, dev loop0, sector 0 op 0x0:(READ) flags 0x800 phys_seg 1 prio class 0 [ 432.555539][ T7628] fuse: Unknown parameter 'user_i00000000000000000000' [ 433.649188][ T7635] fuse: Bad value for 'fd' [ 434.590094][ T7646] fuse: Bad value for 'fd' [ 435.048116][ T7650] xt_HMARK: spi-set and port-set can't be combined [ 438.696765][ T7680] fuse: Unknown parameter 'user_id00000000000000000000' [ 440.204769][ T7688] fuse: Bad value for 'fd' [ 441.411606][ T7695] xt_HMARK: spi-set and port-set can't be combined [ 441.717378][ T7698] ip_tables: iptables: counters copy to user failed while replacing table [ 441.934390][ T7703] tipc: Enabling of bearer rejected, failed to enable media [ 443.269667][ T7728] fuse: Unknown parameter 'user_id00000000000000000000' [ 443.278786][ T7729] fuse: Unknown parameter '0x0000000000000004' [ 444.713199][ T7736] misc userio: No port type given on /dev/userio [ 445.084135][ T7753] tipc: Enabling of bearer rejected, failed to enable media [ 445.914033][ T7769] fuse: Unknown parameter '0x0000000000000004' [ 446.103665][ T7772] fuse: Unknown parameter 'user_id00000000000000000000' [ 446.342631][ T7774] loop2: detected capacity change from 0 to 4096 [ 446.488933][ T155] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 449.759041][ T7798] fuse: Unknown parameter '0x0000000000000004' [ 449.767339][ T4195] ntfs3: loop2: ntfs_evict_inode r=5 failed, -22. [ 449.786686][ T7800] tipc: Enabling of bearer rejected, failed to enable media [ 449.948650][ T4195] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 450.223334][ T7803] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7803] [ 450.275707][ T7807] fuse: Bad value for 'fd' [ 452.039329][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 452.046680][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.073884][ T7836] fuse: Unknown parameter '0x0000000000000004' [ 452.119477][ T7841] fuse: Bad value for 'fd' [ 452.692971][ T7849] tipc: Enabling of bearer rejected, failed to enable media [ 456.062393][ T7872] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7872] [ 456.249986][ T7878] fuse: Unknown parameter '0x0000000000000004' [ 456.653200][ T7883] fuse: Bad value for 'fd' [ 458.253558][ T7887] usb usb8: usbfs: process 7887 (syz.0.984) did not claim interface 6 before use [ 458.266731][ T7887] loop0: detected capacity change from 0 to 512 [ 458.286746][ T4316] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.323607][ T7887] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 458.382978][ T7887] EXT4-fs error (device loop0): ext4_validate_block_bitmap:438: comm syz.0.984: bg 0: block 184: padding at end of block bitmap is not set [ 458.404070][ T7887] EXT4-fs (loop0): Remounting filesystem read-only [ 458.411218][ T7887] EXT4-fs error (device loop0) in ext4_mb_clear_bb:6191: Corrupt filesystem [ 458.420747][ T7887] EXT4-fs (loop0): Remounting filesystem read-only [ 458.427506][ T7887] EXT4-fs (loop0): 1 truncate cleaned up [ 458.433205][ T7887] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,minixdf,. Quota mode: writeback. [ 458.446810][ T7887] ext4 filesystem being mounted at /191/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 458.502195][ T7892] device syzkaller0 entered promiscuous mode [ 460.606644][ T7917] fuse: Unknown parameter '0x0000000000000004' [ 461.908571][ T7922] fuse: Unknown parameter '0x0000000000000005' [ 462.138240][ T7924] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7924] [ 463.032131][ T7931] xt_HMARK: spi-set and port-set can't be combined [ 463.557623][ T7938] device syzkaller0 entered promiscuous mode [ 463.597196][ T7938] tipc: Enabled bearer , priority 0 [ 463.661555][ T7938] tipc: Resetting bearer [ 463.700056][ T7936] tipc: Resetting bearer [ 463.747676][ T7936] tipc: Disabling bearer [ 464.093212][ T7956] fuse: Unknown parameter '0x0000000000000005' [ 464.101861][ T7960] tipc: Enabling of bearer rejected, failed to enable media [ 464.129984][ T7958] fuse: Unknown parameter 'fd0x0000000000000004' [ 464.826735][ T7968] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[7968] [ 465.109493][ T7970] xt_HMARK: spi-set and port-set can't be combined [ 465.872126][ T7981] device syzkaller0 entered promiscuous mode [ 465.905935][ T7981] tipc: Enabled bearer , priority 0 [ 465.959885][ T7981] tipc: Resetting bearer [ 465.997261][ T7980] tipc: Resetting bearer [ 466.035084][ T7980] tipc: Disabling bearer [ 466.181645][ T7987] fuse: Unknown parameter 'fd0x0000000000000004' [ 466.218252][ T7991] fuse: Unknown parameter '0x0000000000000005' [ 466.771403][ T7989] nvmet: adding nsid 1 to subsystem testsubsys [ 467.996167][ T8006] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8006] [ 468.644516][ T8014] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8014] [ 468.722178][ T8016] device syzkaller0 entered promiscuous mode [ 468.803081][ T8016] tipc: Enabled bearer , priority 0 [ 468.871419][ T8016] tipc: Resetting bearer [ 468.902203][ T8025] fuse: Unknown parameter 'fd0x0000000000000004' [ 468.944116][ T8015] tipc: Resetting bearer [ 470.525483][ T8015] tipc: Disabling bearer [ 471.222418][ T1322] tipc: Node number set to 1025469675 [ 473.664440][ T8064] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8064] [ 474.032122][ T8072] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8072] [ 475.959339][ T8087] device syzkaller0 entered promiscuous mode [ 475.996613][ T8087] tipc: Enabled bearer , priority 0 [ 476.213217][ T8087] tipc: Resetting bearer [ 476.315811][ T8086] tipc: Resetting bearer [ 477.691287][ T8086] tipc: Disabling bearer [ 480.485379][ T8128] device syzkaller0 entered promiscuous mode [ 480.622287][ T8131] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8131] [ 480.743186][ T8135] tipc: Enabled bearer , priority 0 [ 480.797121][ T8128] tipc: Resetting bearer [ 480.852279][ T8127] tipc: Resetting bearer [ 480.894356][ T8127] tipc: Disabling bearer [ 480.936090][ T8140] netlink: 'syz.2.1072': attribute type 21 has an invalid length. [ 481.099885][ T8141] bridge0: port 3(wlan1) entered blocking state [ 481.310627][ T8141] bridge0: port 3(wlan1) entered disabled state [ 481.635675][ T8141] device wlan1 entered promiscuous mode [ 481.706608][ T8141] bridge0: port 3(wlan1) entered blocking state [ 481.713275][ T8141] bridge0: port 3(wlan1) entered forwarding state [ 481.855474][ T4316] bridge0: port 3(wlan1) entered disabled state [ 482.238424][ T8157] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8157] [ 482.632769][ T8168] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8168] [ 483.460262][ T8180] device syzkaller0 entered promiscuous mode [ 483.755598][ T8180] tipc: Enabled bearer , priority 0 [ 483.799638][ T8180] tipc: Resetting bearer [ 484.534861][ T8178] tipc: Resetting bearer [ 484.708409][ T8178] tipc: Disabling bearer [ 485.196816][ T8191] netdevsim netdevsim120 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.504144][ T8205] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8205] [ 485.787783][ T8209] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8209] [ 486.534213][ T8228] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 486.812619][ T8238] tipc: Enabling of bearer rejected, failed to enable media [ 487.120889][ T8242] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8242] [ 487.996707][ T8261] device syzkaller0 entered promiscuous mode [ 488.171264][ T8261] tipc: Enabled bearer , priority 0 [ 488.184049][ T8264] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8264] [ 488.241420][ T8261] tipc: Resetting bearer [ 488.299406][ T8258] tipc: Resetting bearer [ 488.377503][ T8258] tipc: Disabling bearer [ 488.910098][ T8287] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8287] [ 489.176073][ T1344] usb 1-1: new full-speed USB device number 2 using dummy_hcd [ 489.414331][ T8301] tipc: Enabling of bearer rejected, failed to enable media [ 492.382599][ T8318] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8318] [ 492.405977][ T8321] tipc: Enabling of bearer rejected, failed to enable media [ 493.261992][ T1344] usb 1-1: unable to get BOS descriptor or descriptor too short [ 493.457701][ T1344] usb 1-1: too many configurations: 230, using maximum allowed: 8 [ 494.367088][ T1344] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 494.410585][ T1344] usb 1-1: can't read configurations, error -71 [ 495.127595][ T8356] tipc: Enabling of bearer rejected, failed to enable media [ 496.483400][ T4289] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 496.988750][ T8366] device syzkaller0 entered promiscuous mode [ 497.026718][ T8366] tipc: Enabled bearer , priority 0 [ 497.573397][ T8366] tipc: Resetting bearer [ 497.607106][ T8365] tipc: Resetting bearer [ 497.784633][ T8365] tipc: Disabling bearer [ 498.184519][ T8380] device syzkaller0 entered promiscuous mode [ 498.339984][ T8380] tipc: Enabled bearer , priority 0 [ 498.373861][ T8380] tipc: Resetting bearer [ 498.383454][ T8383] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8383] [ 498.419233][ T8379] tipc: Resetting bearer [ 498.448900][ T8379] tipc: Disabling bearer [ 498.558084][ T8389] fuse: Bad value for 'fd' [ 498.999344][ T8410] tipc: Enabling of bearer rejected, failed to enable media [ 499.079810][ T8413] loop2: detected capacity change from 0 to 1024 [ 499.214736][ T8413] EXT4-fs (loop2): ext4_check_descriptors: Checksum for group 0 failed (38034!=20869) [ 499.314584][ T8413] EXT4-fs (loop2): barriers disabled [ 499.364848][ T8413] JBD2: no valid journal superblock found [ 499.400286][ T8413] EXT4-fs (loop2): error loading journal [ 500.082695][ T8424] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 500.547005][ T8435] fuse: Bad value for 'fd' [ 503.287042][ T8463] ubi0: attaching mtd0 [ 503.292166][ T8463] ubi0: scanning is finished [ 503.296840][ T8463] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 503.549570][ T8466] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8466] [ 503.576777][ T8468] tipc: Enabling of bearer rejected, failed to enable media [ 503.586500][ T8463] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 504.516248][ T8485] fuse: Bad value for 'fd' [ 504.787767][ T8483] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8483] [ 505.408767][ T8492] device syzkaller0 entered promiscuous mode [ 505.465843][ T8495] tipc: Enabled bearer , priority 0 [ 505.510069][ T8492] tipc: Resetting bearer [ 505.545253][ T8491] tipc: Resetting bearer [ 505.802594][ T8491] tipc: Disabling bearer [ 507.890207][ T8523] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8523] [ 508.084034][ T8510] ip_tables: iptables: counters copy to user failed while replacing table [ 508.095146][ T4193] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 508.109246][ T8524] tipc: Enabling of bearer rejected, failed to enable media [ 508.390912][ T4193] usb 3-1: Using ep0 maxpacket: 32 [ 509.138387][ T8535] fuse: Unknown parameter '0x0000000000000004' [ 509.159284][ T8537] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 509.225471][ T4193] usb 3-1: unable to read config index 0 descriptor/all [ 509.245835][ T4193] usb 3-1: can't read configurations, error -71 [ 509.816558][ T8545] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8545] [ 510.356064][ T8556] tipc: Enabled bearer , priority 0 [ 510.808787][ T8562] ubi0: attaching mtd0 [ 510.814150][ T8562] ubi0: scanning is finished [ 510.818843][ T8562] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 511.666551][ T8556] tipc: Resetting bearer [ 511.678209][ T8553] tipc: Disabling bearer [ 511.739587][ T8566] tipc: Enabled bearer , priority 0 [ 511.754896][ T8566] tipc: Resetting bearer [ 511.765563][ T8565] tipc: Disabling bearer [ 512.222700][ T8568] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8568] [ 512.728143][ T8562] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 514.408068][ T8579] fuse: Unknown parameter '0x0000000000000005' [ 516.050664][ T8587] tipc: Enabled bearer , priority 0 [ 516.089927][ T8587] tipc: Resetting bearer [ 516.385123][ T8585] tipc: Disabling bearer [ 516.537442][ T8593] netlink: 'syz.2.1195': attribute type 11 has an invalid length. [ 517.002151][ T8604] tipc: Enabling of bearer rejected, failed to enable media [ 517.025274][ T8602] loop2: detected capacity change from 0 to 512 [ 517.053710][ T8602] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 517.085619][ T8602] EXT4-fs (loop2): 1 truncate cleaned up [ 517.091383][ T8602] EXT4-fs (loop2): mounted filesystem without journal. Opts: init_itable=0x0000000000000000,jqfmt=vfsold,debug_want_extra_isize=0x000000000000006a,jqfmt=vfsold,minixdf,quota,,errors=continue. Quota mode: writeback. [ 517.631199][ T8592] md/raid1:md0: active with 1 out of 2 mirrors [ 518.691323][ T8635] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8635] [ 518.731970][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 518.739216][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 518.901365][ T8642] fuse: Unknown parameter '0x0000000000000005' [ 519.043332][ T8645] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8645] [ 519.996470][ T8654] tipc: Enabling of bearer rejected, failed to enable media [ 523.323632][ T8683] tipc: Enabling of bearer rejected, failed to enable media [ 523.955304][ T8697] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4187] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8697] [ 524.251959][ T8703] fuse: Unknown parameter '0x0000000000000004' [ 525.954929][ T8714] tipc: Enabling of bearer rejected, failed to enable media [ 527.873663][ T8716] loop2: detected capacity change from 0 to 4096 [ 528.436913][ T8716] ntfs3: loop2: Mark volume as dirty due to NTFS errors [ 529.568745][ T8739] loop3: detected capacity change from 0 to 8 [ 530.163808][ T8745] device syzkaller0 entered promiscuous mode [ 530.361831][ T8748] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8748] [ 531.228125][ T8758] fuse: Unknown parameter '0x0000000000000005' [ 532.258927][ T8756] loop2: detected capacity change from 0 to 512 [ 532.328975][ T8756] EXT4-fs (loop2): Cannot turn on journaled quota: type 0: error -2 [ 532.786826][ T4999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 533.389731][ T8756] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1237: invalid indirect mapped block 256 (level 1) [ 534.412353][ T8773] device syzkaller0 entered promiscuous mode [ 534.441198][ T8756] EXT4-fs error (device loop2): ext4_free_branches:1030: inode #13: comm syz.2.1237: invalid indirect mapped block 2683928664 (level 1) [ 534.503269][ T8756] EXT4-fs (loop2): 1 truncate cleaned up [ 534.519935][ T8756] EXT4-fs (loop2): mounted filesystem without journal. Opts: noblock_validity,max_dir_size_kb=0x0000000000000009,stripe=0x0000000000000ee9,nodioread_nolock,discard,usrjquota=.nouid32,noauto_da_alloc,jqfmt=vfsv0,barrier,nogrpid,,,errors=continue. Quota mode: writeback. [ 534.849977][ T8775] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8775] [ 538.436260][ T8808] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8808] [ 538.548785][ T8810] fuse: Unknown parameter '0x0000000000000005' [ 538.991261][ T8815] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 545.021853][ T8852] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8852] [ 545.909428][ T8857] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1264'. [ 545.991864][ T8860] loop2: detected capacity change from 0 to 256 [ 546.007447][ T8862] fuse: Unknown parameter 'fd0x0000000000000005' [ 548.192729][ T8870] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 548.215167][ T8871] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.224299][ T8871] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.233012][ T8871] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.241726][ T8871] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.250450][ T8871] netdevsim netdevsim120 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 548.526238][ T8875] loop2: detected capacity change from 0 to 512 [ 548.819900][ T8875] EXT4-fs (loop2): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 548.860036][ T8871] device syzkaller0 entered promiscuous mode [ 549.306937][ T8875] ext4 filesystem being mounted at /239/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 551.417520][ T8899] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8899] [ 551.752371][ T8901] fuse: Unknown parameter 'fd0x0000000000000004' [ 552.146501][ T8920] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8920] [ 556.620229][ T8951] fuse: Unknown parameter 'fd0x0000000000000004' [ 557.421077][ T8967] loop0: detected capacity change from 0 to 16 [ 557.479543][ T8967] erofs: (device loop0): mounted with root inode @ nid 36. [ 557.569187][ T8970] tmpfs: Unknown parameter 'nr_bl' [ 557.769211][ T8971] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[8971] [ 560.446411][ T8978] CIFS: Attempting to mount \\127.0.0.1\share [ 560.519104][ T8978] CIFS: VFS: Error connecting to socket. Aborting operation. [ 560.718255][ T8978] CIFS: VFS: cifs_mount failed w/return code = -4 [ 562.061000][ T9010] device syzkaller0 entered promiscuous mode [ 562.622605][ T9018] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9018] [ 565.706486][ T9035] loop3: detected capacity change from 0 to 4096 [ 565.787395][ T9035] ntfs: (device loop3): parse_options(): Invalid mft_zone_multiplier. Using default value, i.e. 1. [ 565.914953][ T9035] ntfs: volume version 3.1. [ 566.260443][ T9047] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.269367][ T9047] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.278391][ T9047] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.287181][ T9047] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 566.298243][ T9048] ntfs: (device loop3): ntfs_ucstonls(): Unicode name contains characters that cannot be converted to character set maciceland. You might want to try to use the mount option nls=utf8. [ 566.316781][ T9048] ntfs: (device loop3): ntfs_filldir(): Skipping unrepresentable inode 0x4. [ 566.328770][ T9048] ksmbd: Unknown IPC event: 10, ignore. [ 566.818232][ T9047] device syzkaller0 entered promiscuous mode [ 567.093667][ T9063] xt_hashlimit: max too large, truncated to 1048576 [ 567.103959][ T9062] loop2: detected capacity change from 0 to 512 [ 568.026639][ T9066] sg_write: data in/out 768/2 bytes for SCSI command 0x0-- guessing data in; [ 568.026639][ T9066] program syz.0.1324 not setting count and/or reply_len properly [ 568.647301][ T9062] EXT4-fs (loop2): Ignoring removed nobh option [ 568.773893][ T9062] EXT4-fs (loop2): Ignoring removed nomblk_io_submit option [ 568.828899][ T9062] EXT4-fs (loop2): mounting ext3 file system using the ext4 subsystem [ 568.896404][ T9068] autofs4:pid:9068:autofs_fill_super: called with bogus options [ 568.973091][ T9062] EXT4-fs (loop2): 1 truncate cleaned up [ 569.045401][ T9062] EXT4-fs (loop2): mounted filesystem without journal. Opts: noload,journal_ioprio=0x0000000000000004,nobh,nomblk_io_submit,data_err=ignore,norecovery,,errors=continue. Quota mode: none. [ 571.328533][ T4999] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 572.119434][ T9094] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9094] [ 573.482159][ T9097] loop2: detected capacity change from 0 to 512 [ 573.779023][ T9097] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 573.935499][ T9097] EXT4-fs (loop2): 1 truncate cleaned up [ 573.977676][ T9097] EXT4-fs (loop2): mounted filesystem without journal. Opts: minixdf,errors=remount-ro,. Quota mode: none. [ 574.236069][ T9110] loop0: detected capacity change from 0 to 2048 [ 574.536929][ T9110] EXT4-fs (loop0): failed to initialize system zone (-117) [ 574.564962][ T9110] EXT4-fs (loop0): mount failed [ 576.344629][ T9133] loop2: detected capacity change from 0 to 16 [ 576.722339][ T9135] device syzkaller0 entered promiscuous mode [ 577.439190][ T9133] erofs: (device loop2): mounted with root inode @ nid 36. [ 577.473389][ T9129] attempt to access beyond end of device [ 577.473389][ T9129] loop2: rw=0, want=40, limit=16 [ 578.796120][ T9166] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9166] [ 583.120703][ T9187] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 585.557005][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 585.563340][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 585.651680][ T9224] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 585.661823][ T9224] dlm: dev_write: no op 0 0 [ 586.353763][ T9240] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9240] [ 590.835775][ T9263] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 591.227778][ T9261] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.236042][ T9261] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.259777][ T9261] device syzkaller0 left promiscuous mode [ 591.284381][ T9261] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1384'. [ 591.294151][ T9261] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1384'. [ 591.394968][ T9267] loop3: detected capacity change from 0 to 128 [ 591.977183][ T9269] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9269] [ 595.673801][ T9288] bridge0: port 1(wlan1) entered blocking state [ 595.697430][ T9288] bridge0: port 1(wlan1) entered disabled state [ 596.161645][ T9293] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9293] [ 596.194565][ T9288] device wlan1 entered promiscuous mode [ 596.402942][ T9290] bridge0: port 1(wlan1) entered disabled state [ 596.435299][ T9290] device wlan1 left promiscuous mode [ 596.856045][ T9290] bridge0: port 1(wlan1) entered disabled state [ 597.348658][ T9307] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 598.696939][ T9324] 9pnet_virtio: no channels available for device 127.0.0.1 [ 598.771048][ T9328] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4186] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9328] [ 600.785415][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 600.797112][ T9342] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.805903][ T9342] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.814601][ T9342] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.823334][ T9342] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 600.838009][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 600.847737][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1408'. [ 601.110334][ T9343] loop3: detected capacity change from 0 to 2048 [ 602.544420][ T9343] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 603.603723][ T9360] No such timeout policy "syz1" [ 605.958612][ T9403] loop2: detected capacity change from 0 to 1024 [ 606.114188][ T9403] EXT4-fs (loop2): mounted filesystem without journal. Opts: nodelalloc,bsddf,journal_ioprio=0x0000000000000001,barrier,block_validity,nodioread_nolock,grpid,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 607.934524][ T9403] ext4 filesystem being mounted at /265/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 608.541554][ T9427] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 610.328797][ T26] audit: type=1326 audit(1790719758.931:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 610.414168][ T9436] netlink: 'syz.2.1432': attribute type 27 has an invalid length. [ 611.430125][ T26] audit: type=1326 audit(1790719758.931:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 611.465907][ T9436] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1432'. [ 611.908979][ T9439] ip_tables: iptables: counters copy to user failed while replacing table [ 611.977172][ T9436] bond0: option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 612.018647][ T26] audit: type=1326 audit(1790719758.959:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f0540f4f98e code=0x7ffc0000 [ 612.357558][ T26] audit: type=1326 audit(1790719758.959:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 612.628915][ T9444] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 612.766996][ T26] audit: type=1326 audit(1790719758.959:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 613.107384][ T26] audit: type=1326 audit(1790719758.959:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=199 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 613.131405][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.699624][ T26] audit: type=1326 audit(1790719758.959:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 615.334543][ T9461] xt_hashlimit: size too large, truncated to 1048576 [ 615.341306][ T9461] xt_hashlimit: max too large, truncated to 1048576 [ 615.947229][ T26] audit: type=1326 audit(1790719758.959:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 616.229381][ T26] audit: type=1326 audit(1790719758.968:20): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=144 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 616.253418][ C0] vkms_vblank_simulate: vblank timer overrun [ 616.513911][ T9478] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9478] [ 617.451366][ T26] audit: type=1326 audit(1790719758.968:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 619.757804][ T26] audit: type=1326 audit(1790719758.968:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 620.497550][ T26] audit: type=1326 audit(1790719758.968:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 621.241966][ T26] audit: type=1326 audit(1790719758.968:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 621.393581][ T26] audit: type=1326 audit(1790719758.968:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 622.909876][ T9529] loop3: detected capacity change from 0 to 24 [ 623.113236][ T9529] MTD: Attempt to mount non-MTD device "/dev/loop3" [ 624.420005][ T9529] romfs: Mounting image 'rom 637cf1fa' through the block layer [ 624.440129][ T26] audit: type=1326 audit(1790719758.968:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 624.912783][ T26] audit: type=1326 audit(1790719758.968:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 624.947473][ T9542] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1467'. [ 626.586029][ T26] audit: type=1326 audit(1790719758.968:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 627.721841][ T26] audit: type=1326 audit(1790719758.968:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 628.249761][ T9550] loop2: detected capacity change from 0 to 2048 [ 628.445003][ T26] audit: type=1326 audit(1790719760.528:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 628.505527][ T9550] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 628.703629][ T26] audit: type=1326 audit(1790719760.528:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9431 comm="syz.3.1433" exe="/root/ci2-linux-5-15-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0540f8f159 code=0x7ffc0000 [ 631.491559][ T9592] device syzkaller0 entered promiscuous mode [ 636.173430][ T9620] loop3: detected capacity change from 0 to 32768 [ 636.232923][ T9623] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 636.399549][ T9620] XFS (loop3): Mounting V5 Filesystem [ 636.517436][ T9620] XFS (loop3): Ending clean mount [ 636.536755][ T9620] XFS (loop3): Quotacheck needed: Please wait. [ 636.679753][ T9620] XFS (loop3): Quotacheck: Done. [ 637.378651][ T4191] XFS (loop3): Unmounting Filesystem [ 638.810263][ T9647] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4185] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9647] [ 639.250887][ T9655] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 639.491522][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 639.545987][ T155] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 639.646769][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 639.873114][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 641.641140][ T9670] xt_hashlimit: max too large, truncated to 1048576 [ 641.648333][ T9670] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 641.705726][ T4193] Bluetooth: hci5: command 0x0409 tx timeout [ 641.733920][ T155] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.044886][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.196191][ T155] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 642.533947][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 642.735741][ T155] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 643.454607][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 643.506751][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 643.543943][ T9639] device bridge_slave_0 entered promiscuous mode [ 643.603303][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 643.654102][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 643.692680][ T9639] device bridge_slave_1 entered promiscuous mode [ 643.824523][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 643.834114][ T9704] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[9704] [ 643.918496][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 644.064148][ T4235] Bluetooth: hci5: command 0x041b tx timeout [ 644.483920][ T9639] team0: Port device team_slave_0 added [ 644.675211][ T9639] team0: Port device team_slave_1 added [ 644.714639][ T155] tipc: Left network mode [ 645.714406][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 645.754300][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 645.860025][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 645.984972][ T9722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1510'. [ 646.030212][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 646.072418][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 647.153753][ T4232] Bluetooth: hci5: command 0x040f tx timeout [ 647.191294][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 648.179186][ T9639] device hsr_slave_0 entered promiscuous mode [ 649.304088][ T9639] device hsr_slave_1 entered promiscuous mode [ 649.336459][ T9639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 649.357638][ T9648] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 649.390252][ T9639] Cannot create hsr debugfs directory [ 649.719586][ T4235] Bluetooth: hci5: command 0x0419 tx timeout [ 649.964564][ T9648] usb 3-1: Using ep0 maxpacket: 8 [ 650.528176][ T9648] usb 3-1: unable to get BOS descriptor or descriptor too short [ 650.615008][ T9648] usb 3-1: config 4 has an invalid interface number: 147 but max is 0 [ 650.656571][ T9648] usb 3-1: config 4 has an invalid descriptor of length 0, skipping remainder of the config [ 650.732979][ T9648] usb 3-1: config 4 has no interface number 0 [ 650.915514][ T9639] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 650.940236][ T9648] usb 3-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 650.994115][ T9648] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 651.033771][ T9648] usb 3-1: Product: syz [ 651.057918][ T9648] usb 3-1: Manufacturer: syz [ 651.099760][ T9648] usb 3-1: SerialNumber: syz [ 651.175374][ T9639] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 651.182588][ T9648] usb 3-1: can't set config #4, error -71 [ 651.212171][ T9648] usb 3-1: USB disconnect, device number 5 [ 651.262098][ T9639] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 652.003062][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 652.009372][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 652.103909][ T9639] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 652.365778][ T9789] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 652.372328][ T9789] comedi comedi1: 8255: I/O port conflict (0x5,4) [ 652.378790][ T9789] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 652.385365][ T9789] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 652.391889][ T9789] comedi comedi1: 8255: I/O port conflict (0x14000000,4) [ 652.399221][ T9789] comedi comedi1: 8255: I/O port conflict (0x20,4) [ 652.405797][ T9789] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 652.412216][ T9789] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 652.418757][ T9789] comedi comedi1: 8255: I/O port conflict (0x8,4) [ 652.425216][ T9789] comedi comedi1: 8255: I/O port conflict (0x16,4) [ 652.431740][ T9789] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 652.438225][ T9789] comedi comedi1: 8255: I/O port conflict (0x13,4) [ 652.444756][ T9789] comedi comedi1: 8255: I/O port conflict (0x4000bd55,4) [ 652.451824][ T9789] comedi comedi1: 8255: I/O port conflict (0x3,4) [ 652.458316][ T9789] comedi comedi1: 8255: I/O port conflict (0x6,4) [ 652.464736][ T9789] comedi comedi1: 8255: I/O port conflict (0x3ff,4) [ 652.471367][ T9789] comedi comedi1: 8255: I/O port conflict (0xa,4) [ 652.477787][ T9789] comedi comedi1: 8255: I/O port conflict (0x7fffffff,4) [ 652.484852][ T9789] comedi comedi1: 8255: I/O port conflict (0x2,4) [ 652.491326][ T9789] comedi comedi1: 8255: I/O port conflict (0x1,4) [ 652.497764][ T9789] comedi comedi1: 8255: I/O port conflict (0x4,4) [ 652.543145][ T9789] loop3: detected capacity change from 0 to 1024 [ 652.551302][ T155] device hsr_slave_0 left promiscuous mode [ 652.604958][ T9789] EXT4-fs error (device loop3): ext4_read_block_bitmap_nowait:476: comm syz.3.1522: Invalid block bitmap block 0 in block_group 0 [ 652.621160][ T9789] Quota error (device loop3): write_blk: dquota write failed [ 652.628901][ T9789] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 652.638872][ T9789] EXT4-fs error (device loop3): ext4_acquire_dquot:6236: comm syz.3.1522: Failed to acquire dquot type 0 [ 652.651136][ T9789] EXT4-fs error (device loop3): ext4_free_blocks:6231: comm syz.3.1522: Freeing blocks not in datazone - block = 0, count = 4096 [ 652.666676][ T9789] EXT4-fs error (device loop3): ext4_read_inode_bitmap:140: comm syz.3.1522: Invalid inode bitmap blk 0 in block_group 0 [ 652.680646][ T9789] EXT4-fs error (device loop3) in ext4_free_inode:362: Corrupt filesystem [ 652.689434][ T9789] EXT4-fs (loop3): 1 orphan inode deleted [ 652.695168][ T9789] EXT4-fs (loop3): mounted filesystem without journal. Opts: ; ,errors=continue. Quota mode: writeback. [ 652.771728][ T4244] Quota error (device loop3): remove_tree: Getting block too big (0 >= 8) [ 652.780642][ T4244] EXT4-fs error (device loop3): ext4_release_dquot:6272: comm kworker/u4:6: Failed to release dquot type 0 [ 652.794056][ T155] device hsr_slave_1 left promiscuous mode [ 652.870680][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 652.910904][ T155] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 652.950624][ T155] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 653.007710][ T155] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 653.098101][ T155] device bridge_slave_1 left promiscuous mode [ 653.129859][ T155] bridge0: port 2(bridge_slave_1) entered disabled state [ 653.273214][ T155] device bridge_slave_0 left promiscuous mode [ 653.279395][ T155] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.992560][ T9809] loop3: detected capacity change from 0 to 256 [ 655.049731][ T9809] exFAT-fs (loop3): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 657.324739][ T155] device veth1_macvtap left promiscuous mode [ 657.354469][ T155] device veth0_macvtap left promiscuous mode [ 657.380996][ T9821] FS-Cache: Duplicate cookie detected [ 657.386419][ T9821] FS-Cache: O-cookie c=00000008 [p=00000002 fl=222 nc=0 na=1] [ 657.394224][ T9821] FS-Cache: O-cookie d=ffffffff8a416220{NFS.server} n=ffff888025e75000 [ 657.402675][ T9821] FS-Cache: O-key=[16] '0400000000000000020008017f000001' [ 657.409896][ T9821] FS-Cache: N-cookie c=00000009 [p=00000002 fl=2 nc=0 na=1] [ 657.417219][ T9821] FS-Cache: N-cookie d=ffffffff8a416220{NFS.server} n=ffff88807749b000 [ 657.425501][ T9821] FS-Cache: N-key=[16] '0400000000000000020008017f000001' [ 657.453567][ T155] device veth1_vlan left promiscuous mode [ 657.459511][ T155] device veth0_vlan left promiscuous mode [ 659.385496][ T155] team0 (unregistering): Port device bond1 removed [ 659.397857][ T155] bond1 (unregistering): Released all slaves [ 659.988614][ T9842] xt_hashlimit: size too large, truncated to 1048576 [ 659.995419][ T9842] xt_hashlimit: max too large, truncated to 1048576 [ 660.144165][ T155] team0 (unregistering): Port device team_slave_1 removed [ 660.161927][ T155] team0 (unregistering): Port device team_slave_0 removed [ 660.188667][ T155] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 660.210126][ T155] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 660.303123][ T155] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 660.316484][ T155] bond0 (unregistering): Released all slaves [ 660.583741][ T9829] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1532'. [ 660.595774][ T9834] bridge0: port 2(bridge_slave_1) entered disabled state [ 660.604948][ T9834] bridge0: port 1(bridge_slave_0) entered disabled state [ 660.861030][ T9838] device bridge_slave_1 left promiscuous mode [ 660.900112][ T9838] bridge0: port 2(bridge_slave_1) entered disabled state [ 661.067772][ T9838] device bridge_slave_0 left promiscuous mode [ 661.078911][ T9838] bridge0: port 1(bridge_slave_0) entered disabled state [ 662.936379][ T9838] bond0: (slave bridge0): Releasing backup interface [ 663.722831][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 663.914395][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 664.185174][ T4316] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 664.226802][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 664.274349][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 664.318196][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 664.389959][ T4289] bridge0: port 1(bridge_slave_0) entered blocking state [ 664.397079][ T4289] bridge0: port 1(bridge_slave_0) entered forwarding state [ 664.503774][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 665.605663][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 665.649490][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 666.291380][ T4289] bridge0: port 2(bridge_slave_1) entered blocking state [ 666.298525][ T4289] bridge0: port 2(bridge_slave_1) entered forwarding state [ 666.471034][ T9884] loop2: detected capacity change from 0 to 32768 [ 666.674289][ T9884] ocfs2: Mounting device (7,2) on (node local, slot 0) with ordered data mode. [ 666.698358][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 668.827712][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 668.876793][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 668.966172][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 669.030457][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 669.065463][ T9884] syz.2.1545 (9884) used greatest stack depth: 18208 bytes left [ 669.190185][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 671.061232][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 671.582210][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 671.869949][ T4195] ocfs2: Unmounting device (7,2) on (node local) [ 671.878608][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 671.909186][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 671.963354][ T4289] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 672.093865][ T9639] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 672.861390][ T9924] FS-Cache: Duplicate cookie detected [ 672.867004][ T9924] FS-Cache: O-cookie c=0000000a [p=00000002 fl=222 nc=0 na=1] [ 672.874511][ T9924] FS-Cache: O-cookie d=ffffffff8a416220{NFS.server} n=ffff88805814d000 [ 672.882857][ T9924] FS-Cache: O-key=[16] '0400000000000000020008017f000001' [ 672.890105][ T9924] FS-Cache: N-cookie c=0000000b [p=00000002 fl=2 nc=0 na=1] [ 672.897419][ T9924] FS-Cache: N-cookie d=ffffffff8a416220{NFS.server} n=ffff88801fe2b000 [ 672.905649][ T9924] FS-Cache: N-key=[16] '0400000000000000020008017f000001' [ 673.261994][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 673.300934][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 673.483397][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 673.751118][ T9943] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1555'. [ 674.537282][ T9957] xt_policy: output policy not valid in PREROUTING and INPUT [ 675.238488][ T9969] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (4) [ 675.841896][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 676.534104][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 676.799380][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 677.094644][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 677.157023][ T9639] device veth0_vlan entered promiscuous mode [ 677.196277][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 677.236925][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 678.417685][ T9639] device veth1_vlan entered promiscuous mode [ 679.118568][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 679.127061][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 679.165193][T10000] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1567'. [ 679.233408][ T9639] device veth0_macvtap entered promiscuous mode [ 679.281133][ T9992] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1566'. [ 679.332775][ T9639] device veth1_macvtap entered promiscuous mode [ 679.420338][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 679.498467][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.729563][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 680.773050][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 680.826745][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 681.237547][T10005] fuse: Bad value for 'fd' [ 681.284426][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 681.467146][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 681.529819][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 681.560101][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 681.702755][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 681.905619][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.171891][T10019] ubi0: attaching mtd0 [ 682.176773][T10019] ubi0: scanning is finished [ 682.181379][T10019] ubi0 error: ubi_read_volume_table: the layout volume was not found [ 682.210901][T10019] ubi0 error: ubi_attach_mtd_dev: failed to attach mtd0, error -22 [ 682.257187][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.322131][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 682.346093][T10026] tmpfs: Unknown parameter 'nr_bl' [ 682.407480][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 682.923329][ T9639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 683.867239][ T9639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 684.670346][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 684.740208][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 684.789502][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 684.854429][ T9639] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.900447][ T9639] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 684.932062][T10044] loop2: detected capacity change from 0 to 256 [ 684.951504][ T9639] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.002024][T10046] loop3: detected capacity change from 0 to 128 [ 685.020721][ T9639] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 685.200305][T10046] FAT-fs (loop3): Unrecognized mount option "shor name=lower" or missing value [ 686.213577][T10044] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0x987a2e96, utbl_chksum : 0xe619d30d) [ 687.202568][T10046] loop3: detected capacity change from 0 to 2048 [ 687.215456][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.533088][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 687.580164][T10046] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 687.613195][ T4283] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 687.705461][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 687.894224][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 688.300458][ T4244] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 690.552133][T10096] tipc: Enabling of bearer rejected, failed to enable media [ 695.624033][T10121] vhci_hcd: Failed attach request for unsupported USB speed: super-speed-plus [ 697.154256][T10132] xt_hashlimit: size too large, truncated to 1048576 [ 697.160960][T10132] xt_hashlimit: max too large, truncated to 1048576 [ 700.304280][T10160] tipc: Enabling of bearer rejected, failed to enable media [ 701.011332][T10149] loop5: detected capacity change from 0 to 16 [ 701.053916][T10149] erofs: (device loop5): mounted with root inode @ nid 36. [ 701.796479][T10169] loop5: detected capacity change from 0 to 40427 [ 701.835748][T10169] F2FS-fs (loop5): Fix alignment : done, start(4096) end(16896) block(12288) [ 701.847874][T10169] F2FS-fs (loop5): invalid crc value [ 701.853494][T10169] F2FS-fs (loop5): invalid crc value [ 701.858856][T10169] F2FS-fs (loop5): Failed to get valid F2FS checkpoint [ 703.870088][T10191] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1609'. [ 704.396548][T10204] autofs4:pid:10204:autofs_fill_super: called with bogus options [ 705.898216][T10217] loop3: detected capacity change from 0 to 32768 [ 707.211033][T10217] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 709.303218][ T4191] ocfs2: Unmounting device (7,3) on (node local) [ 709.859696][T10236] loop3: detected capacity change from 0 to 128 [ 710.394585][T10240] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10240] [ 714.500716][T10259] fuse: Bad value for 'fd' [ 714.525907][T10265] tipc: Enabling of bearer rejected, failed to enable media [ 718.655720][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 718.662036][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 720.870655][T10319] xt_hashlimit: size too large, truncated to 1048576 [ 720.918613][T10319] xt_hashlimit: max too large, truncated to 1048576 [ 721.367213][T10324] overlayfs: failed to clone upperpath [ 723.066340][T10336] tipc: Enabling of bearer rejected, failed to enable media [ 723.689615][T10341] xt_hashlimit: size too large, truncated to 1048576 [ 723.696499][T10341] xt_hashlimit: max too large, truncated to 1048576 [ 723.863792][T10355] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1640'. [ 723.891295][T10348] kernel profiling enabled (shift: 5) [ 728.380645][T10388] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 728.558320][T10395] tipc: Enabling of bearer rejected, failed to enable media [ 728.847814][T10404] device syzkaller0 entered promiscuous mode [ 731.541448][T10418] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 731.919349][T10432] tipc: Enabling of bearer rejected, failed to enable media [ 732.381141][T10436] xt_hashlimit: size too large, truncated to 1048576 [ 732.387875][T10436] xt_hashlimit: max too large, truncated to 1048576 [ 736.468007][T10467] loop5: detected capacity change from 0 to 164 [ 736.479560][T10460] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1673'. [ 738.277456][T10477] mip6: mip6_destopt_init_state: state's mode is not 2: 0 [ 738.285663][T10471] rock: directory entry would overflow storage [ 738.292360][T10471] rock: sig=0x4f50, size=4, remaining=3 [ 738.297916][T10471] iso9660: Corrupted directory entry in block 5 of inode 1792 [ 738.700354][T10472] ip_tables: iptables: counters copy to user failed while replacing table [ 739.231561][T10481] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4195] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10481] [ 739.629916][T10490] tipc: Enabling of bearer rejected, failed to enable media [ 740.103967][T10499] loop5: detected capacity change from 0 to 1024 [ 740.776060][T10499] EXT4-fs (loop5): mounted filesystem without journal. Opts: nodelalloc,bsddf,journal_ioprio=0x0000000000000001,barrier,block_validity,nodioread_nolock,grpid,resuid=0x0000000000000000,errors=remount-ro,. Quota mode: none. [ 741.421409][T10499] ext4 filesystem being mounted at /16/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 743.955999][T10522] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 744.211703][T10534] loop3: detected capacity change from 0 to 128 [ 745.528592][T10543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1689'. [ 745.564327][T10508] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm ext4lazyinit: bg 0: block 112: padding at end of block bitmap is not set [ 745.709680][T10508] EXT4-fs (loop5): Remounting filesystem read-only [ 747.872848][ T4193] usb 4-1: new full-speed USB device number 4 using dummy_hcd [ 749.737027][ T4193] usb 4-1: device descriptor read/all, error -71 [ 758.259020][T10628] loop3: detected capacity change from 0 to 1024 [ 759.364743][T10628] EXT4-fs (loop3): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 760.045931][T10644] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1706'. [ 761.798224][T10649] loop3: detected capacity change from 0 to 256 [ 761.848356][T10649] FAT-fs (loop3): Directory bread(block 1285) failed [ 761.855168][T10649] FAT-fs (loop3): Directory bread(block 1286) failed [ 761.862099][T10649] FAT-fs (loop3): Directory bread(block 1287) failed [ 761.868942][T10649] FAT-fs (loop3): Directory bread(block 1288) failed [ 762.304071][T10651] FAT-fs (loop3): Directory bread(block 1285) failed [ 762.311427][T10651] FAT-fs (loop3): Directory bread(block 1286) failed [ 762.318126][T10651] FAT-fs (loop3): Directory bread(block 1287) failed [ 762.324884][T10651] FAT-fs (loop3): Directory bread(block 1288) failed [ 762.331698][T10651] FAT-fs (loop3): FAT read failed (blocknr 1281) [ 762.339517][T10651] FAT-fs (loop3): Directory bread(block 1285) failed [ 763.337020][T10669] overlayfs: failed to clone lowerpath [ 763.612321][T10675] loop3: detected capacity change from 0 to 512 [ 763.726301][T10675] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 763.796543][T10675] ext4 filesystem being mounted at /327/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 766.662720][T10705] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10705] [ 768.530455][T10722] loop5: detected capacity change from 0 to 64 [ 768.677953][T10715] loop3: detected capacity change from 0 to 4096 [ 770.660545][ T4235] Bluetooth: hci5: command 0x0406 tx timeout [ 770.683727][T10715] NILFS (loop3): The specified checkpoint is not a snapshot (checkpoint number=1) [ 777.289797][T10770] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10770] [ 779.398385][T10787] loop3: detected capacity change from 0 to 64 [ 784.721734][T10809] fuse: Bad value for 'fd' [ 785.026305][T10811] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1745'. [ 785.101057][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 785.108665][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 785.738612][T10818] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1746'. [ 785.979482][T10825] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10825] [ 786.008799][T10826] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1749'. [ 788.105897][T10848] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1762'. [ 794.231552][T10890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.239054][T10890] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 794.289347][T10890] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 794.495132][T10895] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9639] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10895] [ 796.704967][T10911] loop5: detected capacity change from 0 to 1024 [ 796.905273][T10835] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 797.221185][T10911] EXT4-fs (loop5): mounted filesystem without journal. Opts: resgid=0x000000000000ee00,bsddf,grpquota,nojournal_checksum,debug_want_extra_isize=0x0000000000000080,block_validity,nogrpid,noauto_da_alloc,stripe=0x0000000000000002,,errors=continue. Quota mode: writeback. [ 797.735918][T10921] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1772'. [ 799.391493][T10920] tipc: Cannot configure node identity twice [ 799.399241][T10835] usb 4-1: device descriptor read/all, error -71 [ 800.663826][T10936] tipc: Started in network mode [ 800.668742][T10936] tipc: Node identity 4, cluster identity 4711 [ 800.674933][T10936] tipc: Node number set to 4 [ 801.411009][T10947] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1783'. [ 805.421236][T10834] usb 6-1: new full-speed USB device number 2 using dummy_hcd [ 806.052190][T10978] tipc: Enabled bearer , priority 0 [ 807.032042][T10989] bridge0: port 4(syz_tun) entered blocking state [ 807.040904][T10989] bridge0: port 4(syz_tun) entered disabled state [ 807.048117][T10989] device syz_tun entered promiscuous mode [ 807.056048][T10989] bridge0: port 5(ip6gretap0) entered blocking state [ 807.062842][T10989] bridge0: port 5(ip6gretap0) entered disabled state [ 807.070254][T10989] device ip6gretap0 entered promiscuous mode [ 807.217633][T10991] ip_tables: iptables: counters copy to user failed while replacing table [ 807.475510][T10995] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[10995] [ 807.565544][T10993] ip_tables: iptables: counters copy to user failed while replacing table [ 809.121934][T11012] 9pnet: Insufficient options for proto=fd [ 809.410778][T11023] device syzkaller0 entered promiscuous mode [ 809.463140][T11023] tipc: Enabled bearer , priority 0 [ 810.186179][T11028] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1804'. [ 810.210104][T11033] tipc: Resetting bearer [ 810.357809][T11022] tipc: Resetting bearer [ 810.399749][T11022] tipc: Disabling bearer [ 812.024649][T11042] futex_wake_op: syz.0.1808 tries to shift op by 144; fix this program [ 812.204946][T11049] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[4191] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11049] [ 815.009303][T11070] Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 815.009303][T11070] [ 815.023443][T11070] CIFS: VFS: Use of the less secure dialect vers=1.0 is not recommended unless required for access to very old servers [ 815.036054][T11070] CIFS: Attempting to mount \\127.0.0.1\share [ 815.210840][T11072] loop3: detected capacity change from 0 to 2048 [ 816.252820][T11072] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 816.676987][T11074] loop5: detected capacity change from 0 to 16 [ 816.687513][T11070] CIFS: VFS: Error connecting to socket. Aborting operation. [ 816.695378][T11070] CIFS: VFS: cifs_mount failed w/return code = -4 [ 816.774500][T11074] erofs: (device loop5): mounted with root inode @ nid 36. [ 820.699814][T11099] syz.0.1822 uses obsolete (PF_INET,SOCK_PACKET) [ 820.773046][T11097] tipc: Enabled bearer , priority 0 [ 821.402892][T11111] ptrace attach of "ci2-linux-5-15-kasan/syz-executor exec"[9639] was attempted by "ci2-linux-5-15-kasan/syz-executor exec"[11111] [ 821.983557][T10832] tipc: Node number set to 377403295 [ 825.361591][T11129] loop3: detected capacity change from 0 to 256 [ 826.081857][T11129] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x205ab87c, utbl_chksum : 0xe619d30d) [ 826.126903][ T26] audit: type=1800 audit(1790719959.028:32): pid=11129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1827" name="file1" dev="loop3" ino=1048654 res=0 errno=0 [ 829.953462][ T4198] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci5/hci5:200' [ 829.966241][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 829.973811][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 829.983878][ T4198] Workqueue: hci5 hci_rx_work [ 829.988594][ T4198] Call Trace: [ 829.991867][ T4198] [ 829.994795][ T4198] dump_stack_lvl+0x188/0x250 [ 829.999470][ T4198] ? show_regs_print_info+0x20/0x20 [ 830.004659][ T4198] ? load_image+0x410/0x410 [ 830.009174][ T4198] sysfs_create_dir_ns+0x26a/0x290 [ 830.014301][ T4198] ? sysfs_warn_dup+0xa0/0xa0 [ 830.018972][ T4198] ? ret_from_fork+0x1f/0x30 [ 830.023564][ T4198] ? do_raw_spin_unlock+0x11d/0x230 [ 830.028763][ T4198] kobject_add_internal+0x5ba/0xcd0 [ 830.033964][ T4198] kobject_add+0x160/0x230 [ 830.038382][ T4198] ? kobject_init+0x1c0/0x1c0 [ 830.043056][ T4198] ? __raw_spin_lock_init+0x41/0x100 [ 830.048335][ T4198] ? get_device_parent+0x121/0x3e0 [ 830.053444][ T4198] device_add+0x470/0x1050 [ 830.057860][ T4198] hci_conn_add_sysfs+0xd1/0x1e0 [ 830.062801][ T4198] hci_sync_conn_complete_evt+0x647/0x9d0 [ 830.068537][ T4198] ? __rwlock_init+0x140/0x140 [ 830.073299][ T4198] hci_event_packet+0x8cf/0x1310 [ 830.078245][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 830.083093][ T4198] ? rcu_lock_release+0x20/0x20 [ 830.087941][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 830.093145][ T4198] hci_rx_work+0x255/0xa10 [ 830.097565][ T4198] process_one_work+0x867/0xff0 [ 830.102421][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 830.108048][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 830.113335][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 830.118356][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 830.123903][ T4198] ? wq_worker_running+0x97/0x170 [ 830.128928][ T4198] worker_thread+0xad7/0x12a0 [ 830.133711][ T4198] kthread+0x42e/0x520 [ 830.137778][ T4198] ? rcu_lock_release+0x20/0x20 [ 830.142625][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 830.147230][ T4198] ret_from_fork+0x1f/0x30 [ 830.151655][ T4198] [ 830.217208][ T4198] kobject_add_internal failed for hci5:200 with -EEXIST, don't try to register things with the same name in the same directory. [ 830.230526][ T4198] Bluetooth: hci5: failed to register connection device [ 830.237675][ T4198] [ 830.240004][ T4198] ====================================================== [ 830.247006][ T4198] WARNING: possible circular locking dependency detected [ 830.254018][ T4198] syzkaller #0 Not tainted [ 830.258438][ T4198] ------------------------------------------------------ [ 830.265449][ T4198] kworker/u5:4/4198 is trying to acquire lock: [ 830.271604][ T4198] ffff888060deb120 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x70a/0xd00 [ 830.282304][ T4198] [ 830.282304][ T4198] but task is already holding lock: [ 830.289658][ T4198] ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 830.299912][ T4198] [ 830.299912][ T4198] which lock already depends on the new lock. [ 830.299912][ T4198] [ 830.310326][ T4198] [ 830.310326][ T4198] the existing dependency chain (in reverse order) is: [ 830.319332][ T4198] [ 830.319332][ T4198] -> #2 (hci_cb_list_lock){+.+.}-{3:3}: [ 830.327066][ T4198] __mutex_lock_common+0x1e5/0x2400 [ 830.332785][ T4198] mutex_lock_nested+0x17/0x20 [ 830.338061][ T4198] hci_remote_features_evt+0x5d9/0xa10 [ 830.344038][ T4198] hci_event_packet+0x600/0x1310 [ 830.349489][ T4198] hci_rx_work+0x255/0xa10 [ 830.354419][ T4198] process_one_work+0x867/0xff0 [ 830.359782][ T4198] worker_thread+0xad7/0x12a0 [ 830.364977][ T4198] kthread+0x42e/0x520 [ 830.369556][ T4198] ret_from_fork+0x1f/0x30 [ 830.374488][ T4198] [ 830.374488][ T4198] -> #1 (&hdev->lock){+.+.}-{3:3}: [ 830.381770][ T4198] __mutex_lock_common+0x1e5/0x2400 [ 830.387480][ T4198] mutex_lock_nested+0x17/0x20 [ 830.392778][ T4198] sco_sock_connect+0x189/0x940 [ 830.398140][ T4198] __sys_connect+0x3cb/0x450 [ 830.403303][ T4198] __x64_sys_connect+0x76/0x80 [ 830.408578][ T4198] do_syscall_64+0x4c/0xa0 [ 830.413505][ T4198] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 830.419910][ T4198] [ 830.419910][ T4198] -> #0 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}: [ 830.429015][ T4198] __lock_acquire+0x2c66/0x7b50 [ 830.434380][ T4198] lock_acquire+0x19e/0x400 [ 830.439486][ T4198] lock_sock_nested+0x44/0x100 [ 830.444776][ T4198] sco_connect_cfm+0x70a/0xd00 [ 830.450055][ T4198] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 830.456301][ T4198] hci_event_packet+0x8cf/0x1310 [ 830.461749][ T4198] hci_rx_work+0x255/0xa10 [ 830.466692][ T4198] process_one_work+0x867/0xff0 [ 830.472052][ T4198] worker_thread+0xad7/0x12a0 [ 830.477239][ T4198] kthread+0x42e/0x520 [ 830.481820][ T4198] ret_from_fork+0x1f/0x30 [ 830.486749][ T4198] [ 830.486749][ T4198] other info that might help us debug this: [ 830.486749][ T4198] [ 830.496965][ T4198] Chain exists of: [ 830.496965][ T4198] sk_lock-AF_BLUETOOTH-BTPROTO_SCO --> &hdev->lock --> hci_cb_list_lock [ 830.496965][ T4198] [ 830.511197][ T4198] Possible unsafe locking scenario: [ 830.511197][ T4198] [ 830.518641][ T4198] CPU0 CPU1 [ 830.523998][ T4198] ---- ---- [ 830.529350][ T4198] lock(hci_cb_list_lock); [ 830.533845][ T4198] lock(&hdev->lock); [ 830.540420][ T4198] lock(hci_cb_list_lock); [ 830.547426][ T4198] lock(sk_lock-AF_BLUETOOTH-BTPROTO_SCO); [ 830.553309][ T4198] [ 830.553309][ T4198] *** DEADLOCK *** [ 830.553309][ T4198] [ 830.561451][ T4198] 4 locks held by kworker/u5:4/4198: [ 830.566719][ T4198] #0: ffff88807ebd2138 ((wq_completion)hci5#2){+.+.}-{0:0}, at: process_one_work+0x75c/0xff0 [ 830.576970][ T4198] #1: ffffc90002fffd00 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x79e/0xff0 [ 830.588260][ T4198] #2: ffff8880738a8478 (&hdev->lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0xb8/0x9d0 [ 830.598422][ T4198] #3: ffffffff8d593e48 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_sync_conn_complete_evt+0x45e/0x9d0 [ 830.609110][ T4198] [ 830.609110][ T4198] stack backtrace: [ 830.614986][ T4198] CPU: 0 PID: 4198 Comm: kworker/u5:4 Not tainted syzkaller #0 [ 830.622525][ T4198] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 830.632578][ T4198] Workqueue: hci5 hci_rx_work [ 830.637257][ T4198] Call Trace: [ 830.640548][ T4198] [ 830.643477][ T4198] dump_stack_lvl+0x188/0x250 [ 830.648160][ T4198] ? load_image+0x410/0x410 [ 830.652655][ T4198] ? show_regs_print_info+0x20/0x20 [ 830.657851][ T4198] ? print_circular_bug+0x12b/0x1a0 [ 830.663053][ T4198] check_noncircular+0x296/0x330 [ 830.667988][ T4198] ? stack_trace_snprint+0xe0/0xe0 [ 830.673182][ T4198] ? add_chain_block+0x9b0/0x9b0 [ 830.678111][ T4198] ? lockdep_lock+0xf1/0x1f0 [ 830.682706][ T4198] ? mark_lock+0x94/0x320 [ 830.687023][ T4198] ? _find_first_zero_bit+0xd1/0xf0 [ 830.692224][ T4198] __lock_acquire+0x2c66/0x7b50 [ 830.697078][ T4198] ? verify_lock_unused+0x140/0x140 [ 830.702268][ T4198] ? verify_lock_unused+0x140/0x140 [ 830.707462][ T4198] ? hci_rx_work+0x255/0xa10 [ 830.712052][ T4198] ? process_one_work+0x867/0xff0 [ 830.717066][ T4198] ? worker_thread+0xad7/0x12a0 [ 830.721911][ T4198] ? kthread+0x42e/0x520 [ 830.726149][ T4198] ? ret_from_fork+0x1f/0x30 [ 830.730772][ T4198] lock_acquire+0x19e/0x400 [ 830.735277][ T4198] ? sco_connect_cfm+0x70a/0xd00 [ 830.740223][ T4198] ? sco_connect_cfm+0x6fa/0xd00 [ 830.745160][ T4198] ? read_lock_is_recursive+0x10/0x10 [ 830.750535][ T4198] ? __lock_acquire+0x7b50/0x7b50 [ 830.755554][ T4198] ? do_raw_spin_lock+0x128/0x2f0 [ 830.760581][ T4198] ? __rwlock_init+0x140/0x140 [ 830.765334][ T4198] lock_sock_nested+0x44/0x100 [ 830.770117][ T4198] ? sco_connect_cfm+0x70a/0xd00 [ 830.775050][ T4198] sco_connect_cfm+0x70a/0xd00 [ 830.779807][ T4198] ? sco_skb_put_cmsg+0xa0/0xa0 [ 830.784653][ T4198] ? sco_skb_put_cmsg+0xa0/0xa0 [ 830.789521][ T4198] hci_sync_conn_complete_evt+0x4be/0x9d0 [ 830.795237][ T4198] ? __rwlock_init+0x140/0x140 [ 830.799992][ T4198] hci_event_packet+0x8cf/0x1310 [ 830.804921][ T4198] ? _raw_spin_unlock+0x40/0x40 [ 830.809771][ T4198] ? rcu_lock_release+0x20/0x20 [ 830.814633][ T4198] ? hci_send_to_monitor+0x9c/0x4a0 [ 830.819848][ T4198] hci_rx_work+0x255/0xa10 [ 830.824282][ T4198] process_one_work+0x867/0xff0 [ 830.829143][ T4198] ? worker_detach_from_pool+0x240/0x240 [ 830.834776][ T4198] ? lockdep_hardirqs_off+0x70/0x100 [ 830.840061][ T4198] ? _raw_spin_lock_irq+0xb7/0xf0 [ 830.845079][ T4198] ? _raw_spin_lock_irqsave+0x100/0x100 [ 830.850616][ T4198] ? wq_worker_running+0x97/0x170 [ 830.855628][ T4198] worker_thread+0xad7/0x12a0 [ 830.860305][ T4198] kthread+0x42e/0x520 [ 830.864410][ T4198] ? rcu_lock_release+0x20/0x20 [ 830.869253][ T4198] ? kthread_blkcg+0xd0/0xd0 [ 830.873858][ T4198] ret_from_fork+0x1f/0x30 [ 830.878280][ T4198] [ 831.023368][T11172] tipc: Enabling of bearer rejected, failed to enable media [ 832.180537][T10832] Bluetooth: hci5: command 0x0409 tx timeout [ 834.434109][T10832] Bluetooth: hci5: command 0x0406 tx timeout