last executing test programs: 18m45.094472252s ago: executing program 32 (id=365): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @loopback}, 0x57) recvmmsg(r0, &(0x7f0000000280), 0x0, 0x2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001380)={&(0x7f00000013c0)=ANY=[], 0xc4}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 18m43.959296606s ago: executing program 33 (id=381): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mount$9p_virtio(&(0x7f00000001c0), &(0x7f0000000480)='./file0\x00', &(0x7f0000000240), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="56c78e3c733d76697274696f2c6e6f757876656e642c6163638173733d616e792c63616368653d66736361636865"]) chdir(&(0x7f0000000500)='./file0\x00') unlink(&(0x7f0000000100)='./file0\x00') mount(0x0, &(0x7f0000000040)='.\x00', &(0x7f0000000080)='nfs\x00', 0x0, &(0x7f0000000140)='\x06\x00\x00\x00\x04\xb0\xfe\x98\a\x84\x9a!s\x91]\xab\xc9\xa2IV\xb6-\xd9z\x81\x91\x8aP}I\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb:\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xe7\xc1\xab\x16\x02\x000xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000200)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000280), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8b26, &(0x7f00000004c0)={'wlan1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) 13m15.405201749s ago: executing program 42 (id=2951): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000010000000000000003000000850000004100000018000000010000000000000004000000"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000680)="548852ac5b4eba7aeaccd2c62b2b", 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9, 0x8}, 0x50) 12m29.146974029s ago: executing program 9 (id=3253): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./security\x00', 0x1ff) openat(0xffffffffffffff9c, &(0x7f0000000640)='./security/tomoyo/domain_policy\x00', 0x0, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000880)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000bc0)) 12m28.795688145s ago: executing program 9 (id=3258): setns(0xc9, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x169802, 0x0) r1 = dup(r0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$BLKRRPART(r1, 0x125f, 0x0) 12m28.452798549s ago: executing program 9 (id=3260): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./sys\x00', 0x1ff) mount(0x0, 0x0, &(0x7f00000000c0)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000002c0)='./sys/block/md0/md/level\x00', 0x2, 0x0) write(r0, &(0x7f0000000300)='rai', 0x3) r1 = openat(0xffffffffffffff9c, &(0x7f00000004c0)='./sys/block/md0/md/array_state\x00', 0x2, 0x0) write(r1, &(0x7f0000000500)='active', 0x6) 12m27.705120341s ago: executing program 43 (id=3263): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f0000000100)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000140)=0x1, 0x4) connect$inet(r0, &(0x7f0000000200)={0x2, 0x4e24, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000240)=0xffffffffffffffff, 0x4) sendmmsg(r0, &(0x7f000000b540)=[{{0x0, 0x0, &(0x7f0000004640)=[{&(0x7f0000002100)="14c5d206a4323d12c3f1b1be7e", 0xd}, {&(0x7f0000004480)="4ec46b64a5cc84370c6724fa63e51b4d93ad2ffb2590ffac5e79f423de8a8f6132b0c7670e501e12904a7c37d28bd3fbe325378fd8b1844ea5c63acb124588fdd0f99aac0fcd898e2600474e0f9248bff6f7b8f6ba3953c6dee5c440725bb7bf3821f3b061ef211d05dc17282cdcf6ebecada12ce1dfaefb29", 0x79}, {&(0x7f0000004500)="4d6b14b4b8cfa88c6f31010f8dd77608a1c0472dc5438fe25e577d48b028492e30492238513fbe111b8a0dad28ef13cec17a5b5e9dc66014ad6dd44ac5eef62f13044ebf26a4bbb5c1a0c283cba30cfcc2", 0x51}, {&(0x7f0000004580)="e047d2467dcf3ef7853a2dd162a230c4e8e877cfb1f46842a321f76ea396ae1f02350aaf0abbadb2861120ad4723521b5567b9290b69d1fe2d00149af4435e4cfa1b2a5a814c48461ae07c72088bdc09587b596976148c66b5b65af2eeff0bf2e5248fddaeee931d6dc7f9eb3da44ccdbb2666f1fe31223c45ae98491bc6dc5acf79f13489b23bd7ee47ef06de0787dde7ca7f624b34f24030ae0e11e1b1220f43483207557a813274f062b063753e296cb91bf6e404386bece6c5", 0xbb}], 0x4}}, {{0x0, 0x0, &(0x7f0000004c00)=[{&(0x7f0000004a80)="c61c91b3217c3862ce7369c7a9f280d55ce73ceaf3092fccf75bb1d2f8ee729e5776431ae9e969e9a8ccc58f2a451ae70b21ad5416c2f7e94b1e417b9e24b8d990ee4b450ad566e688ed7ec1d0d107866d1d5aa819e124b80ec9d15088b90ca6b915e59f7b9cb469da89e24e28131efd769580b71677978f81503d9350f05437056d0b1e2d0a", 0x86}], 0x1}}, {{0x0, 0x0, &(0x7f0000005040)=[{&(0x7f0000004cc0)="c582862bb4ae7d4550ad6e6707d2a87b8b41f6e75458fa2d7db647c07bf7b82243f0d0ce9c04f9b6caa4862102b8a4952d149cebbd5c0e56118e671ea8f1903e3967707ce2d96f7572ba96441a06a71d41ba0c6d115e5d54323367bf84f74a00a038fff3", 0x64}, {0x0}, {&(0x7f0000004e40)="3fa35a4786bcfb8ccbb8b7af978219173bf413f70da1b53702d81793c546803dd8ea36cf72f78c003911e39ef117f078976866906ccee9518b2b344503c3905e24593fc37611d79aa157c1aef291d469b20b208d0d1bce372b09fe4e388e8ccdecb0ba8edd2feac4c28c38471e64fca89d5e90b5758190a567df7d4b808afe964e1a90f53440d8e127ff577d9f190d03718e33d5b9b2aaa385930ea51666a30bd7d23834d87fa0d38edaf39adbd0adb2caafbaf2adbfaa5033", 0xb9}], 0x3}}], 0x3, 0x1) sendmmsg(r0, &(0x7f00000002c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000380)="ab", 0x1}], 0x1, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], 0x10e8}}], 0x1, 0x4000045) 12m27.603622669s ago: executing program 9 (id=3268): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mount$bind(&(0x7f00000007c0)='.\x00', &(0x7f0000000800)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f0000000840)='./file0/file0\x00', &(0x7f0000000880)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) move_mount(0xffffffffffffff9c, &(0x7f00000008c0)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000900)='./file0/file0\x00', 0x200) 12m27.337700354s ago: executing program 9 (id=3271): madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 12m26.501079216s ago: executing program 9 (id=3278): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x1, 0x240448d0) 12m25.460190649s ago: executing program 44 (id=3278): r0 = socket$igmp(0x2, 0x3, 0x2) sendmmsg$inet(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='(\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a'], 0x28}}], 0x1, 0x240448d0) 4m6.383247741s ago: executing program 45 (id=7719): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xb}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) 2m44.107432444s ago: executing program 7 (id=8264): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x1123102, 0x0) r1 = syz_ublk_setup_io_uring(0x1d, &(0x7f0000000040)={0x0, 0x30b5, 0x0, 0x2, 0x158}, &(0x7f0000000100)=0x0, &(0x7f0000000280)=0x0, &(0x7f0000000140)=0x0) syz_ublk_add_dev(r1, r2, r3, r4, &(0x7f0000000200)={0x2e, 0x14, 0x0, 0xffffffffffffffff, 0xc0207504, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, '\x00', {0xffffffff, 0xffff, 0x40, &(0x7f00000004c0)=@any_dev={0x3, 0xe26, 0x0, 0x0, 0x1000, 0x10000, 0xffffffffffffffff, 0x0, 0x4d}}}, &(0x7f0000000480)=0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = dup(r6) syz_ublk_setup_queues(r7, r5, &(0x7f0000000180)={0x0, 0x1, 0x1f00, 0x1, 0x255}, &(0x7f0000000800)=[{0x0, 0x0, 0xffffffffffffffff, {0x0, 0x6474, 0x200, 0x2, 0x15e}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xffffed7c, 0x400, 0x10000000, 0x146}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0xf90f, 0x200, 0x3}}, {0x0, 0x0, 0xffffffffffffffff, {0x0, 0x0, 0x2000, 0x2, 0x1e9}}], 0x1, &(0x7f0000000340)={0x2e, 0x2, 0x0, r7, 0xc0107520, 0x0, 0x0, 0x700, 0x0, {}, 0x1f, 0x0, '\x00', {0x4, 0x8002, 0x0, 0x0}}, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, &(0x7f0000000340)={{0x2, 0x3, 0xf3b, 0x2, 0x13fffffc}}) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r9, &(0x7f0000000040)=ANY=[], 0xffffff6a) splice(r8, 0x0, r0, 0x0, 0x40010003, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000000)=0x1b) 2m43.049450974s ago: executing program 7 (id=8277): r0 = syz_open_dev$video(&(0x7f0000000140), 0x75, 0x0) ioctl$VIDIOC_ENUM_FRAMEINTERVALS(r0, 0xc034564b, &(0x7f0000000180)={0x0, 0x32315659, 0x280, 0x1e0, 0x2}) 2m42.773424185s ago: executing program 7 (id=8278): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c00028006001400000000"], 0x44}, 0x1, 0x0, 0x0, 0x4008010}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) 2m41.957035129s ago: executing program 7 (id=8282): openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x109081, 0x34) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x0, 0x800) fcntl$dupfd(r0, 0x406, r0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e22, 0x2, @mcast2, 0x49}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="8000e8beec9dbc13", 0x8}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r1], 0x30}, 0x40000) 2m41.572611648s ago: executing program 7 (id=8287): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000440)={0x1d, r1}, 0x10) sendmsg$can_raw(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=@can={{0x4, 0x0, 0x0, 0x1}, 0x3}, 0x10}, 0x1, 0x0, 0x0, 0x10}, 0x40040) 2m41.37713737s ago: executing program 7 (id=8291): r0 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='udp 2', 0x5) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000400)={'veth1_to_bridge\x00', @random="02000400ac14"}) 2m32.446152897s ago: executing program 46 (id=8242): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000000)='./nfsd\x00', &(0x7f0000000040)='nfsd\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./nfsd/threads\x00', 0x2, 0x0) write(r0, &(0x7f0000000140)='1', 0x1) 2m26.165540278s ago: executing program 47 (id=8291): r0 = socket$kcm(0x2, 0x3, 0x2) socket$inet6_sctp(0xa, 0x1, 0x84) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./nfsd\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./nfsd\x00', &(0x7f0000000080)='nfsd\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./nfsd/portlist\x00', 0x1, 0x0) write(r1, &(0x7f0000000100)='udp 2', 0x5) r2 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) clock_adjtime(0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) write(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8916, &(0x7f0000000400)={'veth1_to_bridge\x00', @random="02000400ac14"}) 2m7.201359105s ago: executing program 0 (id=8496): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_DREG={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 2m6.907115008s ago: executing program 0 (id=8499): socket$can_j1939(0x1d, 0x2, 0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008072, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) pipe(&(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$P9_RGETLOCK(r0, &(0x7f0000000300)=ANY=[], 0x200002e6) fcntl$setpipe(r0, 0x407, 0x7000000) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000008, 0x8031, 0xffffffffffffffff, 0x0) 2m4.636247187s ago: executing program 1 (id=8507): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 2m3.331692697s ago: executing program 1 (id=8510): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f00000001c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc000) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x7ffff004) 2m2.976556281s ago: executing program 0 (id=8512): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000080)=ANY=[], 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000580)={0x84, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$uac2(r0, 0x0, &(0x7f0000000700)={0x44, &(0x7f0000000300)={0x40, 0x31}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 2m2.946812001s ago: executing program 6 (id=8513): syz_mount_image$udf(&(0x7f0000000300), &(0x7f0000000380)='./file1\x00', 0x0, &(0x7f00000003c0)=ANY=[], 0x43, 0x495, &(0x7f0000000cc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000001200)='./file1\x00', 0x4100, 0x15) read$FUSE(r0, &(0x7f0000003280)={0x2020}, 0x2020) 2m2.311690107s ago: executing program 6 (id=8520): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_VIF(r0, 0x0, 0xcb, &(0x7f0000000880)={0x1, 0x4, 0x5, 0xf6, @vifc_lcl_ifindex, @loopback}, 0x10) 2m1.642244817s ago: executing program 6 (id=8524): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000400)='dctcp', 0x5) bind$inet6(r0, &(0x7f0000000440)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000480)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000008c0)="b20cae68", 0x4, 0x24000045, &(0x7f0000000500)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) sendto$inet6(r0, &(0x7f0000000640)='.', 0x1, 0x801, 0x0, 0x0) 2m1.240892757s ago: executing program 5 (id=8525): r0 = socket(0x1, 0x5, 0x0) r1 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000002600)={0xe000200c}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000002c80)={0x201d}) 2m1.128702014s ago: executing program 1 (id=8526): syz_clone3(&(0x7f0000000080)={0x102030000, 0x0, 0x0, 0x0, {0x2d}, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0x0], 0x1}, 0x58) r0 = memfd_create(&(0x7f0000000200)='/dev/sda1\x00', 0x1) r1 = syz_open_dev$sndctrl(&(0x7f0000000240), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r1, 0x40045532, &(0x7f0000000280)=0x7) syz_open_dev$sndpcmp(&(0x7f00000002c0), 0x0, 0x14b000) syz_open_dev$sndpcmp(&(0x7f0000000300), 0x0, 0x100) close_range(r0, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000d11d7110ca00000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) 2m0.941974803s ago: executing program 5 (id=8529): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) r0 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000480), 0xc0201, 0x0) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r0, 0x54a2) 2m0.865562087s ago: executing program 1 (id=8530): syz_usb_connect(0x2, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000b3838108480b0310547b01020301090212000100000000090401"], 0x0) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x78b5, 0x80) ioctl$I2C_RDWR(r0, 0x707, &(0x7f0000000080)={&(0x7f00000000c0)=[{0x96, 0x4601, 0x42, &(0x7f00000002c0)="21365217006a70cba8176eb127992f56f31114ffad30296a1891705a9b36b23590c15fa0abf9e75811839009152d5ed57e47ef6f8db423b038d83db5b5cf0b01a7c7"}], 0x1}) 2m0.754848815s ago: executing program 5 (id=8533): syz_mount_image$udf(&(0x7f0000000080), &(0x7f00000000c0)='./file0\x00', 0x4000, &(0x7f00000002c0)=ANY=[@ANYBLOB='mode=00000000000000000000177,partition=00000000000000000001,shortad,utf8,shortad,shortad,session=00000000000016777223,umask=00000000000000000000250,uid=ignore,shortad,dmode=00000000000000000170430,gid=ignore,adinicb,undelete,mode=00000000000000000002000,lastblock=00000000000000001024,partition=00000000000000000007,euid>', @ANYRESDEC=0x0, @ANYBLOB=',fsmagic=002,dont_hash,fowner>\x00'/45, @ANYRESDEC=0x0, @ANYBLOB="2c736d61636b66737472616e736d7574653d001c0b235ffdce278038a2ccf034e23ed0e04754a81c498e5bc58fdfc2e25738bee597df2c00"], 0x2, 0xc2d, &(0x7f0000001440)="$eJzs3U9sHNd9B/DfGy3FldxWTOwoThoXm7ZIZcVy9S+mYhXuqqbZBpBlIhRzC8AVSakLUyRBUo1spAXTSw89BCiKHnIi0BoFUjQwmiLokWldILn4UOTUE9HCRlD0wBYBcgoYzOxbcUmRNi2KEmV9Pjb13Z19b+a9eesZWdCbFwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAxB+8cun0mfSwWwEAPEhXRr96+qz7PwA8Vq76/38AAAAAAAAAAAAAADjoUhTxZKSYu7KWxqv3HfXL7b5bt8eGhrevdiRVNQ9V5cuf+pmz585/6YXBC9283J75gPr322fjtdGrlxovz96cm59aWJiabIzNtCdmJ6d2vYe91t/qZHUCGjdfvzV5/fpC4+zz5zZ9fHvg/f4njg9cHHz21DPdsmNDw8OjG0XqveVr99yQjp1meByOIk5Fiue+99PUiogi9n4u6g927Lc6UnXiZNWJsaHhqiPT7dbMYvnhSPdEFBGNnkrN7jnafiyi1vdA+7CzZsRS2fyywSfL7o3OteZb16anGiOt+cX2Ynt2ZiR1Wlv2pxFFXEgRyxGx2n/37vqiiFqk+M6xtXQtIg51z8MXq4nBO7ej2Mc+7kLZzkZfxHLxCIzZAdYfRbwaKX72zomYyNeZ6lrzhYhXy/xBxFtlvhSRyi/G+Yj3tvke8WiqRRF/WY7/xbU0WV0PuteVy19rfGXm+mxP2e515SPeH+66Ujyk+8ORLflgHPBrUz2KaFVX/LV077/ZAQAAAAAAAAAAAAAAAOB+OxJFfCZSvPIff1LNK45qXvqxi4N/OPCrvXPGn/6Q/ZRln4+IpWJ3c3IP54mBI2kkpYc8l/hxVo8i/jTP//vWw24MAAAAAAAAAAAAAAAAAADAY62In0SKF989kZajd03x9syNxtXWtenOqrDdtX+7a6avr6+vN1InmznHcy7lXM65knM1ZxS5fs5mzvGcSzmXc67kXM0Zh3L9nM2c4zmXci7nXMm5mjNquX7OZs7xnEs5l3Ou5FzNGQdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgI+TIor4RaT49jfWUqSIaEaMRydX+h926wAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAUn8q4vuRovFHzTvbahGRqn87TpS/nI/m4TI/Gc3BMl+K5qWcrSprzW89hPazN32piB9Hiv7623cGPI9/X+fdna9BvPXNjXefrXXyUPfDgff7nzh+7OLg8G88vdPrtF0DTl5uz9y63RgbGh4e7dlcy0f/ZM+2gXzc4v50nYhYeOPN11vT01Pz9/6i/Arsofoj9CLVHpeeelG9iNqBaMbD6TuPgfL+/16k+N13/7N7w+/c/+vxK513d+7w8fM/27j/v7h1R7u8/9e21sv3//Kevt39/8mebS/m34301SLqizfn+o5H1BfeePNU+2brxtSNqZnzp09/eXDwy+dO9x2OqF9vT0/1vLovpwsAAAAAAAAAAAAAAADgwUlF/H6kaP14LTUi4nY1X2vg4uCzp545FIeq+Vab5m2/Nnr1UuPl2Ztz81MLC1OTjbGZ9sTs5NRuD1evpnuNDQ3vS2c+1JF9bv+R+suzc2/Mt2/88eK2nx+tX7q2sDjfmtj+4zgSRUSzd8vJqsFjQ8NVo6fbrZmq6si2k+k/ur5UxH9FionzjfT5vC3P/986w3/T/P+lrTvap/n/n+jZVh4zpSJ+Hil+56+ejs9X7Twad52zXO7vIsXJC5/L5eJwWa7bhs5zBTozA8uy/xcp/ukXm8t250M+uVH2zK5P7COiHP9jkeL7f/Hd+M28bfPzH7Yf/6Nbd7RP4/9Uz7ajm55XsOeuk8f/VKR46cm347fytg96/kf32RsncuE7z+fYp/H/VM+2gXzc374/XQcAAAAAAAAAAHik9aUi/j5S/HC4ll7I23bz9/8mt+5on/7+16d7tk3en/WKPvTFnk8qAAAAABwQfamIn0SKG4tv35lDvXn+d8/8z9/bmP85lLZ8Wv05369Vzw24n3/+12sgH3d8790GAAAAAAAAAAAAAAAAAACAAyWlIl7I66mPV/P5J3dcT30lUrzyP8/lcul4Wa67DvxA9Wv9yuzMqUvT07MTrcXWtempxuhca2KqrPtUpFj728/lukW1vnp3vfnOGu8ba7HPR4rhf+iW7azF3l2b/KmNsmfKsp+IFP/9j5vLdtex/tRG2bNl2b+JFF//l+3LHt8oe64s+91I8aOvN7plj5Zlu89H/fRG2ecnZot9GBUAAAAAAAAAAAAAAAAAAAAeN32piD+PFP97c/nOXP68/n9fz9vKW9/sWe9/i9vVOv8D1fr/O72+l/X/q+cKLO10VAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+HhKUcSbkWLuylpa6S/fd9Qvt2du3R4bGt6+2pFU1TxUlS9/6mfOnjv/pRcGL3Tzg+vfb5+J10avXmq8PHtzbn5qYWFqsjE2056YnZza9R72Wn+rk9UJaNx8/dbk9esLjbPPn9v08e2B9/ufOD5wcfDZU890y44NDQ+P9pSp9d3z0e+Sdth+OIr460jx3Pd+mn7YH1HE3s/Fh3x39tuRqhMnq06MDQ1XHZlut2YWyw9HuieiiGj0VGp2z9EDGIs9aUYslc0vG3yy7N7oXGu+dW16qjHSml9sL7ZnZ0ZSp7VlfxpRxIUUsRwRq/13764ving9Unzn2Fr61/6IQ93z8MUro189fXbndhT72MddKNvZ6ItYLh6BMTvA+qOIf44UP3vnRPxbf0QtOj/xhYhXy/xBxFvRGe9UfjHOR7y3zfeIR1Mtivj/cvwvrqV3+svrQfe6cvlrja/MXJ/tKdu9rjzy94cH6YBfm+pRxI+qK/5a+nf/XQMAAAAAAAAAAAAAAAAcIEX8eqR48d0TqZoffGdOcXvmRuNq69p0Z1pfd+5fd870+vr6eiN1splzPOdSzuWcKzlXc0aR6+dslllfXx/P75dyLudcybmaMw7l+jmbOcdzLuVczrmSczVn1HL9nM2c4zmXci7nXMm5mjMOyNw9AAAAAAAAAAAAAAAAAADg46Wo/knx7W+spfX+zvrS49HJFeuBfuz9MgAA//8hX/ir") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000002080)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000020c0), 0x208e24b) r1 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETMODE(r1, 0x5601, &(0x7f00000001c0)) syz_open_dev$sndctrl(&(0x7f0000000680), 0x0, 0x48082) mount(0x0, &(0x7f0000003a00)='./debug\x00', &(0x7f0000003a40)='debugfs\x00', 0x220000, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000003a80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000003ac0)={'veth1_to_hsr\x00'}) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x44) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000003c00)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000003c40)={0x0, 0x0, &(0x7f0000003c80)={&(0x7f0000003cc0)=@newqdisc={0x45c, 0x24, 0x4ee4e6a52ff56541, 0x70bd27, 0x4000000, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x430, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x0, 0x0, 0x0, 0x17, 0x6}, {0xff, 0x2}, 0x0, 0x1}}, @TCA_TBF_RTAB={0x404, 0x2, [0x1, 0x0, 0x1ff, 0x0, 0xfffffc80, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x3f, 0x0, 0x0, 0x0, 0xffffefff, 0x2, 0xc00, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xfffffffd, 0xf, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x2, 0x0, 0x0, 0x7, 0x2, 0x0, 0x0, 0x0, 0x2, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x0, 0xb97, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x5e, 0xfffffffc, 0x8, 0x0, 0xfffffffd, 0x400000, 0x3, 0xfffffff0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x9, 0x0, 0x10000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0xb486, 0x8000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20, 0x0, 0x0, 0x200000, 0x0, 0x3, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x0, 0x7, 0x7fffffff, 0x0, 0xffffffff, 0x200, 0x0, 0x0, 0xb3c, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x820000, 0x0, 0x0, 0x0, 0x0, 0x6c4e, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf20, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x5, 0x2000, 0x80000000, 0x0, 0x0, 0x0, 0x2, 0xfffffffd, 0x0, 0x7, 0x400, 0x0, 0x0, 0xd79, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x1, 0x0, 0x100, 0x0, 0x4, 0xfffffffd, 0x0, 0x10, 0x0, 0xfffffffe, 0x0, 0x4000000, 0x1, 0x0, 0x0, 0x8, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xfffffffd]}]}}]}, 0x45c}, 0x1, 0x0, 0x0, 0x4814}, 0x0) write$P9_RSTATFS(0xffffffffffffffff, 0x0, 0x0) lseek(r0, 0x4, 0x4) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./bus\x00', 0x8800, &(0x7f0000000280)={[{@errors_remount}, {@usrquota}, {@minixdf}, {@nombcache}]}, 0x1, 0x51a, &(0x7f0000000f00)="$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") mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_GET_INTERFACE(0xffffffffffffffff, 0x0, 0x20008090) 2m0.463781478s ago: executing program 6 (id=8535): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x0, &(0x7f0000000440)='gid=1\x00nk]e@\xeec\x10\xc9g\x15H~\xddb\xdc\xb2\b\xfc\xf8\x01KV\xcbQ \xb5\x8c\xd9A\x1c\x1c`\xd4\xf7x\xc6\xad\xa7\xcc\xd4\xba\x1a\'fx&G\xd6$D!,\xa9\xb9\xd7\xebl>ua\x9d\x83Z\xaa\x12)]\xff\xc2\xec8$\x12v\x1bOY\fjM>\x81)&VG\x83.\x98\x86QM\xf0\xc5\nv\xc2\xb4\xa0\\z\xc3\x86g\xe8\xceN\v\x8f\x81\xe8z\xf8pJ\x7fM7\xa1\x7f\xf0\x9f\x15\xbdfz\xe5\xb4\xac\xf1\xb5\xbf\x06\xa88;PYz%U\x86\xb1t@\xbc$X\xa9\xaeL\xf2\x94\xd3\xeftb\xfe\xa9\a\x9dl\xff{kT\xab\xe2\xf2U\xc3\xaf8\x9d\xe3\xa7\xe3\x92X\xa2`\x96\x8ex\x85[\xe0\x7fa\x99F\xae\a\x913\xe9\x99eCA]B\x92\x93Qr\xf1U\x93\x89q!]\x87\xbd_(g\xc3\x14\xfc3S \xea\x90\xde\xf3\x11\xe3\xb9P7o-p\xb4\x92\xf2\xf0\x1a\x9a\xb0~\x06\xcb\xfc\x11\xab<7x\x94\x14\x8f\x8c\xfb\x05F\xf6\x86..\xc3\xeb\xd0-\x8e\xa8\xd5\x7f\xde\xdf\v\x0f\xc1\xc8K]\x90\x82\x167qD\xae\x9714\xd5\x1b\xa2v-\xae\xac') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}) socket(0xa, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 1m59.985790637s ago: executing program 5 (id=8538): r0 = mmap$IORING_OFF_SQ_RING(0x110c230000, 0x3, 0x1, 0x401d031, 0xffffffffffffffff, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file1\x00', 0x1000040, &(0x7f00000000c0)=ANY=[@ANYRES8=r0, @ANYBLOB="f206d69b9436474a01529af29dfee9a4061f0d820c84d52ea67a515c77464d78bb3744375520e70264167ef5f4ff7a476378e045f3d362341ff08d27fb8802f24947e028e4e6153bd565ee372bca9e3a8921590105152f519a910f9e0dc53a7cd6bf8c27ca5797f8034d66ba1cb75fb3805a8ddd06a4387b0d95ad568340139009ef9fac4179a9947637aedbbefd86d13f33b12f7f52eb03e70c358f3ffe3a20216cc011f55c7afa7b30bb6ff312e9d92d10f4fe8661", @ANYRESDEC=r0], 0x1, 0x3a2, &(0x7f00000001c0)="$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") r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000580)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x19}}, 0x10) connect$inet(r1, &(0x7f00000005c0)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000008c0)=@raw={'raw\x00', 0x9, 0x3, 0x1d0, 0x0, 0xffffffff, 0xffffffff, 0x98, 0xffffffff, 0x0, 0xffffffff, 0xffffffff, 0x138, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffe}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30, 'CONNMARK\x00', 0x1, {0x1, 0xffffffff, 0xffffffff}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x230) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0xc000) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000080004000406000008001b"], 0x30}}, 0x0) ftruncate(r3, 0x2000009) sendfile(r1, r3, 0x0, 0x7ffff004) 1m59.574231636s ago: executing program 6 (id=8539): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x100) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f00000000c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000280)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000340), 0x10106, 0x2, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000300)={{&(0x7f0000ffb000/0x3000)=nil, 0x3000}, 0x1}) r3 = userfaultfd(0x80801) ioctl$UFFDIO_API(r3, 0xc018aa3f, 0x0) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, 0x0) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000, 0x3, &(0x7f0000390000/0x1000)=nil) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000680)={0x1, &(0x7f00000006c0)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 1m59.295531086s ago: executing program 1 (id=8540): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipv6_delrule={0x30, 0x18, 0x1, 0x70bd2a, 0x25dfdbff, {0xa, 0x0, 0x0, 0x0, 0xff, 0x3, 0x0, 0x6}, [@FRA_DST={0x14, 0x7, @local}]}, 0x30}, 0x1, 0x0, 0x0, 0x4044004}, 0x20044884) 1m58.485717911s ago: executing program 6 (id=8542): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/4084, 0xff4}, {&(0x7f0000001540)=""/150, 0x9a}, {&(0x7f0000001600)=""/167, 0xa7}, {&(0x7f00000016c0)=""/256, 0x100}, {&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000001880)=""/180, 0xb4}], 0x8, 0x0, 0x5e}, 0x1}], 0x4, 0x0, 0x0) 1m58.479669067s ago: executing program 5 (id=8543): openat(0xffffffffffffff9c, &(0x7f0000000600)='./file0\x00', 0x40042, 0x1) openat$fuse(0xffffffffffffff9c, &(0x7f0000000640), 0x42, 0x0) openat(0xffffffffffffff9c, &(0x7f00000060c0)='./file0\x00', 0x109081, 0x34) r0 = socket$inet_tcp(0x2, 0x1, 0x0) fanotify_init(0x0, 0x800) fcntl$dupfd(r0, 0x406, r0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmsg$inet6(r1, &(0x7f0000000040)={&(0x7f0000000080)={0xa, 0x4e22, 0x2, @mcast2, 0x49}, 0x1c, &(0x7f00000000c0), 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000040000003a00000000000000100000000000000029000000", @ANYRES32=r1], 0x30}, 0x40000) 1m58.114632939s ago: executing program 5 (id=8544): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 1m58.084205088s ago: executing program 1 (id=8545): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000200)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000040924030201010003"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000003540)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000014c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) 1m57.813771053s ago: executing program 0 (id=8547): r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000240), 0x41, 0x0) r1 = dup(r0) write$binfmt_aout(r1, &(0x7f0000000480)={{0x108, 0x18, 0x10, 0x210, 0x99, 0x85, 0x31e, 0x3}, "", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x820) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000300)={0x0, 0x7ff, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r2 = syz_open_pts(r0, 0x80) dup3(r2, r0, 0x80000) ioctl$TCSETSW2(r0, 0x402c542c, &(0x7f0000000340)={0x80000000, 0x5, 0x5, 0xf7fffff7, 0x7, "73893a000062f0fd00000000000000710de6eb", 0x10000000, 0xda9a}) read(r0, 0x0, 0x0) 1m57.640264562s ago: executing program 0 (id=8548): msync(&(0x7f0000354000/0x2000)=nil, 0x2000, 0x6) 1m57.487685767s ago: executing program 0 (id=8549): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000002740)='0', 0x1) 1m9.577386009s ago: executing program 48 (id=8531): r0 = syz_usb_connect$midi(0x5, 0x31, &(0x7f0000000ec0)=ANY=[@ANYBLOB="12010003000000089c24069040000102030109021f0001011410450904000001f702000909050202"], &(0x7f0000000f00)={0x0, 0x0, 0x0, 0x0}) syz_usb_disconnect(r0) r1 = syz_usb_connect$cdc_ecm(0x3, 0x4d, &(0x7f0000000f40)=ANY=[], &(0x7f0000000f80)={0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r1, &(0x7f0000000fc0)={0x14, 0x0, &(0x7f0000001000)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000001040)={0x14, 0x0, &(0x7f0000001080)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) 1m8.141132358s ago: executing program 49 (id=8546): r0 = syz_open_dev$sndpcmp(&(0x7f0000001400), 0x0, 0x2) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS(r0, 0xc2604111, &(0x7f0000001440)={0x0, [[0xffffffff, 0xffffffff, 0x6, 0xffffffff, 0xffffffff, 0x719e, 0xffffffff, 0x3], [0x7, 0xffffffff, 0xffffffff, 0xfffbfeff, 0xffffffff, 0xffffffff, 0x2, 0xffffffff], [0xffdfffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff, 0xffffffff]], '\x00', [{0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x7, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x0, 0xffffffff}, {0x6, 0xffffffff}, {0x0, 0xffffffff}, {0x10000, 0xffffffff}]}) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) ioctl$SNDRV_PCM_IOCTL_WRITEI_FRAMES(r0, 0x40184150, &(0x7f00000016c0)={0x0, &(0x7f0000001700)='\x00', 0x10040}) syz_usb_connect(0x2, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000fe33ee40fd070400bfb9010203010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r0, 0xc0884113, &(0x7f0000001740)={0x1, 0x800, 0xe323, 0x5, 0x5, 0x9, 0x80000002, 0xffe, 0x2, 0x7, 0x7, 0x4}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT32(r0, 0xc06c4124, &(0x7f0000001800)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}) 1m7.895778934s ago: executing program 50 (id=8545): r0 = syz_usb_connect(0x3, 0xc7, &(0x7f0000000200)=ANY=[@ANYBLOB="12011002000000408680d20a0000010200010902b5000201008030080b00020e03000009040000010e0100000d2401000134000000000001011224020101020000000000000000030000040924030201010003"], &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0}) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) statx(0xffffffffffffff9c, &(0x7f0000003540)='./file0/file0/file0\x00', 0x2000, 0x7ff, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000003600)={0x2020}, 0x2020) syz_usb_control_io$rtl8150(r0, 0x0, 0x0) syz_usb_control_io$lan78xx(r0, 0x0, &(0x7f00000014c0)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) capset(0x0, 0x0) 1m7.65927307s ago: executing program 51 (id=8542): r0 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r0, &(0x7f0000000280)=[{{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, 0x0}, 0x8}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000400)=""/178, 0xb2}, {&(0x7f00000004c0)=""/70, 0x46}, {&(0x7f0000000540)=""/4084, 0xff4}, {&(0x7f0000001540)=""/150, 0x9a}, {&(0x7f0000001600)=""/167, 0xa7}, {&(0x7f00000016c0)=""/256, 0x100}, {&(0x7f00000017c0)=""/191, 0xbf}, {&(0x7f0000001880)=""/180, 0xb4}], 0x8, 0x0, 0x5e}, 0x1}], 0x4, 0x0, 0x0) 1m7.418523257s ago: executing program 52 (id=8549): mkdirat(0xffffffffffffff9c, &(0x7f00000001c0)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000440)='./sys\x00', &(0x7f0000000580)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000005c0)='./sys/devices/system/cpu/cpu1/hotplug/target\x00', 0x1, 0x114) write(r0, &(0x7f0000002740)='0', 0x1) 1m7.130743638s ago: executing program 53 (id=8544): syz_usb_connect_ath9k(0x3, 0x5a, &(0x7f0000000440)={{0x12, 0x1, 0x200, 0xff, 0xff, 0xff, 0x40, 0xcf3, 0x9271, 0x108, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x48}}]}}, 0x0) 10.384881483s ago: executing program 3 (id=8613): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) mount(0x0, &(0x7f00000003c0)='./file0\x00', &(0x7f0000000400)='debugfs\x00', 0x0, &(0x7f0000000440)='gid=1\x00nk]e@\xeec\x10\xc9g\x15H~\xddb\xdc\xb2\b\xfc\xf8\x01KV\xcbQ \xb5\x8c\xd9A\x1c\x1c`\xd4\xf7x\xc6\xad\xa7\xcc\xd4\xba\x1a\'fx&G\xd6$D!,\xa9\xb9\xd7\xebl>ua\x9d\x83Z\xaa\x12)]\xff\xc2\xec8$\x12v\x1bOY\fjM>\x81)&VG\x83.\x98\x86QM\xf0\xc5\nv\xc2\xb4\xa0\\z\xc3\x86g\xe8\xceN\v\x8f\x81\xe8z\xf8pJ\x7fM7\xa1\x7f\xf0\x9f\x15\xbdfz\xe5\xb4\xac\xf1\xb5\xbf\x06\xa88;PYz%U\x86\xb1t@\xbc$X\xa9\xaeL\xf2\x94\xd3\xeftb\xfe\xa9\a\x9dl\xff{kT\xab\xe2\xf2U\xc3\xaf8\x9d\xe3\xa7\xe3\x92X\xa2`\x96\x8ex\x85[\xe0\x7fa\x99F\xae\a\x913\xe9\x99eCA]B\x92\x93Qr\xf1U\x93\x89q!]\x87\xbd_(g\xc3\x14\xfc3S \xea\x90\xde\xf3\x11\xe3\xb9P7o-p\xb4\x92\xf2\xf0\x1a\x9a\xb0~\x06\xcb\xfc\x11\xab<7x\x94\x14\x8f\x8c\xfb\x05F\xf6\x86..\xc3\xeb\xd0-\x8e\xa8\xd5\x7f\xde\xdf\v\x0f\xc1\xc8K]\x90\x82\x167qD\xae\x9714\xd5\x1b\xa2v-\xae\xac') r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000080)='./binderfs/binder0\x00', 0x802, 0x0) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)}) socket(0xa, 0x5, 0x0) socket$inet6(0xa, 0x3, 0xff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_udp(0xa, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) socket$inet6_tcp(0xa, 0x1, 0x0) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$inet_tcp(0x2, 0x1, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup\x00', 0x40000, 0x6) userfaultfd(0x1) syz_80211_inject_frame(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_vhci(&(0x7f00000005c0)=ANY=[@ANYBLOB="04050400c900", @ANYRES16], 0x7) 9.053482844s ago: executing program 3 (id=8617): r0 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r0) ptrace$cont(0x21, r0, 0x5, 0x200000000004) 7.951192884s ago: executing program 3 (id=8621): bind$bt_sco(0xffffffffffffffff, &(0x7f0000005e80)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0x8) listen(0xffffffffffffffff, 0x0) write(0xca, &(0x7f0000005ec0)="0404e70000000004de92050000", 0xd) 7.292208744s ago: executing program 8 (id=8623): r0 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, 0xffffffffffffffff, 0x0) 7.291369062s ago: executing program 3 (id=8624): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000080)='cgroup.procs\x00', 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r2, r0, 0x16, 0x0, @void}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4040000) write$cgroup_pid(r1, &(0x7f00000001c0), 0x12) mkdirat(0xffffffffffffff9c, 0x0, 0x1ff) r3 = socket(0xa, 0x2400000001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000800)={0x0, {{0xa, 0x4e24, 0xffffffc0, @mcast2, 0x22}}}, 0x88) 7.07114874s ago: executing program 4 (id=8626): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./proc\x00', 0x10) mount(0x0, &(0x7f0000000280)='./proc\x00', &(0x7f00000002c0)='proc\x00', 0x4000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000003c0)='./proc/thread-self/fail-nth\x00', 0x2, 0x0) write(r0, &(0x7f0000000400)='100', 0x3) syz_clone(0x411, 0x0, 0x0, 0x0, 0x0, 0x0) 6.721886435s ago: executing program 3 (id=8627): syz_mount_image$exfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x800000, &(0x7f0000000380)=ANY=[], 0x1, 0x14fd, &(0x7f0000002a80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000200), 0x103e02) socket$netlink(0x10, 0x3, 0x6) open(0x0, 0x24842, 0x1a6) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x7, 0x0) r2 = syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000340)='./file0\x00', 0xc41a, &(0x7f0000000380)={[{@noblock_validity}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x9}}, {@stripe={'stripe', 0x3d, 0xee9}}, {@nodioread_nolock}, {@discard}, {@usrjquota, 0x2e}, {@nouid32}, {@noauto_da_alloc}, {@jqfmt_vfsv0}, {@barrier}, {@nogrpid}], [], 0x2c}, 0x1, 0x477, &(0x7f00000009c0)="$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") syz_mount_image$udf(&(0x7f0000000e40), &(0x7f0000000e80)='./file1\x00', 0x10048, &(0x7f0000000ec0)=ANY=[@ANYRES16=r2, @ANYRES32=r2], 0x67, 0xc54, &(0x7f0000000f00)="$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") prlimit64(0x0, 0xe, &(0x7f0000001b80)={0x40000000000082, 0x8000000000000001}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000001bc0)=0x7) r3 = getpid() sched_setscheduler(r3, 0x1, &(0x7f0000001c00)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001c40)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000001c80)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000001d00), 0x651, 0x0) recvmmsg(r4, &(0x7f0000001d40), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000001d80)=0x6) syz_mount_image$vfat(&(0x7f0000001dc0), &(0x7f0000001e00)='./bus\x00', 0x307b87f, 0x0, 0x3, 0x0, &(0x7f0000001e40)) rmdir(&(0x7f0000001e80)='./bus\x00') chdir(&(0x7f0000001ec0)='./file0\x00') openat(0xffffffffffffff9c, 0x0, 0x42, 0x10) r6 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000240)={{0x1}}) write$binfmt_elf32(r0, &(0x7f0000004000)=ANY=[], 0x1358) 6.624102414s ago: executing program 2 (id=8628): ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0xa0380, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x8000) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd26, 0xfffffff8, {0x0, 0x0, 0x0, r4, {0xffe0, 0xd}, {}, {0x8, 0x14}}}, 0x24}}, 0x40004) recvmmsg(r5, &(0x7f0000001080)=[{{0x0, 0x0, &(0x7f0000009f00)=[{&(0x7f0000000340)=""/162, 0xa2}, {&(0x7f0000000400)=""/70, 0x46}, {&(0x7f0000000480)=""/62, 0x3e}, {&(0x7f00000004c0)=""/194, 0xc2}, {&(0x7f00000005c0)=""/159, 0x9f}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000007ec0)=""/4103, 0x1007}, {&(0x7f0000001ac0)=""/4096, 0x1000}], 0x8}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000c40)=""/115, 0x73}, 0x32f2683b}], 0x2, 0x40010022, 0x0) 6.525260771s ago: executing program 8 (id=8629): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./trace\x00', 0x1ff) mount(0x0, &(0x7f0000000480)='./trace\x00', &(0x7f00000004c0)='tracefs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./trace/set_event\x00', 0x2, 0x0) write(r0, &(0x7f00000006c0)='!:*', 0x3) 5.019279038s ago: executing program 8 (id=8630): sendmsg$NL80211_CMD_GET_STATION(0xffffffffffffffff, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000a80)={0x1c, 0x0, 0x303, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x14014) r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8040000, 0x2000009, 0x401d031, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat(0xffffffffffffff9c, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000940)={&(0x7f0000000740)={0x14, r2, 0x200, 0x70bd2d, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000d0}, 0x44004) sched_setscheduler(r1, 0x2, &(0x7f00000000c0)=0x7) bpf$PROG_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000200), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000240), 0x10106, 0x2, 0x0) socket$inet6(0xa, 0x80002, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="ac00000000010505000000faff0000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff02000000000000009d0000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffac1e00010800074000000001180006801400040000000000000000000000000000000001"], 0xac}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="c00000000001050500000000000000000a0000003c0002802c00018014000300ff01000000000000000000000000000114000400ff0200000000000000000000000000010c00028005000100000000003c0001800c00028005000100000000002c00018014000300ff0200000000000000000000000000011400040000000000000000000000ffffffffffff08000740010000012c0006801400040000000000000000000000000000000001"], 0xc0}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="200000005e0001ae"], 0x20}], 0x1}, 0x0) 4.89205391s ago: executing program 4 (id=8631): socket$packet(0x11, 0x3, 0x300) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000001c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000200)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000240)={@val={0x0, 0x4}, @void, @eth={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}, @multicast, @void, {@ipv4={0x6558, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x68, 0x0, 0x3, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}, @multicast1}, {0xa000, 0x6558, 0x10, 0x0, @gue={{0x2, 0x1, 0x2, 0x8, 0x0, @val=0x80}}}}}}}}, 0x36) 2.728725036s ago: executing program 8 (id=8632): inotify_add_watch(0xffffffffffffffff, 0x0, 0x610003d5) r0 = inotify_init1(0x800) inotify_add_watch(r0, &(0x7f0000000100)='./file0\x00', 0x40000000) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x2814000, &(0x7f0000000280)={[{@barrier_val={'barrier', 0x3d, 0x3}}, {@noinit_itable}, {@noblock_validity}, {@delalloc}, {@dioread_nolock}, {@quota}, {@nomblk_io_submit}, {@delalloc}, {@nolazytime}]}, 0x1, 0x5b1, &(0x7f0000000440)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f0000000a00)='./file1\x00', 0x141442, 0x40) fallocate(r1, 0x0, 0xfff, 0x9) write$FUSE_INIT(r1, &(0x7f0000000a40)={0x50, 0x0, 0x0, {0x7, 0x2d, 0x3, 0x1020040, 0x3, 0x2, 0x80000000, 0x2, 0x0, 0x0, 0x10, 0x9}}, 0x50) r2 = openat(0xffffffffffffff9c, &(0x7f0000000ac0)='./file1\x00', 0x101042, 0x1d8) pwrite64(r2, &(0x7f0000000b00)='2', 0xfdef, 0xc00) 2.512270751s ago: executing program 2 (id=8633): r0 = add_key(&(0x7f0000000200)='keyring\x00', &(0x7f00000007c0)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffffc) r1 = add_key$keyring(&(0x7f0000000800), &(0x7f0000000840)={'syz', 0x0}, 0x0, 0x0, r0) r2 = add_key(&(0x7f0000000880)='asymmetric\x00', 0x0, &(0x7f0000000f80)="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", 0x559, r1) mmap$IORING_OFF_SQ_RING(0x0, 0x8000, 0xe, 0x2172, 0xffffffffffffffff, 0x0) keyctl$KEYCTL_PKEY_ENCRYPT(0x19, &(0x7f0000001500)={r2, 0xe1}, 0x0, &(0x7f0000001540)="cb4403fa0c2c2a2b515694b3636cdb40a409af8de96275a1d846d65eef1a4992f99b675b2853d82c107d0fd00990b531004a270b005fdb7d3b54db60ff7b4d10b0612763631dd3db62ddf7f7995bac3ad4dea44fc08db9647102334e6e9e7a9c19da1095090000000000000039b2c121f1ad5fc3cad85fe3a119f95975ece5fefb6fff27125d6cae3a344c568bce37c7dc0ce3ab132f3b8c6e3e9201415e0aa433978f1068685153176560528c9ec58f0e000076a3ce741b31b1e5e31109fe0be6a4fb63eadb54be4d09e39c18d7b6b5d057aa882fde37cfa50a2f79251311c1b6", 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1.844577761s ago: executing program 2 (id=8634): r0 = openat$loop_ctrl(0xffffff9c, &(0x7f0000000340), 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r0, 0xd000943d, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r0, 0x4c80, &(0x7f00000007c0)={0x0, 0x0, "05d3000028000000000083eb29e46b4bfb57461914278705b6a55ba904cefb1f00536dfdc9ce9c12d1207f8a35d1dad7ed0fc16b2ccd00000000000000080000000c0996d78e489e96651d35ca509de7cf52e7578e9ce37700000000000032936e283ae72a84cc5a72f07fef2fec1463729b336e892b5aadc70f51cb7e5925747f779254377a6a42493fb7026e77fb899a2072631f76cd0a59b17031b431163758724ac0df2d95b9c3fbccef0111f1fc6db466c73268e04c38df1f6bf2cc88aa6126229c332b887eb8e67112000631988ad55f281047000000000000000003000000000100", "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"}) setresgid(0xee00, 0xee01, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./proc\x00', 0x1ff) mount(0x0, &(0x7f0000000100)='./proc\x00', &(0x7f0000000140)='proc\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000180)='./proc/1/root/var/run\x00', &(0x7f00000001c0)={0x101000, 0x0, 0x8}, 0x18) r1 = fsopen(&(0x7f0000000000)='exfat\x00', 0x1) fsconfig$FSCONFIG_SET_BINARY(r1, 0x2, &(0x7f0000000040)='utf8', &(0x7f0000000080)="a6", 0x1) r2 = ioctl$LOOP_CTL_GET_FREE(r0, 0x4c82) ioctl$LOOP_CTL_REMOVE(r0, 0x4c81, r2) 1.603405921s ago: executing program 4 (id=8635): syz_mount_image$iso9660(&(0x7f0000000180), &(0x7f0000000800)='./file0\x00', 0x2204806, &(0x7f0000000200)={[{@map_off}, {@map_acorn, 0x0}, {@iocharset={'iocharset', 0x3d, 'iso8859-3'}}, {@showassoc}, {@session={'session', 0x3d, 0x62}}, {@block={'block', 0x3d, 0x400}, 0x41}, {@map_acorn}, {@iocharset={'iocharset', 0x3d, 'iso8859-2'}}, {@dmode={'dmode', 0x3d, 0x380000}}, {@showassoc}, {@mode={'mode', 0x3d, 0x2}}, {@gid}], [{@fscontext={'fscontext', 0x3d, 'staff_u'}}, {@permit_directio}]}, 0xfa, 0x69f, &(0x7f0000000f00)="$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") mount$fuse(0x0, &(0x7f0000015740)='./file0\x00', 0x0, 0x0, 0x0) 1.450240333s ago: executing program 8 (id=8636): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) mmap$IORING_OFF_SQ_RING(0x110c230000, 0x8000002, 0x2000007, 0x401d031, 0xffffffffffffffff, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x441, 0x345) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000100)) fallocate(r0, 0x20, 0x7fffffffffffffff, 0x3fff) 1.07284704s ago: executing program 2 (id=8637): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x1b, &(0x7f0000002040)={@remote, 0x4}, 0x20) 951.297508ms ago: executing program 4 (id=8638): r0 = fanotify_init(0x40, 0x80000) readv(r0, &(0x7f00000007c0)=[{&(0x7f0000000100)=""/175, 0xaf}, {0x0}], 0x2) r1 = openat$dir(0xffffffffffffff9c, &(0x7f00000001c0)='.\x00', 0xa880, 0x97) fanotify_mark(r0, 0x1, 0x40001019, r1, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) getdents64(r1, &(0x7f0000000cc0)=""/4080, 0xff0) getdents64(r1, 0x0, 0x0) 811.629081ms ago: executing program 8 (id=8639): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000001cc0)={0x0, 0x0, &(0x7f0000001d00)={&(0x7f0000001d40)=@newlink={0x30, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x14080, 0x42510}, [@IFLA_OPERSTATE={0x5, 0x10, 0x5}, @IFLA_GROUP={0x8}]}, 0x30}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 572.927636ms ago: executing program 2 (id=8640): r0 = socket$inet6(0xa, 0x3, 0x3) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x4e21, 0xc1, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000080)={{{@in=@empty, @in6=@private1, 0x4f23, 0x0, 0x4e23, 0x2, 0xa, 0x2a11bad3d5f03f24, 0x10, 0x89, 0x0, 0xee01}, {0xfffffffe, 0x2, 0xfffffffffffffffc, 0x1, 0xfffffffffffffffb, 0x3, 0x9, 0x7fff}, {0x4800000, 0xfffffffffffffffe, 0x4, 0x9}, 0xd8, 0x0, 0x1, 0x0, 0x2, 0x3}, {{@in=@private=0xa010100, 0x210000, 0x2b}, 0xa, @in=@loopback, 0x0, 0x0, 0x0, 0x17, 0x0, 0x0, 0xfffffffb}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x2e9, 0xffe0) 483.106849ms ago: executing program 4 (id=8641): r0 = eventfd2(0x0, 0x1) read$eventfd(r0, &(0x7f0000000140), 0x8) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000200)="569534ab1bbe0e03", 0x8}], 0x1) 99.702552ms ago: executing program 3 (id=8642): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000003c0)=@base={0xf, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x50) r1 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r1, &(0x7f0000000440)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r0, &(0x7f00000004c0), &(0x7f0000000500)=@udp6=r1}, 0x20) 61.748127ms ago: executing program 4 (id=8643): syz_mount_image$ext4(&(0x7f00000000c0)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1001a, &(0x7f00000001c0)={[{@jqfmt_vfsold}, {@data_err_abort}, {@auto_da_alloc}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@errors_remount}, {@jqfmt_vfsv1}]}, 0xff, 0x439, &(0x7f0000000240)="$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") r0 = syz_open_dev$loop(&(0x7f0000001c00), 0x7, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001c40)='blkio.bfq.avg_queue_size\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r0, 0x4c0a, &(0x7f0000001c80)={r1, 0x0, {0x2a00, 0x80010000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x12, 0xd, "fee8a2ab78fc179fd1f8a0e91ddaaca7bd64c6a4b4e00d9683dda1af1ea89de2b7fb0a0100000000000000000300", "2809e8dbe108598948224ad54afac11d875397bdb22d0000b420a1a93c5240f45f819e01177d3d458dd4992861ac00", "90be8b1c551265406c7f306003d8a0f4bd00000014000800000000000000007f", [0x100000000]}}) ioctl$LOOP_SET_DIRECT_IO(r0, 0x4c08, 0x591) 0s ago: executing program 2 (id=8644): r0 = syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000040)='./file1\x00', 0x18410, &(0x7f00000008c0)=ANY=[@ANYRES8=0x0, @ANYRESOCT=0x0, @ANYRES32=0x0], 0xfe, 0x4b9, &(0x7f00000000c0)="$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") rename(&(0x7f0000001300)='./file3\x00', &(0x7f0000001340)='./file1\x00') r1 = openat(r0, &(0x7f00000005c0)='./file1\x00', 0x2042, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r1, 0x0) truncate(&(0x7f0000000600)='./file1\x00', 0x2fffffd) kernel console output (not intermixed with test programs): ket [ 1061.065212][ C1] usb 4-1: malformed indat packet [ 1061.065466][ C1] usb 4-1: malformed indat packet [ 1061.065722][ C1] usb 4-1: malformed indat packet [ 1061.065984][ C1] usb 4-1: malformed indat packet [ 1061.066254][ C1] usb 4-1: malformed indat packet [ 1061.066682][ C1] usb 4-1: malformed indat packet [ 1061.173965][T29754] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1061.324340][T28882] usb 4-1: USB disconnect, device number 12 [ 1061.435049][T28882] keyspan_4 ttyUSB0: Keyspan 4 port adapter converter now disconnected from ttyUSB0 [ 1061.461171][T31739] loop7: detected capacity change from 0 to 512 [ 1061.465051][T31739] EXT4-fs: Ignoring removed nobh option [ 1061.465123][T31739] EXT4-fs: quotafile must be on filesystem root [ 1061.765961][T28882] keyspan_4 ttyUSB1: Keyspan 4 port adapter converter now disconnected from ttyUSB1 [ 1061.788950][T28882] keyspan_4 ttyUSB2: Keyspan 4 port adapter converter now disconnected from ttyUSB2 [ 1061.930269][T28882] keyspan_4 ttyUSB3: Keyspan 4 port adapter converter now disconnected from ttyUSB3 [ 1062.154901][T28882] keyspan 4-1:1.0: device disconnected [ 1062.495744][T31746] loop6: detected capacity change from 0 to 128 [ 1062.512816][T31746] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1062.605638][ T31] audit: type=1804 audit(1792214698.633:1230): pid=31746 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.8085" name="/newroot/87/file0/bus" dev="loop6" ino=115 res=1 errno=0 [ 1062.824740][T31756] loop7: detected capacity change from 0 to 16 [ 1062.840678][T31756] erofs (device loop7): invalid ishare xattr prefix id 0 [ 1063.593827][T31766] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1063.623590][T31768] netlink: 5856 bytes leftover after parsing attributes in process `syz.6.8091'. [ 1064.163526][T31789] loop7: detected capacity change from 0 to 128 [ 1064.172404][T31789] ext4: Unknown parameter 'dont_measure' [ 1064.915108][T31800] loop3: detected capacity change from 0 to 16 [ 1064.918039][T31798] loop4: detected capacity change from 0 to 512 [ 1064.924250][T31798] EXT4-fs: Ignoring removed nobh option [ 1064.924316][T31798] EXT4-fs: quotafile must be on filesystem root [ 1064.930144][T31800] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1066.115229][T31817] loop7: detected capacity change from 0 to 128 [ 1066.155204][T31817] UDF-fs: error (device loop7): udf_read_tagged: read failed, block=256, location=256 [ 1066.172686][T31820] loop4: detected capacity change from 0 to 128 [ 1066.192731][T31820] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1066.224034][T31820] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1066.350255][ T31] audit: type=1804 audit(1792214702.383:1231): pid=31817 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.7.8104" name="/newroot/377/file0/bus" dev="loop7" ino=115 res=1 errno=0 [ 1066.955365][T31842] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8111'. [ 1067.176669][T31848] netlink: 36 bytes leftover after parsing attributes in process `syz.7.8113'. [ 1067.386833][T31858] loop7: detected capacity change from 0 to 8 [ 1067.417825][T31858] SQUASHFS error: lzo decompression failed, data probably corrupt [ 1067.417863][T31858] SQUASHFS error: Failed to read block 0x144: -5 [ 1067.417882][T31858] SQUASHFS error: Unable to read metadata cache entry [142] [ 1067.417899][T31858] SQUASHFS error: Unable to read inode 0x11f [ 1067.469796][T31858] loop7: detected capacity change from 0 to 1024 [ 1067.543649][T31861] loop7: detected capacity change from 0 to 16 [ 1067.652441][T31861] erofs (device loop7): invalid ishare xattr prefix id 0 [ 1068.841221][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1069.572578][T31887] loop4: detected capacity change from 0 to 128 [ 1069.589692][T31887] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 1069.751975][ T31] audit: type=1804 audit(1792214705.783:1232): pid=31887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8125" name="/newroot/132/file0/bus" dev="loop4" ino=115 res=1 errno=0 [ 1069.780370][T31891] loop7: detected capacity change from 0 to 256 [ 1069.820147][T31893] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8127'. [ 1069.841283][T31891] FAT-fs (loop7): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1070.326768][T31902] loop3: detected capacity change from 0 to 512 [ 1070.346684][T31902] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1070.361460][T31902] EXT4-fs (loop3): corrupt root inode, run e2fsck [ 1070.361551][T31902] EXT4-fs (loop3): mount failed [ 1070.444450][T17084] Bluetooth: hci2: Malformed MSFT vendor event: 0x02 [ 1070.719635][ T31] audit: type=1800 audit(1792214706.753:1233): pid=31891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.7.8129" name="file1" dev="loop7" ino=1049083 res=0 errno=0 [ 1071.987211][T31927] netlink: 36 bytes leftover after parsing attributes in process `syz.6.8139'. [ 1072.074910][T31933] netlink: 8 bytes leftover after parsing attributes in process `syz.3.8142'. [ 1072.365166][T31943] loop3: detected capacity change from 0 to 512 [ 1072.374201][T31943] EXT4-fs: Ignoring removed nobh option [ 1072.374270][T31943] EXT4-fs: quotafile must be on filesystem root [ 1073.835042][T31963] loop4: detected capacity change from 0 to 512 [ 1073.928971][T31965] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1074.022286][T31963] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.022412][T31963] ext4 filesystem being mounted at /136/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 1074.101256][T31963] fs-verity (loop4, inode 15): Unrecognized descriptor size: 0 bytes [ 1074.592664][T28329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1074.847315][T29644] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 1074.906958][T31989] netlink: 36 bytes leftover after parsing attributes in process `syz.4.8156'. [ 1074.999527][T29644] usb 8-1: Using ep0 maxpacket: 32 [ 1075.001199][T29644] usb 8-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 1075.006379][T29644] usb 8-1: config 32 has an invalid interface number: 85 but max is 0 [ 1075.006520][T29644] usb 8-1: config 32 has no interface number 0 [ 1075.006567][T29644] usb 8-1: config 32 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1075.006601][T29644] usb 8-1: config 32 interface 85 has no altsetting 0 [ 1075.065977][T29644] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.066011][T29644] usb 8-1: Product: syz [ 1075.066030][T29644] usb 8-1: Manufacturer: syz [ 1075.066049][T29644] usb 8-1: SerialNumber: syz [ 1075.155606][T31992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.8158'. [ 1075.462179][T31999] loop4: detected capacity change from 0 to 512 [ 1075.479606][T31999] EXT4-fs: Ignoring removed nobh option [ 1075.479677][T31999] EXT4-fs: quotafile must be on filesystem root [ 1076.579687][T29644] appletouch 8-1:32.85: Geyser mode initialized. [ 1076.583906][T29644] input: appletouch as /devices/platform/dummy_hcd.7/usb8/8-1/8-1:32.85/input/input11 [ 1076.766345][T32006] loop4: detected capacity change from 0 to 256 [ 1076.781978][T32006] exfat: Unknown parameter '0177777777777777777777718446744073709551615ÿ·èOÚPÏo¾úÅ¥‰ P'ÀæeŽ©O ca`*G¶ˆU+rð¯ûà­ï‚XžâúÇ&à ùŠ¡ùvsÍ`M«"´³!ôÂ' [ 1076.863805][T32006] loop4: detected capacity change from 0 to 128 [ 1076.872726][T29644] usb 8-1: USB disconnect, device number 8 [ 1076.872841][ C1] appletouch 8-1:32.85: atp_complete: usb_submit_urb failed with result -19 [ 1077.010544][T29644] appletouch 8-1:32.85: input: appletouch disconnected [ 1077.019700][ T31] audit: type=1804 audit(1792214713.043:1234): pid=32006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.4.8164" name="/newroot/140/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa/bus" dev="loop4" ino=1049084 res=1 errno=0 [ 1077.462828][T32023] loop6: detected capacity change from 0 to 256 [ 1077.491003][T32023] FAT-fs (loop6): data area starts beyond volume (274 > 64) [ 1077.491027][T32023] FAT-fs (loop6): Can't find a valid FAT filesystem [ 1077.491724][T32025] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1077.795414][T32031] loop8: detected capacity change from 0 to 256 [ 1077.804341][T32031] exfat: Invalid uid '0x00000000ffffffff' [ 1077.848159][T32032] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8171'. [ 1077.848203][T32032] netlink: 'syz.7.8171': attribute type 1 has an invalid length. [ 1077.848223][T32032] netlink: 12 bytes leftover after parsing attributes in process `syz.7.8171'. [ 1078.419817][T32048] loop6: detected capacity change from 0 to 512 [ 1078.441295][T32048] EXT4-fs: Ignoring removed nobh option [ 1078.441349][T32048] EXT4-fs: quotafile must be on filesystem root [ 1082.306185][T32081] sch_tbf: peakrate 2147483647 is lower than or equals to rate 2831036522994172386 ! [ 1082.786282][T32098] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1084.025932][T32122] loop7: detected capacity change from 0 to 16 [ 1084.083868][T32122] erofs (device loop7): invalid ishare xattr prefix id 0 [ 1084.970833][T32151] loop6: detected capacity change from 0 to 128 [ 1085.001086][T32150] loop7: detected capacity change from 0 to 1024 [ 1085.016825][T32150] hfsplus: failed to load extents file [ 1085.124847][T32158] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1085.266901][ T188] usb 7-1: new high-speed USB device number 31 using dummy_hcd [ 1085.417289][ T188] usb 7-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 1085.418306][ T188] usb 7-1: config 1 has an invalid descriptor of length 241, skipping remainder of the config [ 1085.418334][ T188] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1085.422621][ T188] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 1085.422651][ T188] usb 7-1: SerialNumber: syz [ 1085.698885][ T188] usb 7-1: 0:2 : does not exist [ 1085.977593][T32180] loop8: detected capacity change from 0 to 512 [ 1085.994932][T32180] EXT4-fs: Ignoring removed nobh option [ 1085.995005][T32180] EXT4-fs: quotafile must be on filesystem root [ 1086.924183][ T188] usb 7-1: USB disconnect, device number 31 [ 1087.578437][T32190] loop8: detected capacity change from 0 to 2048 [ 1087.611314][T32190] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1087.634353][T28930] udevd[28930]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1087.717823][T32191] loop3: detected capacity change from 0 to 16 [ 1088.576914][T32191] erofs (device loop3): invalid ishare xattr prefix id 0 [ 1089.346801][ T31] audit: type=1800 audit(1792214725.343:1235): pid=32190 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.8.8216" name="file1" dev="loop8" ino=1346 res=0 errno=0 [ 1089.797615][ T31] audit: type=1326 audit(1792214725.833:1236): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.797888][ T31] audit: type=1326 audit(1792214725.833:1237): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.861706][ T31] audit: type=1326 audit(1792214725.833:1238): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.861969][ T31] audit: type=1326 audit(1792214725.893:1239): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.862191][ T31] audit: type=1326 audit(1792214725.893:1240): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.862459][ T31] audit: type=1326 audit(1792214725.893:1241): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.862906][ T31] audit: type=1326 audit(1792214725.893:1242): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1089.863161][ T31] audit: type=1326 audit(1792214725.893:1243): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f4c0855ed8e code=0x7ffc0000 [ 1089.864937][ T31] audit: type=1326 audit(1792214725.893:1244): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=32210 comm="syz.8.8223" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c0859e559 code=0x7ffc0000 [ 1090.462134][T32230] loop7: detected capacity change from 0 to 512 [ 1091.750787][T32246] loop6: detected capacity change from 0 to 512 [ 1091.763229][T32246] EXT4-fs (loop6): invalid inodes per group: 0 [ 1092.787391][T32251] loop6: detected capacity change from 0 to 1024 [ 1092.796237][T32251] ext4: Unknown parameter 'noacl' [ 1093.513306][T32262] loop6: detected capacity change from 0 to 16 [ 1093.555050][T32262] erofs (device loop6): invalid ishare xattr prefix id 0 [ 1094.032874][T32277] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1094.182904][T32282] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1094.348757][T32289] loop8: detected capacity change from 0 to 512 [ 1094.359575][T32289] EXT4-fs: Ignoring removed nobh option [ 1094.359647][T32289] EXT4-fs: quotafile must be on filesystem root [ 1095.799937][T32326] jffs2: notice: (32326) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 1095.970916][T32333] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1096.224279][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 1096.224302][ T31] audit: type=1800 audit(1792214732.253:1271): pid=32345 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.4.8258" name="SYSV00000000" dev="tmpfs" ino=0 res=0 errno=0 [ 1096.522899][T32354] loop4: detected capacity change from 0 to 512 [ 1096.539259][T32354] EXT4-fs: Ignoring removed nobh option [ 1096.539334][T32354] EXT4-fs: quotafile must be on filesystem root [ 1097.753067][T32365] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8263'. [ 1097.753106][T32365] netlink: 'syz.4.8263': attribute type 1 has an invalid length. [ 1097.753123][T32365] netlink: 'syz.4.8263': attribute type 2 has an invalid length. [ 1097.803182][T32371] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8265'. [ 1097.901610][T29644] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 1098.052854][T29644] usb 2-1: not running at top speed; connect to a high speed hub [ 1098.052897][T29644] usb 2-1: New USB device found, idVendor=0711, idProduct=0550, bcdDevice= 0.00 [ 1098.055315][T29644] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0xD has invalid wMaxPacketSize 0 [ 1098.072786][T29644] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1098.072821][T29644] usb 2-1: Product: syz [ 1098.072840][T29644] usb 2-1: Manufacturer: syz [ 1098.100472][T32380] loop6: detected capacity change from 0 to 16 [ 1098.112434][T32380] erofs (device loop6): invalid ishare xattr prefix id 0 [ 1098.175501][T29644] usb 2-1: USB2VGA dongle found at address 28 [ 1098.208742][T29644] usb 2-1: Allocated 8 output buffers [ 1098.247192][T29644] usb 2-1: Not attached to USB 2.0 hub, deferring init [ 1098.360637][ T5781] usb 2-1: USB disconnect, device number 28 [ 1098.654957][T32400] loop8: detected capacity change from 0 to 512 [ 1098.656100][T32400] EXT4-fs: Ignoring removed nobh option [ 1098.656169][T32400] EXT4-fs: quotafile must be on filesystem root [ 1098.692808][T32402] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1099.694581][T32414] netlink: 8 bytes leftover after parsing attributes in process `syz.7.8278'. [ 1099.694624][T32414] netlink: 'syz.7.8278': attribute type 1 has an invalid length. [ 1099.694642][T32414] netlink: 'syz.7.8278': attribute type 2 has an invalid length. [ 1099.940752][T32424] loop4: detected capacity change from 0 to 16 [ 1099.962674][T32424] erofs (device loop4): invalid ishare xattr prefix id 0 [ 1100.579951][T32453] loop6: detected capacity change from 0 to 512 [ 1100.584798][T32453] EXT4-fs: Ignoring removed nobh option [ 1100.584868][T32453] EXT4-fs: quotafile must be on filesystem root [ 1101.851088][T32463] netlink: 8 bytes leftover after parsing attributes in process `syz.4.8295'. [ 1101.851129][T32463] netlink: 'syz.4.8295': attribute type 1 has an invalid length. [ 1101.851148][T32463] netlink: 'syz.4.8295': attribute type 2 has an invalid length. [ 1102.087605][T29557] usb 7-1: new full-speed USB device number 32 using dummy_hcd [ 1102.248063][T29557] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1102.255742][T29557] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1102.255776][T29557] usb 7-1: Product: syz [ 1102.255796][T29557] usb 7-1: Manufacturer: syz [ 1102.255815][T29557] usb 7-1: SerialNumber: syz [ 1102.272082][T29557] usb 7-1: config 0 descriptor?? [ 1102.498177][T29557] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1102.683718][T32472] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 1104.181702][T32522] netlink: 'syz.8.8309': attribute type 1 has an invalid length. [ 1104.181733][T32522] netlink: 'syz.8.8309': attribute type 2 has an invalid length. [ 1104.522111][T32534] loop8: detected capacity change from 0 to 16 [ 1104.536141][T32534] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1104.613428][T29557] usb 7-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1104.614895][T29557] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1104.614951][T29557] usb 7-1: media controller created [ 1104.648034][T29557] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1104.680823][ C1] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1104.888882][T29557] i2c i2c-1: Added multiplexed i2c bus 2 [ 1104.888913][T29557] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 1104.889913][T29557] usb 7-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 1104.890140][T29557] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 1104.942462][T29557] DVB: Unable to find symbol fc0013_attach() [ 1105.151327][T29557] usb 7-1: USB disconnect, device number 32 [ 1107.651172][T32589] loop6: detected capacity change from 0 to 16 [ 1107.664313][T32589] erofs (device loop6): invalid ishare xattr prefix id 0 [ 1108.030737][T32604] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1108.371639][T17084] Bluetooth: hci1: Unable to find connection for dst 00:00:00:00:00:00 sid 0x00 [ 1108.559749][T32628] loop6: detected capacity change from 0 to 128 [ 1108.562000][T32628] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1108.624514][ T31] audit: type=1804 audit(1792214744.653:1272): pid=32628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.8335" name="/newroot/124/file0/bus" dev="loop6" ino=115 res=1 errno=0 [ 1109.511418][T29596] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1109.522278][T29596] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1109.534568][T29596] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1109.551385][T29596] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1109.552482][T29596] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1110.016979][T21242] IPVS: starting estimator thread 0... [ 1110.116841][T32667] IPVS: using max 25 ests per chain, 60000 per kthread [ 1110.391980][T32647] rxe_eth0 speed is unknown, defaulting to 1000 [ 1110.822642][T32690] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1111.395366][T32709] jffs2: notice: (32709) jffs2_build_xattr_subsystem: complete building xattr subsystem, 1 of xdatum (0 unchecked, 1 orphan) and 1 of xref (0 dead, 1 orphan) found. [ 1111.544126][T32647] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.546073][T32647] bridge0: port 1(bridge_slave_0) entered disabled state [ 1111.546216][T32647] bridge_slave_0: entered allmulticast mode [ 1111.574342][T32647] bridge_slave_0: entered promiscuous mode [ 1111.636793][T29596] Bluetooth: hci3: command tx timeout [ 1111.652305][T32647] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.652462][T32647] bridge0: port 2(bridge_slave_1) entered disabled state [ 1111.652631][T32647] bridge_slave_1: entered allmulticast mode [ 1111.654698][T32647] bridge_slave_1: entered promiscuous mode [ 1111.742371][T32647] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1111.761892][T32647] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1111.811974][T32647] team0: Port device team_slave_0 added [ 1111.815122][T32647] team0: Port device team_slave_1 added [ 1111.883999][T32647] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1111.884021][T32647] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.884053][T32647] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1111.886265][T32647] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1111.886281][T32647] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1111.886313][T32647] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1112.069121][T32647] hsr_slave_0: entered promiscuous mode [ 1112.070238][T32647] hsr_slave_1: entered promiscuous mode [ 1112.074273][T32647] debugfs: 'hsr0' already exists in 'hsr' [ 1112.074296][T32647] Cannot create hsr debugfs directory [ 1112.912166][T32765] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1112.985623][ T301] loop8: detected capacity change from 0 to 16 [ 1112.998283][ T301] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1113.344065][T32647] netdevsim netdevsim5 eth4 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.546804][ T5781] usb 9-1: new high-speed USB device number 16 using dummy_hcd [ 1113.578051][T32647] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.607035][ T5796] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 1113.701220][ T5781] usb 9-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 0.00 [ 1113.702764][ T5781] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 1113.702794][ T5781] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 1113.704926][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.704954][ T5781] usb 9-1: Product: syz [ 1113.704972][ T5781] usb 9-1: Manufacturer: syz [ 1113.704991][ T5781] usb 9-1: SerialNumber: syz [ 1113.726717][T29596] Bluetooth: hci3: command tx timeout [ 1113.769458][ T5796] usb 7-1: Using ep0 maxpacket: 8 [ 1113.781209][ T5796] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1113.781260][ T5796] usb 7-1: New USB device found, idVendor=2040, idProduct=c602, bcdDevice=2a.af [ 1113.784556][ T5796] usb 7-1: config 4 interface 0 has no altsetting 0 [ 1113.790969][ T5796] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1113.790997][ T5796] usb 7-1: Product: syz [ 1113.791016][ T5796] usb 7-1: Manufacturer: syz [ 1113.791035][ T5796] usb 7-1: SerialNumber: syz [ 1113.874921][T32647] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1113.958864][ T50] IPVS: starting estimator thread 0... [ 1113.974866][ T322] IPVS: lblc: TCP 172.20.20.170:20000 - no destination available [ 1114.045603][ T5796] usb 7-1: dvb_usb_v2: found a 'HCW 126xxx' in warm state [ 1114.061761][ T5796] usb 7-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 1114.062160][ T5796] dvbdev: DVB: registering new adapter (HCW 126xxx) [ 1114.062209][ T5796] usb 7-1: media controller created [ 1114.078928][ T323] IPVS: using max 24 ests per chain, 57600 per kthread [ 1114.108977][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1114.141896][ T5796] usb 7-1: selecting invalid altsetting 1 [ 1114.141921][ T5796] set interface failed [ 1114.142292][ T5796] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 1114.142316][ T5796] error writing reg: 0xff, val: 0x00 [ 1114.156919][T32647] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1114.221355][ T5796] dvb_usb_mxl111sf 7-1:4.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 1114.236275][ T5796] usb 7-1: USB disconnect, device number 33 [ 1114.458248][T32647] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1114.464915][T32647] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1114.466237][T32647] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1114.481144][T32647] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1114.484244][T32647] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1114.494228][T32647] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1114.498377][T32647] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1114.511339][T32647] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1114.674807][T32647] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1114.712318][T32647] 8021q: adding VLAN 0 to HW filter on device team0 [ 1114.743321][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 1114.743454][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1114.778130][T31248] bridge0: port 2(bridge_slave_1) entered blocking state [ 1114.778261][T31248] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1114.807663][ C0] greybus greybus1: 0/0:0: incomplete message 0x0001 of type 0x01 received (8 < 10) [ 1114.924567][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1115.008381][T29557] usb 9-1: USB disconnect, device number 16 [ 1115.008394][ C0] usb 9-1: failed to resubmit arpc in-urb: -19 [ 1115.008438][ C0] usb 9-1: failed to resubmit arpc in-urb: -19 [ 1115.008486][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 1115.008528][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 1115.008570][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 1115.008611][ C0] usb 9-1: failed to resubmit in-urb: -19 [ 1115.012456][T29557] usb 9-1: failed to send ARPC request 4: -19 [ 1115.012537][T29557] usb 9-1: failed to execute ARPC: -19 [ 1115.012557][T29557] usb 9-1: failed to flush cport 0: -19 [ 1115.012578][T29557] greybus greybus1: 0/0:0: failed to flush host cport: -19 [ 1115.012723][T29557] usb 9-1: failed to send ARPC request 2: -19 [ 1115.012798][T29557] usb 9-1: failed to execute ARPC: -19 [ 1115.012818][T29557] usb 9-1: failed to quiesce cport 0: -19 (0) [ 1115.012841][T29557] greybus greybus1: 0/0:0: failed to quiesce host cport: -19 [ 1115.013046][T29557] usb 9-1: failed to send ARPC request 3: -19 [ 1115.013122][T29557] usb 9-1: failed to execute ARPC: -19 [ 1115.013140][T29557] usb 9-1: failed to clear cport 0: -19 [ 1115.013160][T29557] greybus greybus1: 0/0:0: failed to clear host cport: -19 [ 1115.679305][ T363] syzkaller1: entered promiscuous mode [ 1115.679336][ T363] syzkaller1: entered allmulticast mode [ 1115.801771][T29596] Bluetooth: hci3: command tx timeout [ 1115.980954][ T369] loop8: detected capacity change from 0 to 16 [ 1115.996599][ T369] erofs (device loop8): invalid ishare xattr prefix id 0 [ 1116.145030][ T375] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1116.207296][T17084] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1116.225917][T17084] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1116.238904][T17084] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1116.249474][T17084] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1116.250258][T17084] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1116.616529][ T5796] usb 9-1: new full-speed USB device number 17 using dummy_hcd [ 1116.721365][T32647] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1116.782636][ T5796] usb 9-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1116.803097][ T5796] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1116.803133][ T5796] usb 9-1: Product: syz [ 1116.803152][ T5796] usb 9-1: Manufacturer: syz [ 1116.803171][ T5796] usb 9-1: SerialNumber: syz [ 1116.834557][ T5796] usb 9-1: config 0 descriptor?? [ 1117.058396][ T5796] usb 9-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1117.113271][ T376] rxe_eth0 speed is unknown, defaulting to 1000 [ 1117.782563][T32647] veth0_vlan: entered promiscuous mode [ 1117.803140][T32647] veth1_vlan: entered promiscuous mode [ 1117.878566][T17084] Bluetooth: hci3: command tx timeout [ 1117.895256][ T428] loop6: detected capacity change from 0 to 128 [ 1117.905846][ T428] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1117.985770][ T31] audit: type=1804 audit(1792214754.013:1273): pid=428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.8393" name="/newroot/142/file0/bus" dev="loop6" ino=115 res=1 errno=0 [ 1118.157256][T29618] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 1118.205514][T32647] veth0_macvtap: entered promiscuous mode [ 1118.316681][T29618] usb 2-1: Using ep0 maxpacket: 8 [ 1118.319305][T29618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1118.319358][T29618] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1118.323230][T29618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1118.323288][T29618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1118.323350][T29618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1118.361916][T17084] Bluetooth: hci7: command tx timeout [ 1118.390216][T29618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1118.390284][T29618] usb 2-1: Product: syz [ 1118.390304][T29618] usb 2-1: Manufacturer: syz [ 1118.390323][T29618] usb 2-1: SerialNumber: syz [ 1118.435873][T32647] veth1_macvtap: entered promiscuous mode [ 1118.602837][T32647] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1118.659769][T29618] usb 2-1: can't set first interface for hiFace device. [ 1118.659803][T29618] snd-usb-hiface 2-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1118.663514][T32647] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1118.695759][T29618] usb 2-1: USB disconnect, device number 29 [ 1119.013775][ T452] loop6: detected capacity change from 0 to 16 [ 1119.025132][ T452] erofs (device loop6): invalid ishare xattr prefix id 0 [ 1119.038657][T21239] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.079119][T21239] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.081148][T21239] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.081904][T21237] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1119.206557][T29618] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 1119.366575][T29618] usb 2-1: Using ep0 maxpacket: 8 [ 1119.369887][T29618] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1119.369965][T29618] usb 2-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1119.373002][T29618] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1119.373090][T29618] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1119.373118][T29618] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1119.376346][T29618] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1119.376375][T29618] usb 2-1: Product: syz [ 1119.376394][T29618] usb 2-1: Manufacturer: syz [ 1119.391579][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.391605][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.436710][T29618] usb 2-1: SerialNumber: syz [ 1119.486265][ T459] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1119.585890][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1119.585915][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1119.599042][ T376] bridge0: port 1(bridge_slave_0) entered blocking state [ 1119.599222][ T376] bridge0: port 1(bridge_slave_0) entered disabled state [ 1119.599360][ T376] bridge_slave_0: entered allmulticast mode [ 1119.602662][ T376] bridge_slave_0: entered promiscuous mode [ 1119.611113][ T376] bridge0: port 2(bridge_slave_1) entered blocking state [ 1119.611252][ T376] bridge0: port 2(bridge_slave_1) entered disabled state [ 1119.611389][ T376] bridge_slave_1: entered allmulticast mode [ 1119.614254][ T376] bridge_slave_1: entered promiscuous mode [ 1119.695411][ T376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1119.746293][ T376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1119.853947][ T376] team0: Port device team_slave_0 added [ 1119.869317][ T376] team0: Port device team_slave_1 added [ 1119.929154][ T376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.929174][ T376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.929207][ T376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.931675][ T376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.931698][ T376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1119.931733][ T376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1120.084210][ T376] hsr_slave_0: entered promiscuous mode [ 1120.094227][ T376] hsr_slave_1: entered promiscuous mode [ 1120.101422][ T376] debugfs: 'hsr0' already exists in 'hsr' [ 1120.101443][ T376] Cannot create hsr debugfs directory [ 1120.160754][ T5796] usb 9-1: dvb_usb_v2: will use the device's hardware PID filter (table count: 32) [ 1120.161090][ T5796] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 1120.161142][ T5796] usb 9-1: media controller created [ 1120.163603][ T5796] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1120.236870][ T5796] dvb_usb_rtl28xxu 9-1:0.0: unknown tuner NONE [ 1120.437673][T17084] Bluetooth: hci7: command tx timeout [ 1120.459234][ T5796] usb 9-1: USB disconnect, device number 17 [ 1120.731037][T29618] usb 2-1: USB disconnect, device number 30 [ 1121.254671][T28620] udevd[28620]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1121.497665][ T376] netdevsim netdevsim0 eth8 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1121.558125][ T5781] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 1121.587656][ T508] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1121.666614][T29618] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 1121.701974][ T509] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1121.707765][ T5781] usb 7-1: Using ep0 maxpacket: 16 [ 1121.711234][ T5781] usb 7-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1121.714393][ T5781] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 1121.714420][ T5781] usb 7-1: config 0 has no interface number 0 [ 1121.714465][ T5781] usb 7-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1121.714502][ T5781] usb 7-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1121.714529][ T5781] usb 7-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1121.714560][ T5781] usb 7-1: config 0 interface 1 has no altsetting 0 [ 1121.714599][ T5781] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1121.738779][ T5781] usb 7-1: config 0 descriptor?? [ 1121.783056][ T5781] usbhid 7-1:0.1: fixing wrong optional hid class descriptors count [ 1121.909074][T29618] usb 2-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1121.910233][T29618] usb 2-1: config 0 has an invalid interface number: 214 but max is 0 [ 1121.910261][T29618] usb 2-1: config 0 has no interface number 0 [ 1121.910305][T29618] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1121.910337][T29618] usb 2-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1121.911889][T29618] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1121.911917][T29618] usb 2-1: Manufacturer: syz [ 1121.911936][T29618] usb 2-1: SerialNumber: syz [ 1121.928084][T29618] usb 2-1: config 0 descriptor?? [ 1121.975254][ T376] netdevsim netdevsim0 eth7 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.116765][T17084] Bluetooth: hci2: command 0x0406 tx timeout [ 1122.138878][ T188] usb 6-1: new full-speed USB device number 27 using dummy_hcd [ 1122.170751][ T376] netdevsim netdevsim0 eth6 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.224137][ T5781] elan 0003:04F3:074D.0013: failed to start in urb: -90 [ 1122.298568][ T188] usb 6-1: New USB device found, idVendor=1235, idProduct=8004, bcdDevice= 0.40 [ 1122.301152][ T188] usb 6-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 4 [ 1122.303865][ T188] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1122.303895][ T188] usb 6-1: Product: syz [ 1122.303914][ T188] usb 6-1: Manufacturer: syz [ 1122.303959][ T188] usb 6-1: SerialNumber: syz [ 1122.373584][ T376] netdevsim netdevsim0 eth5 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1122.516752][T29596] Bluetooth: hci7: command tx timeout [ 1122.571267][ T188] usb 6-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 1122.572086][ T532] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 1122.572101][ T532] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.572161][ T532] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.572189][ T532] IPv6: NLM_F_CREATE should be set when creating new route [ 1122.574815][ T188] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 1122.600083][ T5781] elan 0003:04F3:074D.0013: Get report error for parm 6: 0 [ 1122.634050][T29618] input: syz as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.214/input/input12 [ 1122.775285][T29618] usb 2-1: USB disconnect, device number 31 [ 1123.746544][ T5781] elan 0003:04F3:074D.0013: Get report error for parm 7: 0 [ 1123.747009][ T5781] elan 0003:04F3:074D.0013: Set report error for parm 8: -71 [ 1123.755850][ T5781] elan 0003:04F3:074D.0013: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.6-1/input1 [ 1123.755895][ T5781] elan 0003:04F3:074D.0013: Input device is not registered [ 1123.841470][ T5781] elan 0003:04F3:074D.0013: probe with driver elan failed with error -119 [ 1123.869166][ T376] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1123.895218][ T376] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1123.905677][ T376] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1123.929909][ T376] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1123.932791][ T376] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1123.936212][ T5781] usb 7-1: USB disconnect, device number 34 [ 1123.966051][ T376] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1123.980774][ T376] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1124.023588][ T544] fido_id[544]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.6/usb7/7-1/report_descriptor': No such file or directory [ 1124.073724][ T376] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1124.219919][ T556] binder: 554:556 ioctl c0306201 0 returned -14 [ 1124.274746][ T31] audit: type=1326 audit(1792214760.303:1274): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f6911d9e559 code=0x0 [ 1124.336239][ T31] audit: type=1326 audit(1792214760.363:1275): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6911d9e559 code=0x7ffc0000 [ 1124.336656][ T31] audit: type=1326 audit(1792214760.373:1276): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f6911d9e559 code=0x7ffc0000 [ 1124.337501][ T560] tipc: Started in network mode [ 1124.337522][ T560] tipc: Node identity 4, cluster identity 4711 [ 1124.337537][ T560] tipc: Node number set to 4 [ 1124.361961][ T31] audit: type=1326 audit(1792214760.373:1277): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362032][ T31] audit: type=1326 audit(1792214760.373:1278): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362084][ T31] audit: type=1326 audit(1792214760.373:1279): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362133][ T31] audit: type=1326 audit(1792214760.373:1280): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362184][ T31] audit: type=1326 audit(1792214760.383:1281): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362235][ T31] audit: type=1326 audit(1792214760.383:1282): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.362287][ T31] audit: type=1326 audit(1792214760.383:1283): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=554 comm="syz.1.8422" exe="/root/ci-upstream-kasan-gce-root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f6911d5ed8e code=0x7ffc0000 [ 1124.395788][ T563] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1124.579146][ T376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1124.600179][T29596] Bluetooth: hci7: command tx timeout [ 1124.688298][ T376] 8021q: adding VLAN 0 to HW filter on device team0 [ 1124.741677][T31248] bridge0: port 1(bridge_slave_0) entered blocking state [ 1124.741790][T31248] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1124.799514][T21249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1124.799627][T21249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1124.909686][ T188] snd-usb-audio 6-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 1124.944286][ T188] usb 6-1: USB disconnect, device number 27 [ 1125.019095][T28930] udevd[28930]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1125.450449][ T597] netlink: 'syz.6.8437': attribute type 25 has an invalid length. [ 1125.450476][ T597] netlink: 8 bytes leftover after parsing attributes in process `syz.6.8437'. [ 1125.496877][T21237] netdevsim netdevsim6 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.498061][T19364] netdevsim netdevsim6 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.499045][ T1395] netdevsim netdevsim6 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.499091][ T1395] netdevsim netdevsim6 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1125.551219][ T25] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 1125.716558][ T25] usb 2-1: Using ep0 maxpacket: 16 [ 1125.717299][ T25] usb 2-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1125.718410][ T25] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1125.718437][ T25] usb 2-1: config 0 has no interface number 0 [ 1125.718481][ T25] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1125.718513][ T25] usb 2-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1125.718545][ T25] usb 2-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1125.718577][ T25] usb 2-1: config 0 interface 1 has no altsetting 0 [ 1125.718615][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1125.723156][ T25] usb 2-1: config 0 descriptor?? [ 1125.815105][ T25] usbhid 2-1:0.1: fixing wrong optional hid class descriptors count [ 1126.175102][ T619] netlink: 4 bytes leftover after parsing attributes in process `syz.8.8442'. [ 1126.208801][ T25] elan 0003:04F3:074D.0014: failed to start in urb: -90 [ 1126.588356][ T25] elan 0003:04F3:074D.0014: Get report error for parm 6: 0 [ 1126.615446][ T634] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 1126.994700][ T25] elan 0003:04F3:074D.0014: Get report error for parm 7: 0 [ 1127.127793][ T376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1127.292361][ T376] veth0_vlan: entered promiscuous mode [ 1127.329250][ T376] veth1_vlan: entered promiscuous mode [ 1127.398828][ T25] elan 0003:04F3:074D.0014: Get report error for parm 8: 0 [ 1127.427700][ T25] input: Elan Touchpad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04F3:074D.0014/input/input15 [ 1127.468200][ T25] input: HID 04f3:074d as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.1/0003:04F3:074D.0014/input/input14 [ 1127.522020][ T376] veth0_macvtap: entered promiscuous mode [ 1127.525284][ T25] elan 0003:04F3:074D.0014: input,hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.1-1/input1 [ 1127.571537][ T376] veth1_macvtap: entered promiscuous mode [ 1127.604561][ T25] elan 0003:04F3:074D.0014: Failed to start multitouch: -71 [ 1127.730896][ T376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1127.804865][ T376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1127.817501][T29618] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 1127.873000][ T574] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 1127.901261][T29596] Bluetooth: hci1: connection err: -111 [ 1127.931613][ T1395] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.977055][T21237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1127.978984][ T1395] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.003155][ T1395] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.029613][T29618] usb 7-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 1128.046568][T29618] usb 7-1: config 0 has an invalid interface number: 214 but max is 0 [ 1128.046603][T29618] usb 7-1: config 0 has no interface number 0 [ 1128.046649][T29618] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 1128.046680][T29618] usb 7-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1128.094047][T29618] usb 7-1: New USB device strings: Mfr=1, Product=0, SerialNumber=3 [ 1128.094078][T29618] usb 7-1: Manufacturer: syz [ 1128.094095][T29618] usb 7-1: SerialNumber: syz [ 1128.153085][T29618] usb 7-1: config 0 descriptor?? [ 1128.158732][ T654] loop8: detected capacity change from 0 to 512 [ 1128.333617][ T25] elan 0003:04F3:074D.0014: probe with driver elan failed with error -71 [ 1128.362411][ T654] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1128.362565][ T654] ext4 filesystem being mounted at /303/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1128.580945][ T670] smbdirect: ib_dev[syz1] renamed to [s] [ 1128.641363][ T25] usb 2-1: USB disconnect, device number 32 [ 1128.696694][T21252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1128.699755][T21252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1129.052344][ T674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8455'. [ 1129.081577][ T661] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1317: group 0, block bitmap and bg descriptor inconsistent: 96 vs 65376 free clusters [ 1129.260313][T29618] usbtouchscreen 7-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 1129.337086][T29618] usb 7-1: USB disconnect, device number 35 [ 1129.370447][T26833] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1129.579702][T21236] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1129.579728][T21236] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1130.830339][ T5781] usb 9-1: new high-speed USB device number 18 using dummy_hcd [ 1130.849569][ T710] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci7/hci7:200/input17 [ 1130.865300][ T718] netlink: 4 bytes leftover after parsing attributes in process `syz.4.8468'. [ 1130.977373][ T5781] usb 9-1: New USB device found, idVendor=08ca, idProduct=0110, bcdDevice= 1.00 [ 1130.982835][ T5781] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1131.013650][ T5781] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.013684][ T5781] usb 9-1: Product: syz [ 1131.013704][ T5781] usb 9-1: Manufacturer: syz [ 1131.013722][ T5781] usb 9-1: SerialNumber: syz [ 1131.095793][ T5781] gspca_main: mr97310a-2.14.0 probing 08ca:0110 [ 1131.266571][ T25] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 1131.430796][ T25] usb 2-1: Using ep0 maxpacket: 32 [ 1131.431550][ T25] usb 2-1: New USB device found, idVendor=0fe9, idProduct=d501, bcdDevice=23.50 [ 1131.437841][ T25] usb 2-1: config index 0 descriptor too short (expected 19, got 18) [ 1131.443671][ T25] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1131.443705][ T25] usb 2-1: Product: syz [ 1131.443724][ T25] usb 2-1: Manufacturer: syz [ 1131.443743][ T25] usb 2-1: SerialNumber: syz [ 1131.469449][ T25] usb 2-1: config 0 descriptor?? [ 1131.499683][ T25] dvb-usb: found a 'DViCO FusionHDTV5 USB Gold' in warm state. [ 1131.539855][ T25] dvb-usb: bulk message failed: -22 (2/0) [ 1131.596241][ T740] usb usb8: usbfs: process 740 (syz.0.8475) did not claim interface 0 before use [ 1131.614740][ T25] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 1131.621898][ T25] dvbdev: DVB: registering new adapter (DViCO FusionHDTV5 USB Gold) [ 1131.621993][ T25] usb 2-1: media controller created [ 1131.735378][ T25] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 1131.770042][ T720] dvb-usb: bulk message failed: -22 (3/0) [ 1131.870934][ T25] usb 2-1: selecting invalid altsetting 7 [ 1131.870961][ T25] cxusb: set interface failed [ 1131.870974][ T25] dvb-usb: bulk message failed: -22 (1/0) [ 1131.923067][ T745] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1132.013565][ T25] DVB: Unable to find symbol lgdt330x_attach() [ 1132.013587][ T25] dvb-usb: no frontend was attached by 'DViCO FusionHDTV5 USB Gold' [ 1132.078600][ T5781] gspca_mr97310a: reg read [21] error -71 [ 1132.078688][ T5781] mr97310a 9-1:1.0: probe with driver mr97310a failed with error -71 [ 1132.115393][ T5781] usb 9-1: USB disconnect, device number 18 [ 1132.147261][ T5796] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 1132.154051][ T25] rc_core: IR keymap rc-dvico-portable not found [ 1132.154073][ T25] Registered IR keymap rc-empty [ 1132.155484][ T25] rc rc0: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0 [ 1132.168877][ T25] input: DViCO FusionHDTV5 USB Gold as /devices/platform/dummy_hcd.1/usb2/2-1/rc/rc0/input18 [ 1132.249920][ T25] dvb-usb: schedule remote query interval to 100 msecs. [ 1132.249949][ T25] dvb-usb: DViCO FusionHDTV5 USB Gold successfully initialized and connected. [ 1132.260119][ T25] usb 2-1: USB disconnect, device number 33 [ 1132.305848][ T5796] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1132.321263][ T5796] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1132.321299][ T5796] usb 1-1: Product: syz [ 1132.321318][ T5796] usb 1-1: Manufacturer: syz [ 1132.321336][ T5796] usb 1-1: SerialNumber: syz [ 1132.447184][T29644] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1132.843647][ T25] dvb-usb: DViCO FusionHDTV5 USB Gold successfully deinitialized and disconnected. [ 1133.220273][ T5796] usb 1-1: USB disconnect, device number 6 [ 1133.361579][ T791] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 1133.426966][ T25] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 1133.676512][T29644] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 1133.676705][T29644] ath9k_htc: Failed to initialize the device [ 1133.677541][ T5796] usb 1-1: ath9k_htc: USB layer deinitialized [ 1133.945800][ T25] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1134.039827][ T25] usb 2-1: config 0 has no interfaces? [ 1134.197554][ T25] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 1134.197648][ T25] usb 2-1: SerialNumber: syz [ 1134.346578][ T5788] usb 9-1: new high-speed USB device number 19 using dummy_hcd [ 1134.416461][ T25] usb 2-1: config 0 descriptor?? [ 1134.567522][ T5788] usb 9-1: Using ep0 maxpacket: 16 [ 1134.568251][ T5788] usb 9-1: New USB device found, idVendor=04f3, idProduct=074d, bcdDevice= 0.00 [ 1134.569415][ T5788] usb 9-1: config 0 has an invalid interface number: 1 but max is 0 [ 1134.569442][ T5788] usb 9-1: config 0 has no interface number 0 [ 1134.569485][ T5788] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1134.569517][ T5788] usb 9-1: config 0 interface 1 altsetting 3 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1134.569545][ T5788] usb 9-1: config 0 interface 1 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 1134.569577][ T5788] usb 9-1: config 0 interface 1 has no altsetting 0 [ 1134.569613][ T5788] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1134.572844][ T5788] usb 9-1: config 0 descriptor?? [ 1134.586897][ T5788] usbhid 9-1:0.1: fixing wrong optional hid class descriptors count [ 1134.746682][ T25] usb 2-1: USB disconnect, device number 34 [ 1134.922650][ T812] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1134.929294][ T10] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 1135.083662][ T5788] elan 0003:04F3:074D.0015: failed to start in urb: -90 [ 1135.093228][ T10] usb 7-1: Using ep0 maxpacket: 32 [ 1135.096139][ T10] usb 7-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 1135.103125][ T10] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.103158][ T10] usb 7-1: Product: syz [ 1135.103201][ T10] usb 7-1: Manufacturer: syz [ 1135.103220][ T10] usb 7-1: SerialNumber: syz [ 1135.130241][ T10] usb 7-1: config 0 descriptor?? [ 1135.184847][ T10] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 1135.276851][ T25] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 1135.447050][ T25] usb 6-1: Using ep0 maxpacket: 16 [ 1135.455466][ T5788] elan 0003:04F3:074D.0015: Get report error for parm 6: 0 [ 1135.469289][ T25] usb 6-1: New USB device found, idVendor=0b95, idProduct=772a, bcdDevice=82.73 [ 1135.472730][ T25] usb 6-1: config 0 has an invalid interface number: 34 but max is 0 [ 1135.472760][ T25] usb 6-1: config 0 has no interface number 0 [ 1135.472807][ T25] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0xA has invalid maxpacket 1023 [ 1135.472839][ T25] usb 6-1: config 0 interface 34 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 80 [ 1135.531702][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1135.531740][ T25] usb 6-1: Product: syz [ 1135.531759][ T25] usb 6-1: Manufacturer: syz [ 1135.531779][ T25] usb 6-1: SerialNumber: syz [ 1135.562867][ T25] usb 6-1: config 0 descriptor?? [ 1135.563796][ T821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.563942][ T821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.811315][ T821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.811476][ T821] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 1135.851744][ T838] loop4: detected capacity change from 0 to 512 [ 1135.862487][ T5788] elan 0003:04F3:074D.0015: Get report error for parm 7: 0 [ 1135.919624][ T838] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1135.919769][ T838] ext4 filesystem being mounted at /201/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1136.282890][ T5788] elan 0003:04F3:074D.0015: Get report error for parm 8: -32 [ 1136.697781][ T10] gspca_topro: Sensor cx0342 [ 1136.798480][ T5788] elan 0003:04F3:074D.0015: hidraw0: USB HID v0.00 Joystick [HID 04f3:074d] on usb-dummy_hcd.8-1/input1 [ 1136.798526][ T5788] elan 0003:04F3:074D.0015: Input device is not registered [ 1136.816721][ T5788] elan 0003:04F3:074D.0015: probe with driver elan failed with error -119 [ 1136.852345][ T5788] usb 9-1: USB disconnect, device number 19 [ 1136.994176][T28329] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1137.038792][ T10] usb 7-1: USB disconnect, device number 36 [ 1137.358426][ T850] fido_id[850]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.8/usb9/report_descriptor': No such file or directory [ 1137.530820][ T25] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 1137.530858][ T25] asix 6-1:0.34 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0088: ffffffb9 [ 1137.531096][ T25] asix 6-1:0.34: probe with driver asix failed with error -71 [ 1137.535108][ T25] usb 6-1: USB disconnect, device number 28 [ 1138.403543][ T870] FAULT_INJECTION: forcing a failure. [ 1138.403543][ T870] name failslab, interval 1, probability 0, space 0, times 0 [ 1138.403590][ T870] CPU: 1 UID: 0 PID: 870 Comm: syz.6.8509 Tainted: G L syzkaller #0 PREEMPT(full) [ 1138.403626][ T870] Tainted: [L]=SOFTLOCKUP [ 1138.403637][ T870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1138.403653][ T870] Call Trace: [ 1138.403664][ T870] [ 1138.403675][ T870] dump_stack_lvl+0xe8/0x150 [ 1138.403720][ T870] should_fail_ex+0x410/0x560 [ 1138.403764][ T870] should_failslab+0xa8/0x100 [ 1138.403803][ T870] __kmalloc_cache_noprof+0xa3/0x600 [ 1138.403836][ T870] ? xa_load+0x1db/0x210 [ 1138.403869][ T870] ? __io_uring_add_tctx_node+0x186/0x630 [ 1138.403903][ T870] ? __io_uring_add_tctx_node+0x186/0x630 [ 1138.403946][ T870] __io_uring_add_tctx_node+0x186/0x630 [ 1138.403985][ T870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.404019][ T870] ? __pfx___io_uring_add_tctx_node+0x10/0x10 [ 1138.404058][ T870] ? __anon_inode_getfile+0x169/0x200 [ 1138.404103][ T870] io_uring_create+0x596/0x990 [ 1138.404150][ T870] __se_sys_io_uring_setup+0x2a8/0x2c0 [ 1138.404189][ T870] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 1138.404224][ T870] ? __pfx___se_sys_io_uring_setup+0x10/0x10 [ 1138.404284][ T870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.404314][ T870] ? rcu_is_watching+0x16/0xb0 [ 1138.404350][ T870] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1138.404396][ T870] do_syscall_64+0x166/0x520 [ 1138.404427][ T870] ? trace_irq_disable+0x3b/0x140 [ 1138.404457][ T870] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.404491][ T870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1138.404518][ T870] RIP: 0033:0x7f6ed619e559 [ 1138.404548][ T870] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1138.404571][ T870] RSP: 002b:00007f6ed70fafb8 EFLAGS: 00000206 ORIG_RAX: 00000000000001a9 [ 1138.404600][ T870] RAX: ffffffffffffffda RBX: 00002000000005c0 RCX: 00007f6ed619e559 [ 1138.404620][ T870] RDX: 0000000000000000 RSI: 00002000000005c0 RDI: 0000000000001c0b [ 1138.404638][ T870] RBP: 00007f6ed6235ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1138.404656][ T870] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1138.404673][ T870] R13: 0000000000000000 R14: 0000000000000000 R15: 00007fffa3068e48 [ 1138.404713][ T870] [ 1138.818380][ T876] ip_tables: iptables: counters copy to user failed while replacing table [ 1138.984840][ T885] loop6: detected capacity change from 0 to 128 [ 1139.061031][ T882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1139.083739][ T885] UDF-fs: error (device loop6): udf_read_tagged: read failed, block=256, location=256 [ 1139.104653][ T885] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1139.142537][ T31] kauditd_printk_skb: 192 callbacks suppressed [ 1139.142561][ T31] audit: type=1800 audit(1792214775.173:1476): pid=885 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.8513" name="file1" dev="loop6" ino=104 res=0 errno=0 [ 1139.149328][T29557] usb 1-1: new full-speed USB device number 7 using dummy_hcd [ 1139.210184][ T892] loop4: detected capacity change from 0 to 16 [ 1139.214350][ T892] erofs (device loop4): invalid ishare xattr prefix id 0 [ 1139.312956][T29557] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1139.317567][T29557] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1139.317595][T29557] usb 1-1: Product: syz [ 1139.317614][T29557] usb 1-1: Manufacturer: syz [ 1139.317632][T29557] usb 1-1: SerialNumber: syz [ 1139.341862][T29557] usb 1-1: config 0 descriptor?? [ 1139.592495][T29557] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1141.078992][ T947] loop5: detected capacity change from 0 to 2048 [ 1141.085672][ T947] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=3932051, location=3932051 [ 1141.119290][ T947] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1141.206573][ T5781] usb 2-1: new full-speed USB device number 35 using dummy_hcd [ 1141.226937][ T25] usb 9-1: new high-speed USB device number 20 using dummy_hcd [ 1141.231981][ T955] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 1141.379879][ T5781] usb 2-1: New USB device found, idVendor=0b48, idProduct=1003, bcdDevice=7b.54 [ 1141.381505][ T5781] usb 2-1: config 0 has an invalid interface number: 1 but max is 0 [ 1141.381533][ T5781] usb 2-1: config 0 has no interface number 0 [ 1141.394124][ T5781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.394154][ T5781] usb 2-1: Product: syz [ 1141.394172][ T5781] usb 2-1: Manufacturer: syz [ 1141.394191][ T5781] usb 2-1: SerialNumber: syz [ 1141.396115][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1141.438135][ T5781] usb 2-1: config 0 descriptor?? [ 1141.449905][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1141.449988][ T25] usb 9-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1141.453189][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1141.453239][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1141.453267][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1141.462737][ T5781] usb 2-1: selecting invalid altsetting 1 [ 1141.473963][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1141.473995][ T25] usb 9-1: Product: syz [ 1141.474013][ T25] usb 9-1: Manufacturer: syz [ 1141.474032][ T25] usb 9-1: SerialNumber: syz [ 1141.495142][ T5781] dvb_ttusb_budget: ttusb_init_controller: error [ 1141.495162][ T5781] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 1141.579940][ T961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1141.671615][ T5781] DVB: Unable to find symbol stv0299_attach() [ 1141.791400][ T25] usb 9-1: can't set first interface for hiFace device. [ 1141.791433][ T25] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1141.794328][ T5781] DVB: Unable to find symbol tda8083_attach() [ 1141.794343][ T5781] dvb_ttusb_budget: no frontend driver found for device [0b48:1003] [ 1141.830096][ T25] usb 9-1: USB disconnect, device number 20 [ 1141.862316][ T5781] usb 2-1: USB disconnect, device number 35 [ 1141.952921][ T972] loop5: detected capacity change from 0 to 512 [ 1142.040409][ T974] ip_tables: iptables: counters copy to user failed while replacing table [ 1142.326514][ T25] usb 9-1: new high-speed USB device number 21 using dummy_hcd [ 1142.597117][T29596] Bluetooth: hci4: command 0x0406 tx timeout [ 1143.246672][ T25] usb 9-1: Using ep0 maxpacket: 8 [ 1143.253253][ T25] usb 9-1: unable to get BOS descriptor or descriptor too short [ 1143.253304][ T25] usb 9-1: New USB device found, idVendor=249c, idProduct=9006, bcdDevice= 0.40 [ 1143.259143][ T25] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1143.259195][ T25] usb 9-1: config 1 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1143.259221][ T25] usb 9-1: config 1 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 1143.267877][ T25] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1143.267933][ T25] usb 9-1: Product: syz [ 1143.267951][ T25] usb 9-1: Manufacturer: syz [ 1143.267970][ T25] usb 9-1: SerialNumber: syz [ 1143.435038][T29557] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1143.476763][T29557] usb 1-1: USB disconnect, device number 7 [ 1143.929216][ T25] usb 9-1: can't set first interface for hiFace device. [ 1143.929255][ T25] snd-usb-hiface 9-1:1.0: probe with driver snd-usb-hiface failed with error -5 [ 1143.947344][ T25] usb 9-1: USB disconnect, device number 21 [ 1143.956542][ T5796] usb 2-1: new high-speed USB device number 36 using dummy_hcd [ 1143.961432][ T5781] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 1144.099748][ T5796] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1144.099806][ T5796] usb 2-1: New USB device found, idVendor=8086, idProduct=0ad2, bcdDevice= 0.00 [ 1144.102264][ T5796] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1144.102291][ T5796] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1144.102340][ T5796] usb 2-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1144.104123][ T5796] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=0 [ 1144.104153][ T5796] usb 2-1: Product: syz [ 1144.104172][ T5796] usb 2-1: Manufacturer: syz [ 1144.178422][ T5796] uvcvideo 2-1:1.0: Found UVC 1.00 device syz (8086:0ad2) [ 1144.187765][ T5781] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 1144.191641][ T5781] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1144.191674][ T5781] usb 6-1: Product: syz [ 1144.191694][ T5781] usb 6-1: Manufacturer: syz [ 1144.191712][ T5781] usb 6-1: SerialNumber: syz [ 1144.256611][ T5781] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 1144.422316][ T5796] uvcvideo 2-1:1.0: Failed to query (GET_INFO) UVC error code control 17 on unit 1: -32 (exp. 1). [ 1144.422394][ T5796] uvcvideo 2-1:1.0: No streaming interface found for terminal 32770. [ 1144.564079][ T1017] smpboot: CPU 1 is now offline [ 1152.768932][ T5781] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 1152.769097][ T5781] ath9k_htc: Failed to initialize the device [ 1154.078981][ C0] sched: DL replenish lagged too much [ 1175.572074][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1182.624571][ T1304] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1182.679190][ T1304] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1191.078841][ C0] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:1b, vlan:0) [ 1191.204088][ T5788] usb 6-1: USB disconnect, device number 29 [ 1191.222927][ T5796] usb 2-1: USB disconnect, device number 36 [ 1191.279469][ T5788] usb 6-1: ath9k_htc: USB layer deinitialized [ 1192.150501][T26833] process 30321 (syz.8.7653) no longer affine to cpu1 [ 1194.944142][T29596] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1194.979705][T29596] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1194.982974][T29596] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1195.083160][T29596] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1195.094758][T29596] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1195.433319][ T5615] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1195.473162][ T1044] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1195.475302][ T1044] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1195.491095][ T1044] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1195.530251][ T1044] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1195.533345][ T1044] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1195.543814][ T1044] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1195.660991][T17084] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1195.746277][T17084] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1195.758512][T17084] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1196.288436][ T1044] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1196.401811][ T1043] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1196.416134][ T1043] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1196.483346][ T1044] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1196.499504][ T1043] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1196.514869][ T1044] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1196.568363][ T1043] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1196.584399][ T1043] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1196.599481][ T1043] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1196.633470][ T1043] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1196.888441][ T1043] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1196.891841][ T1043] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1196.892542][ T1043] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1196.893628][ T1043] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1196.929588][ T1043] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1197.246665][T17084] Bluetooth: hci0: command tx timeout [ 1197.717377][T17084] Bluetooth: hci8: command tx timeout [ 1197.895501][T17084] Bluetooth: hci9: command tx timeout [ 1198.676590][T17084] Bluetooth: hci10: command tx timeout [ 1198.757788][T17084] Bluetooth: hci11: command tx timeout [ 1199.016331][T17084] Bluetooth: hci12: command tx timeout [ 1199.319376][T17084] Bluetooth: hci0: command tx timeout [ 1199.798014][T17084] Bluetooth: hci8: command tx timeout [ 1199.962577][T17084] Bluetooth: hci9: command tx timeout [ 1200.402155][T21239] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1200.602955][ T1039] rxe_eth0 speed is unknown, defaulting to 1000 [ 1200.759590][T17084] Bluetooth: hci10: command tx timeout [ 1200.859301][T17084] Bluetooth: hci11: command tx timeout [ 1201.081742][T17084] Bluetooth: hci12: command tx timeout [ 1201.291327][T21239] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.397727][T17084] Bluetooth: hci0: command tx timeout [ 1201.726135][T21239] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.885440][T17084] Bluetooth: hci8: command tx timeout [ 1201.940945][T21239] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.982023][ T1053] rxe_eth0 speed is unknown, defaulting to 1000 [ 1202.037046][T17084] Bluetooth: hci9: command tx timeout [ 1202.587004][T30194] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.830977][T21242] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.839859][T17084] Bluetooth: hci10: command tx timeout [ 1202.846701][T21242] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1202.868948][ T1061] rxe_eth0 speed is unknown, defaulting to 1000 [ 1202.917831][T17084] Bluetooth: hci11: command tx timeout [ 1203.157540][T17084] Bluetooth: hci12: command tx timeout [ 1203.186624][T21242] netdevsim netdevsim0 eth4: set [1, 0] type 2 family 0 port 6081 - 0 [ 1203.266274][T21239] bridge_slave_1: left allmulticast mode [ 1203.266301][T21239] bridge_slave_1: left promiscuous mode [ 1203.279022][T21239] bridge0: port 2(bridge_slave_1) entered disabled state [ 1203.300627][T21239] bridge_slave_0: left allmulticast mode [ 1203.300652][T21239] bridge_slave_0: left promiscuous mode [ 1203.300831][T21239] bridge0: port 1(bridge_slave_0) entered disabled state [ 1203.476896][T17084] Bluetooth: hci0: command tx timeout [ 1203.958949][T17084] Bluetooth: hci8: command tx timeout [ 1203.961836][T21239] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1203.965815][T21239] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1203.998453][T21239] bond0 (unregistering): Released all slaves [ 1204.117912][T17084] Bluetooth: hci9: command tx timeout [ 1204.202028][ T1031] rxe_eth0 speed is unknown, defaulting to 1000 [ 1204.918391][T17084] Bluetooth: hci10: command tx timeout [ 1204.998437][T17084] Bluetooth: hci11: command tx timeout [ 1205.084083][ T1041] rxe_eth0 speed is unknown, defaulting to 1000 [ 1205.238097][T17084] Bluetooth: hci12: command tx timeout [ 1205.260925][ T1039] bridge0: port 1(bridge_slave_0) entered blocking state [ 1205.261056][ T1039] bridge0: port 1(bridge_slave_0) entered disabled state [ 1205.261174][ T1039] bridge_slave_0: entered allmulticast mode [ 1205.292274][ T1039] bridge_slave_0: entered promiscuous mode [ 1205.411489][ T1039] bridge0: port 2(bridge_slave_1) entered blocking state [ 1205.411583][ T1039] bridge0: port 2(bridge_slave_1) entered disabled state [ 1205.411702][ T1039] bridge_slave_1: entered allmulticast mode [ 1205.444782][ T1039] bridge_slave_1: entered promiscuous mode [ 1205.703935][ T1039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1205.830685][ T1039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1206.059877][ T1047] rxe_eth0 speed is unknown, defaulting to 1000 [ 1206.119951][ T1039] team0: Port device team_slave_0 added [ 1206.340863][ T1039] team0: Port device team_slave_1 added [ 1206.710244][ T1039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1206.710264][ T1039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.710288][ T1039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1206.960621][ T1039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1206.960640][ T1039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1206.960664][ T1039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1207.511207][ T1053] bridge0: port 1(bridge_slave_0) entered blocking state [ 1207.511313][ T1053] bridge0: port 1(bridge_slave_0) entered disabled state [ 1207.511446][ T1053] bridge_slave_0: entered allmulticast mode [ 1207.539093][ T1053] bridge_slave_0: entered promiscuous mode [ 1207.989067][T21239] hsr_slave_0: left promiscuous mode [ 1207.993886][T21239] hsr_slave_1: left promiscuous mode [ 1207.994681][T21239] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1207.994701][T21239] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1207.996230][T21239] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1207.996247][T21239] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1208.072989][T21239] veth1_macvtap: left promiscuous mode [ 1208.073024][T21239] veth0_macvtap: left promiscuous mode [ 1208.073106][T21239] veth1_vlan: left promiscuous mode [ 1208.073187][T21239] veth0_vlan: left promiscuous mode [ 1208.406006][T21239] team0 (unregistering): Port device team_slave_1 removed [ 1208.429682][T21239] team0 (unregistering): Port device team_slave_0 removed [ 1208.652361][ T1053] bridge0: port 2(bridge_slave_1) entered blocking state [ 1208.652456][ T1053] bridge0: port 2(bridge_slave_1) entered disabled state [ 1208.652583][ T1053] bridge_slave_1: entered allmulticast mode [ 1208.682121][ T1053] bridge_slave_1: entered promiscuous mode [ 1208.731600][ T1061] bridge0: port 1(bridge_slave_0) entered blocking state [ 1208.731699][ T1061] bridge0: port 1(bridge_slave_0) entered disabled state [ 1208.731837][ T1061] bridge_slave_0: entered allmulticast mode [ 1208.744070][ T1061] bridge_slave_0: entered promiscuous mode [ 1208.787773][ T1039] hsr_slave_0: entered promiscuous mode [ 1208.790383][ T1039] hsr_slave_1: entered promiscuous mode [ 1208.792381][ T1039] debugfs: 'hsr0' already exists in 'hsr' [ 1208.792399][ T1039] Cannot create hsr debugfs directory [ 1208.930062][ T1053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1208.933142][ T1053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.040669][ T1061] bridge0: port 2(bridge_slave_1) entered blocking state [ 1209.040759][ T1061] bridge0: port 2(bridge_slave_1) entered disabled state [ 1209.040871][ T1061] bridge_slave_1: entered allmulticast mode [ 1209.042478][ T1061] bridge_slave_1: entered promiscuous mode [ 1209.290742][ T1053] team0: Port device team_slave_0 added [ 1209.409187][ T1061] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1209.467265][ T1053] team0: Port device team_slave_1 added [ 1209.554227][ T1061] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1209.681944][ T1053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1209.681962][ T1053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.681985][ T1053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1209.765901][ T1061] team0: Port device team_slave_0 added [ 1209.824563][ T1053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1209.824581][ T1053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1209.824606][ T1053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1209.945347][ T1061] team0: Port device team_slave_1 added [ 1210.095119][ T1031] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.095483][ T1031] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.095900][ T1031] bridge_slave_0: entered allmulticast mode [ 1210.130931][ T1031] bridge_slave_0: entered promiscuous mode [ 1210.143796][ T1061] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1210.143815][ T1061] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.143839][ T1061] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1210.145396][ T1031] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.145481][ T1031] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.145633][ T1031] bridge_slave_1: entered allmulticast mode [ 1210.222009][ T1031] bridge_slave_1: entered promiscuous mode [ 1210.293178][ T1061] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1210.293197][ T1061] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1210.293221][ T1061] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1210.500835][ T1031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.532828][ T1053] hsr_slave_0: entered promiscuous mode [ 1210.534105][ T1053] hsr_slave_1: entered promiscuous mode [ 1210.536360][ T1053] debugfs: 'hsr0' already exists in 'hsr' [ 1210.536378][ T1053] Cannot create hsr debugfs directory [ 1210.621020][ T1031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.795289][ T1039] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1210.861886][ T1061] hsr_slave_0: entered promiscuous mode [ 1210.865008][ T1061] hsr_slave_1: entered promiscuous mode [ 1210.865726][ T1061] debugfs: 'hsr0' already exists in 'hsr' [ 1210.865746][ T1061] Cannot create hsr debugfs directory [ 1211.034152][ T1039] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.062491][ T1031] team0: Port device team_slave_0 added [ 1211.137872][ T1031] team0: Port device team_slave_1 added [ 1211.298546][ T1039] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.375225][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1211.375242][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.375265][ T1031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1211.376015][ T1041] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.376187][ T1041] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.376303][ T1041] bridge_slave_0: entered allmulticast mode [ 1211.449845][ T1041] bridge_slave_0: entered promiscuous mode [ 1211.504754][ T1031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1211.504773][ T1031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1211.504796][ T1031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1211.562916][ T1041] bridge0: port 2(bridge_slave_1) entered blocking state [ 1211.563063][ T1041] bridge0: port 2(bridge_slave_1) entered disabled state [ 1211.563203][ T1041] bridge_slave_1: entered allmulticast mode [ 1211.565415][ T1041] bridge_slave_1: entered promiscuous mode [ 1211.633958][ T1039] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1211.848586][ T1041] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1211.980430][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 1211.980520][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 1211.980649][ T1047] bridge_slave_0: entered allmulticast mode [ 1211.984610][ T1047] bridge_slave_0: entered promiscuous mode [ 1212.007482][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 1212.007596][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 1212.007732][ T1047] bridge_slave_1: entered allmulticast mode [ 1212.009280][ T1047] bridge_slave_1: entered promiscuous mode [ 1212.096147][ T1031] hsr_slave_0: entered promiscuous mode [ 1212.103385][ T1031] hsr_slave_1: entered promiscuous mode [ 1212.104348][ T1031] debugfs: 'hsr0' already exists in 'hsr' [ 1212.104366][ T1031] Cannot create hsr debugfs directory [ 1212.135316][ T1041] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.222860][ T1047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1212.240663][ T1047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1212.413309][ T1047] team0: Port device team_slave_0 added [ 1212.416064][ T1041] team0: Port device team_slave_0 added [ 1212.460849][ T1047] team0: Port device team_slave_1 added [ 1212.465329][ T1041] team0: Port device team_slave_1 added [ 1212.569478][ T1041] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.569497][ T1041] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.569520][ T1041] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.690529][ T1041] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.690547][ T1041] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.690571][ T1041] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1212.782981][ T1047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1212.782999][ T1047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.783022][ T1047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1212.854799][ T1047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1212.854815][ T1047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1212.854839][ T1047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1213.104350][ T1041] hsr_slave_0: entered promiscuous mode [ 1213.105312][ T1041] hsr_slave_1: entered promiscuous mode [ 1213.119779][ T1041] debugfs: 'hsr0' already exists in 'hsr' [ 1213.119800][ T1041] Cannot create hsr debugfs directory [ 1213.134324][ T1039] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1213.150761][ T1039] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1213.220216][ T1047] hsr_slave_0: entered promiscuous mode [ 1213.221104][ T1047] hsr_slave_1: entered promiscuous mode [ 1213.221696][ T1047] debugfs: 'hsr0' already exists in 'hsr' [ 1213.221713][ T1047] Cannot create hsr debugfs directory [ 1213.263017][ T1039] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1213.283202][ T1039] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1213.349295][ T1039] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1213.353378][ T1039] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1213.462099][ T1053] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.527679][ T1039] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1213.533948][ T1039] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1213.701337][ T1053] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.814678][ T1053] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1213.916261][ T1053] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.381422][ T1039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1214.454824][ T1039] 8021q: adding VLAN 0 to HW filter on device team0 [ 1214.490502][ T1053] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1214.513381][ T1053] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1214.531315][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1214.531399][T21236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1214.533935][ T1053] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1214.569739][ T1053] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1214.585060][ T1053] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1214.605931][ T1053] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1214.625906][T21236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1214.625991][T21236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1214.650999][ T1053] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1214.669824][ T1053] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1214.845360][ T1061] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.968177][ T1061] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.165289][ T1061] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.479218][ T1061] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.555830][ T1053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1215.626243][ T1053] 8021q: adding VLAN 0 to HW filter on device team0 [ 1215.669894][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1215.669981][T21236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1215.710938][T21239] bridge0: port 2(bridge_slave_1) entered blocking state [ 1215.711023][T21239] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1216.610976][ T1039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1216.727110][ T1061] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1216.749992][ T1061] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1216.798793][ T1061] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1216.819701][ T1061] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1216.820455][ T1061] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1216.835391][ T1061] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1216.864632][ T1061] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1216.897794][ T1061] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1217.091500][ T1031] netdevsim netdevsim9 eth16 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.193509][ T1039] veth0_vlan: entered promiscuous mode [ 1217.280210][ T1039] veth1_vlan: entered promiscuous mode [ 1217.453166][ T1031] netdevsim netdevsim9 eth15 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.674834][ T1031] netdevsim netdevsim9 eth14 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1217.744521][ T1053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1217.885528][ T1031] netdevsim netdevsim9 eth13 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1218.020688][ T1039] veth0_macvtap: entered promiscuous mode [ 1218.066003][ T1039] veth1_macvtap: entered promiscuous mode [ 1218.161854][ T1039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1218.165435][ T1061] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1218.225059][ T1039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1218.301983][ T1061] 8021q: adding VLAN 0 to HW filter on device team0 [ 1218.316022][T21249] bridge0: port 1(bridge_slave_0) entered blocking state [ 1218.316111][T21249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1218.440321][T21245] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.440384][T21245] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.440418][T21245] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.440452][T21245] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1218.445471][T21236] bridge0: port 2(bridge_slave_1) entered blocking state [ 1218.445556][T21236] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1218.800689][ T1041] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.065448][ T1041] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.130783][ T1395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.130805][ T1395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.252510][ T1041] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.348669][ T1041] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1219.441694][T21242] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1219.441714][T21242] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1219.542535][ T1053] veth0_vlan: entered promiscuous mode [ 1219.609359][ T1053] veth1_vlan: entered promiscuous mode [ 1219.788939][ T1053] veth0_macvtap: entered promiscuous mode [ 1219.825772][ T1053] veth1_macvtap: entered promiscuous mode [ 1219.887580][T17084] Bluetooth: hci8: connection err: -111 [ 1219.922296][ T1053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1220.004067][ T1053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1220.076338][ T1395] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.077785][ T1395] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.101086][T21242] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.247023][T21242] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1220.732394][T21242] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1220.732415][T21242] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1220.776708][T10213] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 1220.926912][T10213] usb 4-1: Using ep0 maxpacket: 16 [ 1220.929000][T10213] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1220.932537][T10213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1220.932564][T10213] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1220.932585][T10213] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 1220.932620][T10213] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1220.935789][T10213] usb 4-1: config 0 descriptor?? [ 1221.108722][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1221.108744][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1221.168822][ T1041] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1221.209237][ T1041] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1221.229387][ T1041] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1221.273620][ T1041] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1221.497249][T10213] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0016/input/input20 [ 1221.500856][ T1286] loop8: detected capacity change from 0 to 1024 [ 1221.571349][ T1286] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 1221.571451][ T1286] ext4 filesystem being mounted at /0/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1221.642903][ T1047] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1221.709488][ T31] audit: type=1800 audit(1792214857.733:1477): pid=1286 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.8554" name="file1" dev="loop8" ino=15 res=0 errno=0 [ 1221.711637][T10213] appleir 0003:05AC:8241.0016: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 1221.829541][T10213] usb 4-1: USB disconnect, device number 13 [ 1222.023207][ T1053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1222.093735][ T1041] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1222.127360][ T1041] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1222.142640][ T1041] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1222.193994][ T1041] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1222.364738][ T1296] fido_id[1296]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 1222.685084][ T1312] loop3: detected capacity change from 0 to 1024 [ 1222.731685][ T1312] hfsplus: failed to load extents file [ 1222.760845][ T1047] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.159293][ T1061] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1225.296019][ T1326] loop3: detected capacity change from 0 to 256 [ 1225.392396][ T1047] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1225.913744][ T1333] loop3: detected capacity change from 0 to 128 [ 1226.311565][ T1047] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1226.712974][ T1041] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1226.848714][ T1041] 8021q: adding VLAN 0 to HW filter on device team0 [ 1226.896038][T21252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1226.896148][T21252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1226.990474][T21249] bridge0: port 2(bridge_slave_1) entered blocking state [ 1226.990561][T21249] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1227.330013][ T1358] loop8: detected capacity change from 0 to 512 [ 1227.388968][ T1061] veth0_vlan: entered promiscuous mode [ 1227.511895][ T1358] ip_tables: iptables: counters copy to user failed while replacing table [ 1228.232573][ T1061] veth1_vlan: entered promiscuous mode [ 1228.398184][ T1378] loop3: detected capacity change from 0 to 128 [ 1228.419408][ T1378] ext4: Unknown parameter 'dont_measure' [ 1228.979480][ T1047] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1229.014483][ T1047] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1229.081449][ T1047] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1229.121488][ T1047] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1229.143116][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.143762][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.143995][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.144289][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.144517][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.240854][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.241096][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.241378][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.243290][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.243536][ T1386] netlink: 12 bytes leftover after parsing attributes in process `syz.3.8577'. [ 1229.288268][ T1047] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1229.354555][ T1047] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1229.381609][ T1047] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1229.474040][ T1047] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1229.493179][ T1061] veth0_macvtap: entered promiscuous mode [ 1229.531843][ T1061] veth1_macvtap: entered promiscuous mode [ 1230.139174][ T1404] loop8: detected capacity change from 0 to 8192 [ 1230.233122][ T1404] loop8: p1 p2 p3 [ 1230.233179][ T1404] loop8: partition table partially beyond EOD, truncated [ 1230.233394][ T1404] loop8: p1 start 51379968 is beyond EOD, truncated [ 1230.258727][ T1404] loop8: p3 size 100663552 extends beyond EOD, truncated [ 1230.284929][ T1061] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1230.719431][ T1061] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1230.999730][T30194] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.068772][ T1207] udevd[1207]: inotify_add_watch(7, /dev/loop8p3, 10) failed: No such file or directory [ 1231.077560][T21249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.077630][T21249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.078023][T21249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1231.110365][ T1031] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 1231.134393][ T1295] udevd[1295]: inotify_add_watch(7, /dev/loop8p2, 10) failed: No such file or directory [ 1231.175771][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1231.192972][ T1031] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 1231.231554][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1232.313743][ T1031] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 1233.219384][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1233.379115][ T1031] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 1233.424129][ T1031] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1233.724073][ T1435] loop8: detected capacity change from 0 to 256 [ 1233.743806][ T1435] exfat: Invalid uid '0x00000000ffffffff' [ 1233.795445][ T1041] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1233.972046][T21252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1233.972064][T21252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1234.162805][ T1443] loop8: detected capacity change from 0 to 512 [ 1234.176169][ T1443] EXT4-fs (loop8): mounting ext3 file system using the ext4 subsystem [ 1234.189433][ T1443] EXT4-fs (loop8): can't mount with data=, fs mounted w/o journal [ 1234.343428][T21252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1234.343448][T21252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1236.187907][ T1449] loop8: detected capacity change from 0 to 8 [ 1236.379030][ T1047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1236.424050][ T1449] unable to read xattr id index table [ 1236.688409][ T1452] loop3: detected capacity change from 0 to 1024 [ 1236.818487][ T1452] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1236.864654][ T1041] veth0_vlan: entered promiscuous mode [ 1236.889544][ T1047] 8021q: adding VLAN 0 to HW filter on device team0 [ 1236.974677][T21236] bridge0: port 1(bridge_slave_0) entered blocking state [ 1236.974770][T21236] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1237.029056][ T1041] veth1_vlan: entered promiscuous mode [ 1237.069153][T21245] bridge0: port 2(bridge_slave_1) entered blocking state [ 1237.069240][T21245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1238.186141][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 1238.188820][ T1304] aoe: packet could not be sent on ipvlan0. consider increasing tx_queue_len [ 1238.188860][ T1304] aoe: packet could not be sent on ipvlan1. consider increasing tx_queue_len [ 1239.152606][ T1039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1239.298345][ T1031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1239.367750][ T1467] loop4: detected capacity change from 0 to 256 [ 1239.371145][ T1041] veth0_macvtap: entered promiscuous mode [ 1239.474800][ T1041] veth1_macvtap: entered promiscuous mode [ 1239.523186][ T1467] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 1239.624715][ T1031] 8021q: adding VLAN 0 to HW filter on device team0 [ 1239.676282][ T1047] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1239.690493][ T1467] exFAT-fs (loop4): valid_size(562949953421322) is greater than size(10) [ 1239.760769][T21252] bridge0: port 1(bridge_slave_0) entered blocking state [ 1239.760857][T21252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1239.956314][ T1395] bridge0: port 2(bridge_slave_1) entered blocking state [ 1239.956400][ T1395] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1240.005587][ T1041] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1240.375462][ T1041] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1240.466898][T30194] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.466943][T30194] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.466976][T30194] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1240.467008][T30194] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1241.651617][T15284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1241.651637][T15284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.050948][T21252] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1242.050969][T21252] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1242.608848][ T1499] loop3: detected capacity change from 0 to 512 [ 1242.609678][ T1499] EXT4-fs: Ignoring removed nobh option [ 1242.738490][ T1499] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1242.738596][ T1499] ext4 filesystem being mounted at /25/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1243.070447][ T1507] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1243.110511][ T1499] EXT4-fs error (device loop3): ext4_find_dest_de:2052: inode #2: block 3: comm syz.3.8599: bad entry in directory: directory entry overrun - offset=76, inode=16, rec_len=65296, size=2048 fake=0 [ 1245.409627][ T1039] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1245.930090][ T1524] syz.8.8602: vmalloc error: size 4503599627370496, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 1245.930240][ T1524] CPU: 0 UID: 0 PID: 1524 Comm: syz.8.8602 Tainted: G L syzkaller #0 PREEMPT(full) [ 1245.930266][ T1524] Tainted: [L]=SOFTLOCKUP [ 1245.930274][ T1524] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1245.930286][ T1524] Call Trace: [ 1245.930295][ T1524] [ 1245.930304][ T1524] dump_stack_lvl+0xe8/0x150 [ 1245.930339][ T1524] warn_alloc+0x24d/0x270 [ 1245.930361][ T1524] ? __pfx_hlock_conflict+0x10/0x10 [ 1245.930394][ T1524] ? __pfx_warn_alloc+0x10/0x10 [ 1245.930418][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930451][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930474][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930496][ T1524] ? __lock_acquire+0x1511/0x2de0 [ 1245.930523][ T1524] ? disksize_store+0x121/0x3e0 [ 1245.930548][ T1524] __vmalloc_node_range_noprof+0x127/0x1540 [ 1245.930585][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930608][ T1524] ? lock_acquire+0x115/0x350 [ 1245.930631][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930661][ T1524] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 1245.930687][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.930710][ T1524] ? down_write+0x16b/0x200 [ 1245.930737][ T1524] ? __pfx_down_write+0x10/0x10 [ 1245.930763][ T1524] ? disksize_store+0x121/0x3e0 [ 1245.930786][ T1524] vzalloc_noprof+0xb2/0xe0 [ 1245.930808][ T1524] ? disksize_store+0x121/0x3e0 [ 1245.930834][ T1524] disksize_store+0x121/0x3e0 [ 1245.930856][ T1524] ? sysfs_kf_write+0x166/0x260 [ 1245.930880][ T1524] ? __pfx_sysfs_kf_write+0x10/0x10 [ 1245.930899][ T1524] kernfs_fop_write_iter+0x3a4/0x540 [ 1245.930934][ T1524] vfs_write+0x612/0xba0 [ 1245.930964][ T1524] ? __pfx_vfs_write+0x10/0x10 [ 1245.930995][ T1524] ? __fget_files+0x2a/0x420 [ 1245.931018][ T1524] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1245.931045][ T1524] ksys_write+0x150/0x270 [ 1245.931069][ T1524] ? __pfx_ksys_write+0x10/0x10 [ 1245.931101][ T1524] do_syscall_64+0x166/0x520 [ 1245.931124][ T1524] ? trace_irq_disable+0x3b/0x140 [ 1245.931147][ T1524] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.931173][ T1524] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1245.931193][ T1524] RIP: 0033:0x7fb61239e559 [ 1245.931216][ T1524] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1245.931233][ T1524] RSP: 002b:00007fb61327b028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1245.931252][ T1524] RAX: ffffffffffffffda RBX: 00007fb612625fa0 RCX: 00007fb61239e559 [ 1245.931267][ T1524] RDX: 0000000000000002 RSI: 0000200000000140 RDI: 0000000000000003 [ 1245.931280][ T1524] RBP: 00007fb612435ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1245.931293][ T1524] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1245.931305][ T1524] R13: 00007fb612626038 R14: 00007fb612625fa0 R15: 00007ffcedcc1e78 [ 1245.931337][ T1524] [ 1247.517126][ T1524] Mem-Info: [ 1247.517143][ T1524] active_anon:5763 inactive_anon:10093 isolated_anon:0 [ 1247.517143][ T1524] active_file:16909 inactive_file:42734 isolated_file:0 [ 1247.517143][ T1524] unevictable:0 dirty:261 writeback:0 [ 1247.517143][ T1524] slab_reclaimable:9996 slab_unreclaimable:146332 [ 1247.517143][ T1524] mapped:49300 shmem:6414 pagetables:2054 [ 1247.517143][ T1524] sec_pagetables:0 bounce:0 [ 1247.517143][ T1524] kernel_misc_reclaimable:0 [ 1247.517143][ T1524] free:1172929 free_pcp:8233 free_cma:0 [ 1247.517209][ T1524] Node 0 active_anon:23052kB inactive_anon:40372kB active_file:67596kB inactive_file:170748kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:197176kB dirty:1040kB writeback:0kB shmem:25656kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:19168kB pagetables:8060kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1247.517268][ T1524] Node 1 active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:188kB unevictable:0kB isolated(anon):0kB isolated(file):0kB mapped:24kB dirty:4kB writeback:0kB shmem:0kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB kernel_stack:32kB pagetables:156kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB gpu_active:0kB gpu_reclaim:0kB [ 1248.146292][ T1524] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.146353][ T1524] lowmem_reserve[]: 0 2468 2468 2468 2468 [ 1248.146393][ T1524] Node 0 DMA32 free:749888kB boost:0kB min:33984kB low:42480kB high:50976kB reserved_highatomic:0kB free_highatomic:0kB active_anon:23676kB inactive_anon:28308kB active_file:67596kB inactive_file:170748kB unevictable:0kB writepending:1040kB zspages:0kB present:3129332kB managed:2527508kB mlocked:0kB bounce:0kB free_pcp:39588kB local_pcp:39588kB free_cma:0kB [ 1248.146522][ T1524] lowmem_reserve[]: 0 0 0 0 0 [ 1248.146560][ T1524] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB zspages:0kB present:1048580kB managed:0kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.146614][ T1524] lowmem_reserve[]: 0 0 0 0 0 [ 1248.146653][ T1524] Node 1 Normal free:3931268kB boost:0kB min:55916kB low:69892kB high:83868kB reserved_highatomic:0kB free_highatomic:0kB active_anon:0kB inactive_anon:0kB active_file:40kB inactive_file:188kB unevictable:0kB writepending:4kB zspages:0kB present:4194300kB managed:4111104kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 1248.146707][ T1524] lowmem_reserve[]: 0 0 0 0 0 [ 1248.146743][ T1524] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 1248.146889][ T1524] Node 0 DMA32: 4780*4kB (UME) 1943*8kB (UME) 1352*16kB (UME) 911*32kB (UME) 532*64kB (UME) 325*128kB (UME) 190*256kB (UME) 79*512kB (UME) 32*1024kB (UME) 12*2048kB (UM) 108*4096kB (UM) = 749896kB [ 1248.147054][ T1524] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 1248.147156][ T1524] Node 1 Normal: 1*4kB (M) 8*8kB (UM) 14*16kB (UM) 7*32kB (UM) 6*64kB (UM) 6*128kB (UM) 4*256kB (UM) 5*512kB (UM) 2*1024kB (M) 2*2048kB (M) 957*4096kB (UM) = 3931268kB [ 1248.147323][ T1524] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.147340][ T1524] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 1248.147355][ T1524] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 1248.147371][ T1524] Node 1 hugepages_total=1 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 1248.147386][ T1524] 63190 total pagecache pages [ 1248.147395][ T1524] 1 pages in swap cache [ 1248.147404][ T1524] Free swap = 124992kB [ 1248.147413][ T1524] Total swap = 124996kB [ 1248.147422][ T1524] 2097051 pages RAM [ 1248.147429][ T1524] 0 pages HighMem/MovableOnly [ 1248.147437][ T1524] 433558 pages reserved [ 1248.147446][ T1524] 0 pages cma reserved [ 1249.071900][ T1540] loop2: detected capacity change from 0 to 2048 [ 1249.143383][ T1540] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1249.218589][ T1047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.705266][ T1031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1249.890958][ T1555] loop8: detected capacity change from 0 to 128 [ 1249.924678][ T1558] loop2: detected capacity change from 0 to 8 [ 1250.517818][ T1561] ptrace attach of "ci-upstream-kasan-gce-root/syz-executor exec"[1053] was attempted by "ci-upstream-kasan-gce-root/syz-executor exec"[1561] [ 1250.803250][ T31] audit: type=1800 audit(1792214886.833:1478): pid=1558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.2.8608" name="file1" dev="loop2" ino=5 res=0 errno=0 [ 1251.494773][ T1576] loop2: detected capacity change from 0 to 512 [ 1251.523277][ T1576] EXT4-fs (loop2): Test dummy encryption mode enabled [ 1251.550967][ T1574] loop4: detected capacity change from 0 to 2048 [ 1251.579784][ T1576] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e040e0ad, mo2=0002] [ 1251.579891][ T1576] System zones: 1-12 [ 1251.622837][ T1576] EXT4-fs (loop2): mounted filesystem 00000005-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1251.733651][ T1574] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 1251.828645][ T1580] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1252.049444][ T1041] EXT4-fs (loop2): unmounting filesystem 00000005-0000-0000-0000-000000000000. [ 1252.422984][ T1590] loop2: detected capacity change from 0 to 1024 [ 1252.525811][ T1590] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1252.666386][ T1595] loop8: detected capacity change from 0 to 2048 [ 1252.851844][ T1595] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1252.896100][ T1047] veth0_vlan: entered promiscuous mode [ 1252.977272][ T1041] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.068493][ T1047] veth1_vlan: entered promiscuous mode [ 1253.512504][ T1047] veth0_macvtap: entered promiscuous mode [ 1253.601845][ T1047] veth1_macvtap: entered promiscuous mode [ 1253.862926][ T1047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1253.966034][ T1047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1253.991883][T17084] Bluetooth: hci8: connection err: -111 [ 1254.082826][ T1395] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.082988][ T1395] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.083325][ T1395] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.083585][ T1395] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1254.230969][ T1053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1255.129210][ T1043] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1255.146296][ T1043] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1255.198394][ T1043] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1255.199346][ T1043] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1255.201926][ T1043] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1255.342973][ T1635] FAULT_INJECTION: forcing a failure. [ 1255.342973][ T1635] name failslab, interval 1, probability 0, space 0, times 0 [ 1255.343008][ T1635] CPU: 0 UID: 0 PID: 1635 Comm: syz.4.8626 Tainted: G L syzkaller #0 PREEMPT(full) [ 1255.343034][ T1635] Tainted: [L]=SOFTLOCKUP [ 1255.343043][ T1635] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1255.343055][ T1635] Call Trace: [ 1255.343064][ T1635] [ 1255.343073][ T1635] dump_stack_lvl+0xe8/0x150 [ 1255.343108][ T1635] should_fail_ex+0x410/0x560 [ 1255.343142][ T1635] should_failslab+0xa8/0x100 [ 1255.343172][ T1635] ? anon_vma_clone+0x3f3/0x9f0 [ 1255.343193][ T1635] kmem_cache_alloc_noprof+0xa1/0x600 [ 1255.343215][ T1635] ? anon_vma_clone+0x3f3/0x9f0 [ 1255.343239][ T1635] ? kmem_cache_alloc_noprof+0x156/0x600 [ 1255.343261][ T1635] ? anon_vma_clone+0x3f3/0x9f0 [ 1255.343288][ T1635] anon_vma_clone+0x3f3/0x9f0 [ 1255.343317][ T1635] anon_vma_fork+0x177/0x540 [ 1255.343342][ T1635] ? dup_mmap+0x875/0x1dc0 [ 1255.343366][ T1635] dup_mmap+0x954/0x1dc0 [ 1255.343404][ T1635] ? __pfx_dup_mmap+0x10/0x10 [ 1255.343425][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.343449][ T1635] ? do_raw_spin_lock+0x12b/0x2f0 [ 1255.343493][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.343516][ T1635] ? lock_acquire+0x115/0x350 [ 1255.343540][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.343578][ T1635] copy_mm+0x115/0x480 [ 1255.343609][ T1635] copy_process+0x1ea3/0x4480 [ 1255.343634][ T1635] ? futex_unqueue+0x211/0x240 [ 1255.343673][ T1635] ? copy_process+0xd1c/0x4480 [ 1255.343716][ T1635] ? __pfx_copy_process+0x10/0x10 [ 1255.343745][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.343783][ T1635] kernel_clone+0x2d7/0x940 [ 1255.343818][ T1635] ? __pfx_kernel_clone+0x10/0x10 [ 1255.343856][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.343879][ T1635] ? do_futex+0x3e7/0x4e0 [ 1255.343913][ T1635] __x64_sys_clone+0x1b6/0x230 [ 1255.343946][ T1635] ? __pfx___x64_sys_clone+0x10/0x10 [ 1255.343990][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.344013][ T1635] ? rcu_is_watching+0x16/0xb0 [ 1255.344039][ T1635] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1255.344074][ T1635] do_syscall_64+0x166/0x520 [ 1255.344098][ T1635] ? trace_irq_disable+0x3b/0x140 [ 1255.344121][ T1635] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.344147][ T1635] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1255.344167][ T1635] RIP: 0033:0x7fac8bb9e559 [ 1255.344186][ T1635] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1255.344203][ T1635] RSP: 002b:00007fac8ca27fd8 EFLAGS: 00000206 ORIG_RAX: 0000000000000038 [ 1255.344225][ T1635] RAX: ffffffffffffffda RBX: 00007fac8be25fa0 RCX: 00007fac8bb9e559 [ 1255.344244][ T1635] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000411 [ 1255.344257][ T1635] RBP: 00007fac8bc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1255.344270][ T1635] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000000 [ 1255.344282][ T1635] R13: 00007fac8be26038 R14: 00007fac8be25fa0 R15: 00007ffd93b92488 [ 1255.344314][ T1635] [ 1255.946944][ T1641] loop3: detected capacity change from 0 to 256 [ 1256.072910][ T1641] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010321, chksum : 0x3a8a43f6, utbl_chksum : 0xe619d30d) [ 1256.155131][ T1641] exFAT-fs (loop3): valid_size(562949953421322) is greater than size(10) [ 1256.441754][ T1043] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1256.478428][ T1043] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1256.495884][ T1043] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1256.524900][ T1043] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1256.525479][ T1043] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1257.436543][T17084] Bluetooth: hci1: command tx timeout [ 1257.780646][ T1659] netlink: 20 bytes leftover after parsing attributes in process `syz.8.8630'. [ 1258.678050][T17084] Bluetooth: hci2: command tx timeout [ 1259.325119][ T1672] loop8: detected capacity change from 0 to 1024 [ 1259.353971][ T1672] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1259.454071][ T1672] EXT4-fs (loop8): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1259.454161][ T1672] ext4 filesystem being mounted at /28/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1259.481641][T17084] Bluetooth: hci1: command tx timeout [ 1259.903080][ T1672] EXT4-fs error (device loop8): ext4_validate_block_bitmap:445: comm syz.8.8632: bg 0: block 112: padding at end of block bitmap is not set [ 1259.952035][ T1672] EXT4-fs (loop8): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 51 with error 28 [ 1259.952064][ T1672] EXT4-fs (loop8): This should not happen!! Data will be lost [ 1259.952064][ T1672] [ 1259.952079][ T1672] EXT4-fs (loop8): Total free blocks count 0 [ 1259.952091][ T1672] EXT4-fs (loop8): Free/Dirty block details [ 1259.952129][ T1672] EXT4-fs (loop8): free_blocks=0 [ 1259.952157][ T1672] EXT4-fs (loop8): dirty_blocks=64 [ 1259.952169][ T1672] EXT4-fs (loop8): Block reservation details [ 1259.952181][ T1672] EXT4-fs (loop8): i_reserved_data_blocks=4 [ 1260.344047][ T1053] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 1260.382564][ T1694] loop4: detected capacity change from 0 to 164 [ 1260.497596][ T1694] iso9660: Corrupted directory entry in block 2 of inode 1792 [ 1260.756571][T17084] Bluetooth: hci2: command tx timeout [ 1261.546927][ T1705] bridge0: port 1(bridge_slave_0) entered disabled state [ 1261.562998][T17084] Bluetooth: hci1: command tx timeout [ 1261.621537][ T1705] bridge0: port 2(bridge_slave_1) entered disabled state [ 1261.945675][ T1718] loop4: detected capacity change from 0 to 512 [ 1261.973238][ T1718] EXT4-fs: The data=journal mount option is deprecated and support will be removed in January 2028 [ 1261.973255][ T1718] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 1262.003868][ T1718] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1262.048418][ T1720] loop2: detected capacity change from 0 to 128 [ 1262.081346][ T1720] UDF-fs: error (device loop2): udf_read_tagged: read failed, block=256, location=256 [ 1262.119669][ T33] INFO: task syz.7.8291:32450 blocked for more than 160 seconds. [ 1262.119695][ T33] Tainted: G L syzkaller #0 [ 1262.119707][ T33] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1262.119717][ T33] task:syz.7.8291 state:D stack:28512 pid:32450 tgid:32449 ppid:25914 task_flags:0x400140 flags:0x00080002 [ 1262.119781][ T33] Call Trace: [ 1262.119789][ T33] [ 1262.119802][ T33] __schedule+0x17db/0x58f0 [ 1262.119856][ T33] ? __pfx___schedule+0x10/0x10 [ 1262.119886][ T33] ? schedule+0x90/0x2b0 [ 1262.119911][ T33] schedule+0x164/0x2b0 [ 1262.119934][ T33] schedule_preempt_disabled+0x13/0x30 [ 1262.119956][ T33] __mutex_lock+0x7c1/0x1550 [ 1262.119980][ T33] ? kasan_save_track+0x3e/0x80 [ 1262.120009][ T33] ? __mutex_lock+0x5d4/0x1550 [ 1262.120037][ T33] ? write_ports+0xb5/0xd10 [ 1262.120059][ T33] ? __pfx___mutex_lock+0x10/0x10 [ 1262.120102][ T33] write_ports+0xb5/0xd10 [ 1262.120125][ T33] ? __pfx_write_ports+0x10/0x10 [ 1262.120145][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.120177][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.120210][ T33] ? _copy_from_user+0x94/0xb0 [ 1262.120230][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.120253][ T33] ? simple_transaction_get+0x12d/0x160 [ 1262.120288][ T33] nfsctl_transaction_write+0x10f/0x160 [ 1262.120310][ T33] ? __pfx_nfsctl_transaction_write+0x10/0x10 [ 1262.120331][ T33] vfs_write+0x296/0xba0 [ 1262.120361][ T33] ? __pfx_vfs_write+0x10/0x10 [ 1262.120384][ T33] ? __fget_files+0x2a/0x420 [ 1262.120406][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.120429][ T33] ? __fget_files+0x3a2/0x420 [ 1262.120447][ T33] ? __fget_files+0x2a/0x420 [ 1262.120469][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.120496][ T33] ksys_write+0x150/0x270 [ 1262.120520][ T33] ? __pfx_ksys_write+0x10/0x10 [ 1262.120552][ T33] do_syscall_64+0x166/0x520 [ 1262.120576][ T33] ? trace_irq_disable+0x3b/0x140 [ 1262.120599][ T33] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.120624][ T33] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1262.120645][ T33] RIP: 0033:0x7f832bb9e559 [ 1262.120665][ T33] RSP: 002b:00007f832c996028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 1262.121233][ T33] RAX: ffffffffffffffda RBX: 00007f832be25fa0 RCX: 00007f832bb9e559 [ 1262.121249][ T33] RDX: 0000000000000005 RSI: 0000200000000100 RDI: 0000000000000005 [ 1262.121262][ T33] RBP: 00007f832bc35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 1262.121275][ T33] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1262.121287][ T33] R13: 00007f832be26038 R14: 00007f832be25fa0 R15: 00007ffff9640138 [ 1262.121319][ T33] [ 1262.121368][ T33] [ 1262.121368][ T33] Showing all locks held in the system: [ 1262.121378][ T33] locks held by khungtaskd/33: 1, last CPU#0: [ 1262.121393][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1262.121448][ T33] locks held by kworker/u8:3/50: 2, on CPU#0: [ 1262.121462][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.121519][ T33] #1: ffffc90000bb7c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.121591][ T33] locks held by udevd/4979: 1, last CPU#0: [ 1262.121605][ T33] #0: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1262.121661][ T33] locks held by getty/13731: 2, on CPU#1: [ 1262.121675][ T33] #0: ffff8880359a90a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1262.121733][ T33] #1: ffffc9000318f2e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45a/0x1360 [ 1262.121795][ T33] locks held by kworker/u8:24/21245: 7, last CPU#0: [ 1262.121809][ T33] #0: ffff88801d2ce140 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.121864][ T33] #1: ffffc90005a3fc40 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.121920][ T33] #2: ffffffff91247568 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf5/0x810 [ 1262.121968][ T33] #3: ffff88807d5a0128 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x129/0x420 [ 1262.122019][ T33] #4: ffff88807f3d3258 (&devlink->lock_key#36){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x142/0x420 [ 1262.122075][ T33] #5: ffffffff91255dc0 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0x173/0x800 [ 1262.122130][ T33] #6: ffff8880865ece70 (&dev_instance_lock_key#23){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5bb/0x2140 [ 1262.122204][ T33] locks held by kworker/u8:2/31248: 2, on CPU#0: [ 1262.122218][ T33] #0: ffff88801c0a4140 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.122275][ T33] #1: ffffc90005247c40 ((work_completion)(&sub_info->work)){+.+.}-{0:0}, at: process_scheduled_works+0x97a/0x1630 [ 1262.122331][ T33] locks held by syz.3.8242/32284: 3, on CPU#0: [ 1262.122345][ T33] #0: ffff888034210d30 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1262.122394][ T33] #1: ffff8880824a4460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1262.122448][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_threads+0x3b1/0x610 [ 1262.122495][ T33] locks held by syz.7.8291/32450: 3, on CPU#1: [ 1262.122509][ T33] #0: ffff88803279b270 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x246/0x320 [ 1262.122556][ T33] #1: ffff888053a22460 (sb_writers#12){.+.+}-{0:0}, at: vfs_write+0x22b/0xba0 [ 1262.122609][ T33] #2: ffffffff9009f9a0 (nfsd_mutex){+.+.}-{4:4}, at: write_ports+0xb5/0xd10 [ 1262.122661][ T33] locks held by udevd/1566: 3, last CPU#0: [ 1262.122675][ T33] #0: ffff888024892a68 (&sb->s_type->i_mutex_key#10){++++}-{4:4}, at: blkdev_read_iter+0x2df/0x420 [ 1262.122744][ T33] #1: ffff888024892c00 (mapping.invalidate_lock){++++}-{4:4}, at: force_page_cache_ra+0x25e/0x2e0 [ 1262.122803][ T33] #2: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: blk_mq_dispatch_queue_requests+0x55b/0x800 [ 1262.122862][ T33] locks held by dhcpcd-run-hook/1665: 1, last CPU#0: [ 1262.122876][ T33] #0: ffff8880523fa800 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1262.122925][ T33] locks held by modprobe/1715: 2, last CPU#0: [ 1262.122939][ T33] #0: ffff888047367180 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1262.122986][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1262.123039][ T33] locks held by modprobe/1716: 2, last CPU#0: [ 1262.123053][ T33] #0: ffff888047363440 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x2d8/0x9f0 [ 1262.123100][ T33] #1: ffffffff8fd5c8e0 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0x8f/0x2550 [ 1262.123152][ T33] locks held by syz.4.8643/1718: 4, on CPU#0: [ 1262.123166][ T33] #0: ffff888021f20430 (&lo->lo_mutex){+.+.}-{4:4}, at: lo_ioctl+0x7dd/0x2010 [ 1262.123216][ T33] #1: ffff888026a1f658 (&q->limits_lock){+.+.}-{4:4}, at: lo_ioctl+0x15bb/0x2010 [ 1262.123265][ T33] #2: ffff888026a1f020 (&q->q_usage_counter(io)#24){++++}-{0:0}, at: lo_ioctl+0x1622/0x2010 [ 1262.123321][ T33] #3: ffff888026a1f058 (&q->q_usage_counter(queue)#8){+.+.}-{0:0}, at: lo_ioctl+0x1622/0x2010 [ 1262.123376][ T33] locks held by syz.2.8644/1720: 1, on CPU#0: [ 1262.123390][ T33] #0: ffff8880868c20e8 (&type->s_umount_key#57/1){+.+.}-{4:4}, at: sget_fc+0x9d4/0x1a60 [ 1262.123459][ T33] locks held by syz-executor/1721: 1, last CPU#0: [ 1262.123473][ T33] #0: ffff88807452d448 (vm_lock){++++}-{0:0}, at: lock_vma_under_rcu+0x1d1/0x500 [ 1262.123523][ T33] [ 1262.123529][ T33] ============================================= [ 1262.123529][ T33] [ 1262.123538][ T33] NMI backtrace for cpu 0 [ 1262.123552][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.123576][ T33] Tainted: [L]=SOFTLOCKUP [ 1262.123584][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1262.123596][ T33] Call Trace: [ 1262.123604][ T33] [ 1262.123613][ T33] dump_stack_lvl+0xe8/0x150 [ 1262.123642][ T33] nmi_cpu_backtrace+0x274/0x2d0 [ 1262.123674][ T33] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 1262.123707][ T33] nmi_trigger_cpumask_backtrace+0x17d/0x390 [ 1262.123745][ T33] sys_info+0x135/0x170 [ 1262.123772][ T33] watchdog+0xfd7/0x1030 [ 1262.123801][ T33] ? watchdog+0x1c7/0x1030 [ 1262.123829][ T33] kthread+0x38b/0x480 [ 1262.123850][ T33] ? __pfx_watchdog+0x10/0x10 [ 1262.123870][ T33] ? __pfx_kthread+0x10/0x10 [ 1262.123906][ T33] ret_from_fork+0x514/0xb70 [ 1262.123930][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1262.123949][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1262.123972][ T33] ? __switch_to+0xc89/0x1420 [ 1262.124002][ T33] ? __pfx_kthread+0x10/0x10 [ 1262.124023][ T33] ret_from_fork_asm+0x1a/0x30 [ 1262.124056][ T33] [ 1262.124068][ T33] Kernel panic - not syncing: hung_task: blocked tasks [ 1262.957741][ T33] CPU: 0 UID: 0 PID: 33 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 1262.968404][ T33] Tainted: [L]=SOFTLOCKUP [ 1262.972708][ T33] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/26/2026 [ 1262.982757][ T33] Call Trace: [ 1262.986030][ T33] [ 1262.988945][ T33] vpanic+0x56d/0xa60 [ 1262.992928][ T33] ? __pfx_vpanic+0x10/0x10 [ 1262.997425][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1263.003071][ T33] ? console_srcu_read_unlock+0x3a/0x60 [ 1263.008618][ T33] panic+0xc5/0xd0 [ 1263.012335][ T33] ? __pfx_panic+0x10/0x10 [ 1263.016753][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1263.022385][ T33] ? nmi_cpu_backtrace+0x2b0/0x2d0 [ 1263.027508][ T33] ? nmi_trigger_cpumask_backtrace+0x24d/0x390 [ 1263.033665][ T33] watchdog+0x1030/0x1030 [ 1263.037993][ T33] ? watchdog+0x1c7/0x1030 [ 1263.042404][ T33] kthread+0x38b/0x480 [ 1263.046456][ T33] ? __pfx_watchdog+0x10/0x10 [ 1263.051119][ T33] ? __pfx_kthread+0x10/0x10 [ 1263.055731][ T33] ret_from_fork+0x514/0xb70 [ 1263.060312][ T33] ? __pfx_ret_from_fork+0x10/0x10 [ 1263.065412][ T33] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1263.071029][ T33] ? __switch_to+0xc89/0x1420 [ 1263.075699][ T33] ? __pfx_kthread+0x10/0x10 [ 1263.080279][ T33] ret_from_fork_asm+0x1a/0x30 [ 1263.085039][ T33] [ 1263.088080][ T33] Kernel Offset: disabled [ 1263.092392][ T33] Rebooting in 86400 seconds..