last executing test programs: 5m17.313427207s ago: executing program 2 (id=9): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}}, 0x0) 5m16.585409431s ago: executing program 2 (id=10): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f0000000080)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x278, &(0x7f0000000200)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) truncate(&(0x7f0000000000)='./file1\x00', 0x5e8c) 5m15.323428754s ago: executing program 2 (id=14): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)={0x73622a85, 0x0, 0x2}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x800, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x4c, 0x0, &(0x7f0000000800)=[@transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0xfc, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000240)={0x30, 0x30, 0x30}}, 0x1000}], 0x0, 0x0, 0x0}) 5m14.998558399s ago: executing program 2 (id=16): mkdir(&(0x7f0000000040)='./file1\x00', 0x1e) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000280), 0x0, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0, 0x0) r1 = fanotify_init(0xf00, 0x1001) fanotify_mark(r1, 0x105, 0x5000003a, r0, 0x0) r2 = openat$dir(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0, 0x0) mknodat(r2, &(0x7f00000000c0)='./file1\x00', 0x0, 0x0) chdir(&(0x7f0000000140)='./bus\x00') acct(&(0x7f00000001c0)='./file1\x00') unlink(&(0x7f0000000180)='./file1\x00') 5m14.799365034s ago: executing program 2 (id=17): r0 = socket$packet(0x11, 0x3, 0x300) r1 = dup(r0) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r2, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r2, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r2, 0x4008af03, &(0x7f0000000340)) r4 = dup(r3) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f0000000000)={0x1, r4}) ioctl$VHOST_NET_SET_BACKEND(r2, 0x4008af30, &(0x7f00000003c0)={0x1, r1}) 5m14.417513382s ago: executing program 2 (id=19): fanotify_mark(0xffffffffffffffff, 0x1, 0x8000011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 5m14.298496891s ago: executing program 32 (id=19): fanotify_mark(0xffffffffffffffff, 0x1, 0x8000011, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) shutdown(0xffffffffffffffff, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0xfec0ffffffffffff, 0x1c9ae7fffe9a6f34}}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0xe) shutdown(r0, 0x1) recvmmsg(r0, &(0x7f0000000840)=[{{0x0, 0x41, 0x0}}], 0x414, 0x406, 0x0) 5m6.008325106s ago: executing program 0 (id=50): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x58e, &(0x7f00000001c0)={[{@errors_remount}, {@lazytime}, {@errors_continue}, {@block_validity}, {@block_validity}, {@quota}, {@jqfmt_vfsv0}]}, 0x1, 0x451, &(0x7f0000000780)="$eJzs289vFFUcAPDvTFug/LAV8Qc/1CoaG3+0tKBy8KLRxIMmJl7wWNtCkIUaWhMhRNEYPBoS78ajiX+BJ70Y9WTiVe+GhBguoqc1szvD/mC3tMu2g+znkwx9b+YN7333zdt9M283gIE1kf2TROyMiN8jYqyebS0wUf9z/dqF+X+uXZhPolp9+6+kVu7vaxfmi6LFeTvyzGQakX6WxP4O9S6fO39qrlJZPJvnp1dOvz+9fO78cydPz51YPLF4Zvbo0SOHZ158Yfb5vsR5b9bWfR8tHdj7+juX35w/dvndn78dKuJvi6NPJlY7+GS12ufqyrWrKZ0Ml9gQ1iUbA1l3jdTG/1gMRaPzxuK1T0ttHLChqrkuhy9WgbtYEmW3AChH8UGf3f8W2+bNPsp39eX6DVAW9/V8qx8ZjjQvM9J2f9tPExFx7OK/X2VbbMxzCACAFt9n859nO83/0nigqdw9+drQeL6Wsjsi7ouIPRFxf0St7IMR8dA6629fJLl5/pNe6SmwNcrmfy/la1ut879i9hfjQ3luVy3+keT4ycriofw1mYyRrVl+ZpU6fnj1ty+6HWue/2VbVn8xF8zbcWV4a+s5C3Mrc7cTc7Orn0TsG+4Uf3JjJSCJiL0Rsa/HOk4+/c2BbsduHf8q+rDOVP064ql6/1+MtvgLyerrk9PborJ4aLq4Km72y6+X3upW/23F3wdZ/2/veP3fiH88aV6vXV5/HZf++LzrPc1UT9d/Y8eW/O+HcysrZ2citiRv1BvdvH+2cW6RL8pn8U8e7Dz+d0fjldgfEdlF/HBEPBIRj+Z991hEPB4RB9viar6//umVJ97rFv+d0P8Lbf0/3lqkrf8biS3RvqdzYujUj9+1/o+N5Nre/47UUpP5nrW8/62lXb1dzQAAAPD/k0bEzkjSqRvp0XRqqv4d/j2xPa0sLa88c3zpgzML9d8IjMdIWjzpGmt6HjqT39YX+dm2/OH8ufGXQ6O1/NT8UmWh7OBhwO24afyntfGf+XOo7NYBG87vtWBwNY3/pMx2AJvP5z8MLuMfBleH8T9aRjuAzdfp8//jEtoBbL628W/ZDwaI+38YXMY/DK7m8e8LADAwlkfj1j+S75TYFr2cJXHXJCK9I5rRn0TS4yhYa2Jn2QGuP1H2OxMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAEB//BcAAP//pgHvrg==") r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) getdents(r0, &(0x7f0000000500)=""/49, 0x31) bpf$TOKEN_CREATE(0x24, &(0x7f0000000140)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"/2225], 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) r1 = syz_io_uring_setup(0x4b5, &(0x7f00000004c0)={0x0, 0x80086e1, 0x2, 0x8, 0x1}, &(0x7f0000010080), &(0x7f0000000000)) setrlimit(0x40000000000008, &(0x7f0000000000)) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r1, 0x10, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000540)=[{0x0}, {&(0x7f0000000340), 0xa002a0}], &(0x7f00000005c0), 0x2}, 0x20) syz_clone3(&(0x7f00000014c0)={0x0, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0}, 0x5c) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x12, 0xc3, 0x5b, 0x40, 0x403, 0x6010, 0xc698, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xf5, 0x75, 0xf6}}]}}]}}, 0x0) unshare(0x40080) 5m2.816481472s ago: executing program 0 (id=57): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000080)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) listen(r1, 0x0) accept4$rose(r1, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) ioctl$vim2m_VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) 5m1.064432932s ago: executing program 0 (id=62): syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) memfd_secret(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) syz_mount_image$btrfs(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x16, &(0x7f0000000180), 0x9, 0x50f6, &(0x7f0000000340)="$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") r0 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r0, 0x0) fallocate(r0, 0x0, 0x0, 0x1000f4) r1 = open(&(0x7f00000005c0)='./bus\x00', 0x64842, 0x0) pwritev2(r1, &(0x7f0000000240)=[{&(0x7f0000000000)="85", 0x78c00}], 0x1, 0x7a00, 0x0, 0x3) read$FUSE(r1, &(0x7f0000005480)={0x2020}, 0x2020) write$FUSE_DIRENT(r0, &(0x7f0000005440)=ANY=[], 0x10) 4m59.538724495s ago: executing program 0 (id=70): syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000c80)='./file1\x00', 0x0, &(0x7f0000000180)=ANY=[], 0x1, 0xc4d, &(0x7f0000001b40)="$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") r0 = creat(&(0x7f0000000040)='./bus\x00', 0x0) lseek(r0, 0x7fff, 0x0) r1 = creat(&(0x7f0000000100)='./bus\x00', 0x0) fcntl$setstatus(r1, 0x4, 0x6100) r2 = open(&(0x7f0000000180)='./bus\x00', 0x14927e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27fffff, 0x4002011, r2, 0x0) ftruncate(r1, 0x1f) write$FUSE_ATTR(r0, &(0x7f0000000600)={0x78}, 0x78) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) write$cgroup_type(r1, &(0x7f0000000200), 0x175d9003) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b3f2}) 4m58.054522065s ago: executing program 0 (id=76): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000500), 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) setsockopt$CAIFSO_REQ_PARAM(0xffffffffffffffff, 0x116, 0x80, &(0x7f0000000040), 0x0) write$RDMA_USER_CM_CMD_NOTIFY(r0, &(0x7f00000005c0)={0xf, 0x8}, 0x10) 4m57.386404185s ago: executing program 0 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0x7, {0x0, 0x0, 0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 4m56.64754046s ago: executing program 33 (id=79): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000240)={0x1d, r3, 0x7, {0x0, 0x0, 0x2}}, 0x18) r4 = socket$can_j1939(0x1d, 0x2, 0x7) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r7, &(0x7f0000000080)={0x1d, r6, 0x0, {0x0, 0x0, 0x4}}, 0x18) sendmsg$can_j1939(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2c, 0x0, {0x0, 0x0, 0x74, r8, {0x2, 0x4}, {0xa, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40804}, 0x0) 4m23.317716191s ago: executing program 1 (id=179): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r2 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000100)=0xd) r3 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x103902, 0x0) r4 = dup(r3) write$UHID_INPUT(r4, &(0x7f0000001040)={0x18, {"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", 0x100d}}, 0xfffffdef) 4m18.714667473s ago: executing program 1 (id=191): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, 0x0}) socket$inet6_icmp(0xa, 0x2, 0x3a) sched_setscheduler(0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000280), 0x9) r2 = openat$cgroup_procs(r0, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_clone(0x82a6000, 0x0, 0x0, 0x0, 0x0, 0x0) r4 = openat$cgroup_ro(r3, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4m17.551804779s ago: executing program 1 (id=197): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$TIOCL_GETKMSGREDIRECT(r3, 0x4b4d, &(0x7f00000000c0)) 4m16.233700817s ago: executing program 1 (id=199): r0 = syz_usb_connect(0x0, 0x1cb, &(0x7f0000000540)=ANY=[@ANYBLOB="12010000122f0d4071040403dfe4000000010902b901010000003f0904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000ac0)={0x84, &(0x7f0000000600)={0x20}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 4m12.321515077s ago: executing program 1 (id=208): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x10, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010102, @remote, {[@timestamp={0x44, 0x10, 0x1, 0x0, 0x0, [0x0, 0x0, 0x0]}, @timestamp_prespec={0x44, 0x1c, 0x0, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x31}}, {}, {@broadcast, 0x52b3}]}]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0x10c000}) ioctl$KVM_NMI(r4, 0xae9a) ioctl$KVM_RUN(r4, 0xae80, 0x0) 4m10.79837681s ago: executing program 1 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/184, 0xb8) 3m55.69994178s ago: executing program 34 (id=213): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000004b64ffec850000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r3}, 0x10) syz_mount_image$exfat(&(0x7f0000002000), &(0x7f0000005840)='./file0\x00', 0x1000806, &(0x7f00000016c0)=ANY=[@ANYRES16=0x0, @ANYRES16, @ANYBLOB="2c666d61736b3d30303030b8463c983030303030303030303030303030362c696f6368617273652acf418b743d637e3737352c6769643d00", @ANYRESHEX=0x0, @ANYBLOB=',dmask=00000000000000000000027,errors=continue,errors=remount-ro,namecase=1,fmask=00000000000000000000003,umask=00000000000000000000003,allow_utime=00000000000000000000200,\x00'], 0x9, 0x1505, &(0x7f0000000180)="$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") r4 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r4, &(0x7f0000000100)=""/184, 0xb8) 16.014164508s ago: executing program 5 (id=719): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c2cc0b069669b5af546f644c39bedd627181d27d9c185aae5d910550f08822c6fec60302779b9e812403a2ff826781b4c761bd14eb7515ae224260c9534891afdd05d18b2ffe91f4052766a0b9fe3955bfb1866142e7c1caceb88de7d6e8a5c08ce052bb461469a72f0c7ee914ca5c98c19442d0262a6d04a8e3e29360a9b5871812e08542d54775f5843d70b15871bc247e30d66b83560c014f5"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 11.879616323s ago: executing program 5 (id=723): socket$can_raw(0x1d, 0x3, 0x1) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r5}, 0x18) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)={0x14, r4, 0x801, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x24008000}, 0x8000) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) 11.609294203s ago: executing program 4 (id=726): socket$unix(0x1, 0x2, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) syz_mount_image$udf(&(0x7f0000000000), &(0x7f0000000f80)='./file0\x00', 0x4000, &(0x7f0000002480)=ANY=[], 0x2, 0xc47, &(0x7f0000000fc0)="$eJzs3UFsHNd9B+D/Gy3FlYxWTJwoThoXm7ZIZcZyZUkxFatwVzXNNoAsE6GYWwCuSEpdmCIJkmpkI22ZXnroIUBR9JATgdYokKKB0RRBj0zrAsnFhyKnnogWNoKiB7YIkFPAYGbfUkuatBlRlCjp+2zqtzv73sx789YzsqA3LwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACAiN9/5dKZ59ODbgUAcD9dGfvKmbPu/wDwWLnq//8BAAAAAAAAAAAAAOCwS1HEk5Fi/sp6mqjed9Qvt/tu3R4fHtm52rFU1TxSlS9/6s+fPXf+iy8MXejm5fbsh9S/1z4Tr41dvdR4ee7m/ML04uL0VGN8tj05NzW95z3st/52g9UJaNx8/dbU9euLjbPPndvy8e2B9/ufODlwceiZ0093y44Pj4yM3SlS7y1fu+uGdOw2w+NoFHE6Ujz73Z+kVkQUsf9zUb+/Y7/dsaoTg1UnxodHqo7MtFuzS+WHo90TUUQ0eio1u+do57GIWt997cPumhHLZfPLBg+W3Rubby20rs1MN0ZbC0vtpfbc7GjqtLbsTyOKuJAiViJirf+Du+uLImqR4tsn1tO1iDjSPQ9fqCYG796O4gD7uAdlOxt9ESvFQzBmh1h/FPFqpPjpO6diMl9nqmvN5yNeLfP7EW+V+VJEKr8Y5yPe2+F7xMOpFkX8ZTn+F9fTVHU96F5XLn+18eXZ63M9ZbvXlV/y/vCBK8UDuj8c25b3xyG/NtWjiFZ1xV9Pd/+bHQAAAAAAAAAAAAAAAADutWNRxKcjxSv/8cfVvOKo5qWfuDj0BwO/0jtn/KmP2E9Z9rmIWC72Nif3aJ4YOJpGU3rAc4kfZ/Uo4k/y/L9vPujGAAAAAAAAAAAAAAAAAAAAPNaK+HGkePHdU2kletcUb8/eaFxtXZvprArbXfu3u2b6xsbGRiN1splzIudyzpWcqznXOlnN+6/qF7l+zomcyzlXcq7mXMsZR3L9nM2cEzmXc67kXM25ljNquX7OZs6JnMs5V3Ku5lzLGYdk7V4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgEdJEUX8PFJ86+vrKVJENCMmopOr/Q+6dQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABAqT8V8b1I0fjD5ua2WkSk6t+OU+Uv56N5tMyPR3OozJeieSlnq8pa85sPoP3sT18q4keRor/+9uaA5/Hv67zb/BrEW9+48+4ztU4e6X448H7/EydPXBwa+fWndnuddmrA4OX27K3bjfHhkZGxns21fPSP92wbyMct7k3XiYjFN958vTUzM71w9y/Kr8AuH21sbPxZeZT9HuKQvEi1XXv6WL4oh/YQNOMAO1g7FM14YIPLo668/78XKX7n3f/s3vCr+39ts8TmHT5+9qd37v8vbt/RHu//te318v2/vKfvdP9/smfbi/l3I321iPrSzfm+kxH1xTfePN2+2boxfWN69vyZM18aGvrSuTN9RyPq19sz0z2v9n+uAAAAAAAAAAAAAAAAAO6rVMTvRYrWj9ZTIyJuV/O1Bi4OPXP66SNxpJpvtWXe9mtjVy81Xp67Ob8wvbg4PdUYn21Pzk1N7/Vw9Wq61/jwyIF05iMdO+D2H6u/PDf/xkL7xh8t7fj58fqla4tLC63JnT+OY1FENHu3DFYNHh8eqRo9027NVlVHd5xM/8vrS0X8V6SYPN9In8vb8vz/7TP8t8z/X96+owOa//+xnm3lMVMq4meR4rf/6qn4XNXO4/GBc5bL/V2kGLzw2Vwujpblum3oPFegMzOwLPt/keKffr61bHc+5JN3yj6/5xP7kCjH/0Sk+N5ffCd+I2/b+vyHncf/+PYdHdD4f6Jn2/EtzyvYd9fJ4386Urz05Nvxm3nbhz3/o/vsjVO58ObzOQ5o/D/Zs20gH/e37k3XAQAAAAAAAAAAHmp9qYi/jxQ/GKmlF/K2vfz9v6ntOzqgv//1qZ5tU/dmvaKPfLHvkwoAAAAAh0RfKuLHkeLG0tubc6i3zv/umf/5u3fmfw6nbZ9Wf873q9VzA+7ln//1GsjHndh/twEAAAAAAAAAAAAAAAAAAOBQSamIF/J66hPVfP6pXddTX40Ur/zPs7lcOlmW664DP1D9Wr8yN3v60szM3GRrqXVtZroxNt+anC7rfiJSrP/tZ3PdolpfvbvefGeN93otIqq12Bcixcg/dMt21mLvrk3eWQ+8sxZ7WfZjkeK//3Fr2e461p+8U/ZsWfZvIsXX/mXnsifvlD1Xlv1OpPjh1xrdssfLst3no37qTtnnJueKAxgVAAAAAAAAAAAAAAAAAAAAHjd9qYg/jxT/e3Nlcy5/Xv+/r+dt5a1v9Kz3v83tap3/gWr9/91e3836/9VzBZZ3OyoAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADyaUhTxZqSYv7KeVvvL9x31y+3ZW7fHh0d2rnYsVTWPVOXLn/rzZ8+d/+ILQxe6+eH177VPx2tjVy81Xp67Ob8wvbg4PdUYn21Pzk1N73kPu9ev31WLBqsT0Lj5+q2p69cXG2efO7fl49sD7/c/cXLg4tAzp5/ulh0fHhkZ6ylT67urI+8o7bL9aBTx15Hi2e/+JP2gP6KIDz0Xe/IR352DdqzqxGDVifHhkaojM+3W7FL54Wj3RBQRjZ5Kze45ug9jsS/NiOWy+WWDB8vujc23FlrXZqYbo62FpfZSe252NHVaW/anEUVcSBErEbHW/8Hd9UURr0eKb59YT//aH3Gkex6+cGXsK2fO7t6O4gD7uAdlOxt9ESvFQzBmh1h/FPHPkeKn75yKf+uPqEXnJz4f8WqZ3494KzrjncovxvmI93b4HvFwqkUR/1+O/8X19E5/eT3oXlcuf7Xx5dnrcz1lu9eVh/7+cD8d8mtTPYr4YXXFX0//7r9rAAAAAAAAAAAAAAAAgEOkiF+LFC++eypV84M35xS3Z280rrauzXSm9XXn/nXnTG9sbGw0UiebOSdyLudcybmacy1nFLl+zmaZ9Y2Nifx+OedKztWcaznjSK6fs5lzIudyzpWcqznXckYt18/ZzDmRcznnSs7VnGs545DM3QMAAAAAAAAAAAAAAAAAAB4tRfVPim99fT1t9HfWl56ITq5aD/SR94sAAAD//8or9Fc=") ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) socket$inet6(0xa, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) rt_sigprocmask(0x0, &(0x7f0000000480)={[0xfffffffffffffffd]}, 0x0, 0x8) r2 = creat(&(0x7f0000000300)='./bus\x00', 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x16d43e, 0x0) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x7ffffe, 0x10, 0xffffffffffffffff, 0x0) ftruncate(r3, 0x7fff) fcntl$setstatus(r2, 0x4, 0x6800) io_setup(0xff, &(0x7f0000000380)) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000540)={'ip6gre0\x00', &(0x7f0000000600)={'ip6tnl0\x00', 0x0, 0x2f, 0x7, 0x22, 0x10001, 0x4a, @local, @dev={0xfe, 0x80, '\x00', 0x41}, 0x7800, 0x10, 0xb, 0x5}}) sendmsg$unix(r0, &(0x7f00000005c0)={&(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e, 0x0}, 0x0) 11.317239475s ago: executing program 5 (id=728): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 9.991414362s ago: executing program 5 (id=732): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 9.630587409s ago: executing program 6 (id=735): socket$inet_smc(0x2b, 0x1, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 8.017863838s ago: executing program 3 (id=736): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8.015038388s ago: executing program 7 (id=737): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 8.005194709s ago: executing program 6 (id=738): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x44, @random="42bdde0c2b69", 'bond_slave_0\x00'}}) r3 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x5, 0x1000086}, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r3, 0x8004f50c, &(0x7f00000000c0)) 7.99253205s ago: executing program 4 (id=739): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 5.765572705s ago: executing program 6 (id=740): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(0xffffffffffffffff, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5.762865855s ago: executing program 3 (id=741): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') r3 = socket(0x1000000000000010, 0x80802, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 5.760681525s ago: executing program 7 (id=742): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = accept(0xffffffffffffffff, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 5.759518575s ago: executing program 4 (id=743): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x44, @random="42bdde0c2b69", 'bond_slave_0\x00'}}) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000000c0)) 3.632508352s ago: executing program 3 (id=744): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x2000000}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r3, 0x80047453, &(0x7f0000000040)={0x18, 0x0, {0x44, @random="42bdde0c2b69", 'bond_slave_0\x00'}}) r4 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r4, 0x0, 0x0) ioctl$F2FS_IOC_GET_FEATURES(r4, 0x8004f50c, &(0x7f00000000c0)) 3.607061944s ago: executing program 6 (id=754): setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b00)={{0x14}, [@NFT_MSG_NEWRULE={0x190, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x164, 0x4, 0x0, 0x1, [{0x160, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x150, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x138, 0x3, "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"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x1b8}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 3.606311344s ago: executing program 4 (id=745): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r3, 0x0, 0xd, &(0x7f00000008c0)=';', 0x1) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000200)=0x632a, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}, 0x20000}], 0x1, 0x12141, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) 3.605324194s ago: executing program 7 (id=755): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 2.650752205s ago: executing program 5 (id=746): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x2, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000200)=[@text64={0x40, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) capget(0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.641977345s ago: executing program 3 (id=747): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000002c0)={'syztnl1\x00', 0x0, 0x0, 0x80, 0x2, 0x0, {{0xb, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @remote, {[@timestamp={0x44, 0x14, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}, @noop]}}}}}) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r2, 0x0) r3 = dup(r1) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@text64={0x40, 0x0}], 0xffff, 0x0, 0x0, 0x0) syz_kvm_setup_cpu$x86(r1, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r1, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) ioctl$KVM_NMI(r4, 0xae9a) capget(&(0x7f0000000000)={0x19980330}, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) 2.528661324s ago: executing program 7 (id=748): r0 = socket$inet6_udp(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) keyctl$chown(0x4, 0x0, 0xee01, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x0, 0x18c, 0x203, 0x8000000, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x3, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{0x1d}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 1.307721474s ago: executing program 4 (id=749): pipe2$9p(&(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) dup(r0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000ff0f000007"], 0x48) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x40000, 0x0) r1 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfffffffc}, &(0x7f00000007c0)=0x0, &(0x7f0000000800)=0x0) socket$key(0xf, 0x3, 0x2) socket(0x2a, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f0000000180)=ANY=[@ANYRES64=r4], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r2, r3, &(0x7f0000000000)=@IORING_OP_MADVISE={0x19, 0x48, 0x0, 0x0, 0x0, &(0x7f0000903000/0x2000)=nil, 0x2000, 0x15, 0x1}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) 1.215630911s ago: executing program 6 (id=750): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') r3 = socket(0x1000000000000010, 0x80802, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000001c0), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) 1.116342248s ago: executing program 3 (id=751): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 1.031171854s ago: executing program 7 (id=752): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 928.613432ms ago: executing program 4 (id=753): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x39) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000000bc0), 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r4 = accept(r0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 70.786185ms ago: executing program 6 (id=756): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000f40)={0x0}, 0x18) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0xfffffdef}}, 0x1) recvfrom(r2, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x4100, 0x0, 0x0) 35.623768ms ago: executing program 5 (id=757): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_delete(r3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1236, &(0x7f00000027c0)="$eJzs3E9rHPUfB/BP9rf580vNH6FW24P9ohdPS5ODXhQJkoJkQaldoRWEqdnosuNuyCyBLWLsyatPwCcgHr0J4hPIxcfgLRePPYgjmc02rSaKtstCfb0OmQ98P+/vzDBhYIb57tHrX33a3SkaO9kgajMzUduNSPfTQkQtIqI8/vPiVlRu3d7aaDY3b6R0fePm2qsppeWrP3zw2bcv/Ti48P53y9/Px+Hqh0e/rP98eOnw8tFvNz/pFKlTpF5/kLJ0p98fZHfydtruFN1GSu/m7axop06vaO89Mr6T93d3hynrbS8t7u61iyJlvWHqtodp0E+DvWHKPs46vdRoNNLSYnCu2b9vaX1zvyzLiLKcjbkoy7L8fyzGhXgmlmI5vqiP+y7Gc3Epno8X4nLVNeEjBwAAAAAAAAAAAAAAAAAAgP+Yv1r/vxKr8Wxt3Fm3/h8AAAAAAAAAAAAAAAAAAAAm5L1bt7c2ms3NGyktRORf7rf2W6PtaPzeuPFarMSvUa3+HxnV199ubl5LldW4lx+c5A/2W/+rYhs70Yk82rFW/ZzASb5ejY3za6N8Os3HwX5rPhYfzq/HSlw8e//rf8ofbxfilZcfyjdiJX76KPqRx3a179P852spvfVO8w/5K1UfAAAAPA0a6YEzn98bjfPGR/kHz9dnvR94IyJO3w/MPZqvx5X6dM+diGJ4t5vleXuvGN6tjYtutjAu8scqvr76ZOb5d8Vr09jpcVGb0My1eJIT1iLP27PxWPPMn/wbTfEqKyZTnH/PmHHffmqcXvRpHwkAAAAAAAAAAAD/RPX919zEviKsxxlflr05nVMFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAA+J0dOBYAAAAAEOZvnUbHBgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBQAQAA//+m7sKR") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x9, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x6, 0x3e5, 0xfffffffffffffc01, 0x100000000, 0x2e, 0xfffffffffffffffb, 0x31, 0x4}, {0x7, 0x1, 0x3, 0x9}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast1, 0x4d5, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x3, 0x7, 0x2, 0x6, 0xfffffffb}}, 0xe8) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) 14.54383ms ago: executing program 3 (id=758): bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) openat$vcs(0xffffffffffffff9c, &(0x7f0000001880), 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) 0s ago: executing program 7 (id=759): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x9) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000000)=0x4) timer_create(0x0, &(0x7f0000000680)={0x0, 0x21}, &(0x7f0000000100)) timer_settime(0x0, 0x0, &(0x7f000006b000)={{0x0, 0x8}, {0x0, 0x9}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) timer_create(0xfffffffffffffffc, 0x0, &(0x7f0000001400)=0x0) timer_delete(r3) syz_mount_image$vfat(&(0x7f00000000c0), &(0x7f0000000040)='./bus\x00', 0x14542, &(0x7f0000000240)=ANY=[], 0x1, 0x1236, &(0x7f00000027c0)="$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") ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0xc0185879, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000001c0)={{{@in6=@remote, @in6=@mcast1, 0x4e20, 0x0, 0x4e21, 0x9, 0xa, 0x0, 0x80, 0x2c, 0x0, 0xee00}, {0x6, 0x3e5, 0xfffffffffffffc01, 0x100000000, 0x2e, 0xfffffffffffffffb, 0x31, 0x4}, {0x7, 0x1, 0x3, 0x9}, 0x4, 0x6e6bb8, 0x1, 0x0, 0x2, 0x3}, {{@in=@multicast1, 0x4d5, 0x33}, 0x2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x3504, 0x1, 0x3, 0x7, 0x2, 0x6, 0xfffffffb}}, 0xe8) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(r5, 0xc4c85512, &(0x7f0000000780)={{0x3, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, 0x0, 0xfffffffffffffffd, 0x100000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd451, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x10000, 0x7785, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000000000, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80000001]}) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port1\x00', 0x62, 0x11cfa, 0x0, 0x8000808, 0x3, 0x1, 0x1, 0x0, 0x7cce8c743ee810df}) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f00000000c0)={0x800000, 0x80, 0xfffffffd, 0x7, 0x0, 0x55a}) kernel console output (not intermixed with test programs): dy [ 62.424646][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.062374][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.087413][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.095503][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.107764][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.118958][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.129452][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.139325][ T4177] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.150162][ T4177] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.161744][ T4177] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.180387][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.188533][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.198022][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.214480][ T4177] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.223890][ T4177] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.232611][ T4177] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.241626][ T4177] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.272960][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 63.281791][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 63.302278][ T4169] device veth0_macvtap entered promiscuous mode [ 63.333334][ T4233] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.341293][ T4233] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.364223][ T4169] device veth1_macvtap entered promiscuous mode [ 63.383164][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 63.404422][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 63.452028][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.469071][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.479313][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.490100][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.501470][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.512234][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.528802][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.539490][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.551112][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.590121][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 63.600106][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 63.612593][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.614610][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.627532][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.641646][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.674454][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.678881][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.695601][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.717257][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.740301][ T4169] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.752489][ T4169] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.770551][ T4169] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.837212][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 63.881047][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 63.913112][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 63.947704][ T4169] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.965443][ T4169] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.976512][ T1439] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.982040][ T4169] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.985700][ T4208] Bluetooth: hci0: command 0x0419 tx timeout [ 64.000115][ T1439] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.001399][ T4169] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.048128][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.064555][ T4208] Bluetooth: hci1: command 0x0419 tx timeout [ 64.085638][ T4208] Bluetooth: hci2: command 0x0419 tx timeout [ 64.109853][ T4208] Bluetooth: hci3: command 0x0419 tx timeout [ 64.122439][ T4208] Bluetooth: hci4: command 0x0419 tx timeout [ 64.263258][ T4233] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.373826][ T4233] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.433566][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.442279][ T4265] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 64.473556][ T4267] loop2: detected capacity change from 0 to 64 [ 64.476636][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.503225][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 64.525305][ T4262] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.529975][ T4233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 64.557096][ T4262] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.780576][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 65.873093][ T4286] binder: BINDER_SET_CONTEXT_MGR already set [ 65.879364][ T4286] binder: 4285:4286 ioctl 4018620d 400000000040 returned -16 [ 66.063567][ T7] usb 5-1: new full-speed USB device number 2 using dummy_hcd [ 66.145886][ T4263] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 66.185872][ T4290] Process accounting resumed [ 66.201233][ T4281] loop3: detected capacity change from 0 to 32768 [ 66.298440][ T4281] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.13 (4281) [ 66.387492][ T4281] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 66.403309][ T4281] BTRFS info (device loop3): enabling auto defrag [ 66.420295][ T4281] BTRFS info (device loop3): turning on async discard [ 66.432374][ T4281] BTRFS info (device loop3): max_inline at 4096 [ 66.445289][ T4281] BTRFS info (device loop3): force clearing of disk cache [ 66.451531][ T4263] usb 1-1: Using ep0 maxpacket: 16 [ 66.454082][ T4281] BTRFS info (device loop3): using free space tree [ 66.469476][ T4281] BTRFS info (device loop3): has skinny extents [ 66.553152][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 66.561792][ T4174] syz-executor (4174) used greatest stack depth: 19320 bytes left [ 66.602995][ T4263] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 66.611232][ T4263] usb 1-1: config 0 has no interface number 0 [ 66.617772][ T7] usb 5-1: not running at top speed; connect to a high speed hub [ 66.646646][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.743268][ T7] usb 5-1: config 1 interface 0 altsetting 5 endpoint 0x81 has invalid maxpacket 655, setting to 64 [ 66.759611][ T4281] BTRFS info (device loop3): enabling ssd optimizations [ 66.782788][ T7] usb 5-1: config 1 interface 0 altsetting 5 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 66.807150][ T4281] BTRFS info (device loop3): clearing free space tree [ 66.826709][ T4281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 66.837784][ T4263] usb 1-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 66.852698][ T7] usb 5-1: config 1 interface 0 has no altsetting 0 [ 66.863495][ T4263] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 66.871521][ T4263] usb 1-1: Product: syz [ 66.893146][ T4281] BTRFS info (device loop3): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 66.907248][ T4263] usb 1-1: Manufacturer: syz [ 66.913824][ T4263] usb 1-1: SerialNumber: syz [ 66.925343][ T4263] usb 1-1: config 0 descriptor?? [ 66.968436][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.977919][ T4263] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 67.014816][ T4315] loop1: detected capacity change from 0 to 8192 [ 67.052345][ T4281] BTRFS info (device loop3): creating free space tree [ 67.067653][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.091460][ T4281] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 67.103153][ T7] usb 5-1: string descriptor 0 read error: -22 [ 67.109424][ T7] usb 5-1: New USB device found, idVendor=05ac, idProduct=025a, bcdDevice= 0.40 [ 67.131929][ T7] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 67.152264][ T4281] BTRFS info (device loop3): setting compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 67.190557][ T4278] raw-gadget.0 gadget: fail, usb_ep_enable returned -22 [ 67.193386][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.202625][ T4281] BTRFS info (device loop3): checking UUID tree [ 67.221250][ T7] input: bcm5974 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/input/input5 [ 67.360277][ T26] audit: type=1804 audit(1739378029.394:2): pid=4281 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.13" name="/newroot/1/bus/file1" dev="loop3" ino=260 res=1 errno=0 [ 67.455687][ T4317] chnl_net:caif_netlink_parms(): no params data found [ 67.469770][ T3530] bcm5974 5-1:1.0: could not read from device [ 67.476308][ T26] audit: type=1804 audit(1739378029.504:3): pid=4330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.13" name="/newroot/1/bus/file1" dev="loop3" ino=260 res=1 errno=0 [ 67.555325][ T3530] bcm5974 5-1:1.0: could not read from device [ 67.873166][ T4317] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.904186][ T4317] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.950554][ T4317] device bridge_slave_0 entered promiscuous mode [ 68.014780][ T4317] bridge0: port 2(bridge_slave_1) entered blocking state [ 68.045842][ T4317] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.073714][ T3530] bcm5974 5-1:1.0: could not read from device [ 68.077612][ T4317] device bridge_slave_1 entered promiscuous mode [ 68.091619][ T4212] usb 5-1: USB disconnect, device number 2 [ 68.134711][ T4158] bcm5974 5-1:1.0: could not read from device [ 68.352298][ T4158] udevd[4158]: Error opening device "/dev/input/event4": Input/output error [ 68.392492][ T4158] udevd[4158]: Unable to EVIOCGABS device "/dev/input/event4" [ 68.410670][ T4158] udevd[4158]: Unable to EVIOCGABS device "/dev/input/event4" [ 68.441568][ T4317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 68.450962][ T4158] udevd[4158]: Unable to EVIOCGABS device "/dev/input/event4" [ 68.500444][ T4158] udevd[4158]: Unable to EVIOCGABS device "/dev/input/event4" [ 68.645589][ T4317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 68.797933][ T4317] team0: Port device team_slave_0 added [ 68.818160][ T4317] team0: Port device team_slave_1 added [ 68.837738][ T4369] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3013113693 (3013113693 ns) > initial count (230350673 ns). Using initial count to start timer. [ 68.904632][ T4375] loop1: detected capacity change from 0 to 256 [ 68.960572][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 68.999574][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.029992][ T4239] Bluetooth: hci2: command 0x0409 tx timeout [ 69.049657][ T4317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 69.087490][ T4375] loop1: detected capacity change from 0 to 512 [ 69.092161][ T4317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 69.111494][ T4317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 69.184514][ T4263] gspca_spca1528: reg_r err -71 [ 69.189478][ T4263] spca1528: probe of 1-1:0.1 failed with error -71 [ 69.204396][ T4317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 69.265057][ T4380] loop3: detected capacity change from 0 to 128 [ 69.286889][ T4263] usb 1-1: USB disconnect, device number 2 [ 69.415607][ T4380] EXT4-fs (loop3): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 69.433231][ T4317] device hsr_slave_0 entered promiscuous mode [ 69.440197][ T4317] device hsr_slave_1 entered promiscuous mode [ 69.447888][ T4317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 69.455973][ T4317] Cannot create hsr debugfs directory [ 69.463343][ T4380] ext4 filesystem being mounted at /3/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 69.684115][ T4388] netlink: 9 bytes leftover after parsing attributes in process `syz.1.29'. [ 69.720234][ T4388] device gretap0 entered promiscuous mode [ 69.876579][ T4391] netlink: 5 bytes leftover after parsing attributes in process `syz.1.29'. [ 69.922982][ T4391] 0ŞXıĤD: renamed from gretap0 [ 69.937116][ T4391] device 60ŞXıĤD left promiscuous mode [ 69.945808][ T4403] loop0: detected capacity change from 0 to 4096 [ 69.963910][ T4391] A link change request failed with some changes committed already. Interface 60ŞXıĤD may have been left with an inconsistent configuration, please check. [ 70.617141][ T4317] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 70.680500][ T144] device hsr_slave_0 left promiscuous mode [ 70.809756][ T144] device hsr_slave_1 left promiscuous mode [ 70.867414][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.898198][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.915150][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.922587][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.955566][ T144] device bridge_slave_1 left promiscuous mode [ 70.963281][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.974232][ T4263] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 71.047082][ T4436] loop4: detected capacity change from 0 to 8 [ 71.194606][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.194820][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.307370][ T4436] process 'syz.4.38' launched './file1' with NULL argv: empty string added [ 71.779534][ T4212] Bluetooth: hci2: command 0x041b tx timeout [ 71.798048][ T144] device bridge_slave_0 left promiscuous mode [ 71.798218][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.932885][ T4263] usb 4-1: Using ep0 maxpacket: 32 [ 72.112963][ T4263] usb 4-1: unable to get BOS descriptor or descriptor too short [ 72.154127][ T144] device veth1_macvtap left promiscuous mode [ 72.160872][ T144] device veth0_macvtap left promiscuous mode [ 72.208232][ T144] device veth1_vlan left promiscuous mode [ 72.223370][ T4263] usb 4-1: config 1 interface 0 has no altsetting 0 [ 72.230575][ T144] device veth0_vlan left promiscuous mode [ 72.413005][ T4263] usb 4-1: New USB device found, idVendor=05ac, idProduct=0259, bcdDevice= 0.40 [ 72.428509][ T4210] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 72.432810][ T4263] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 72.452699][ T4263] usb 4-1: Product: syz [ 72.467066][ T4263] usb 4-1: Manufacturer: syz [ 72.471932][ T4263] usb 4-1: SerialNumber: syz [ 72.787312][ T4445] loop4: detected capacity change from 0 to 32768 [ 72.803187][ T4210] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 72.826699][ T4263] input: bcm5974 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/input/input6 [ 72.835954][ T4210] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 72.850566][ T4263] usb 4-1: USB disconnect, device number 2 [ 72.853014][ T3530] bcm5974 4-1:1.0: could not read from device [ 72.875347][ T4445] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop4 scanned by syz.4.40 (4445) [ 72.909031][ T3530] bcm5974 4-1:1.0: could not read from device [ 72.918481][ T4445] BTRFS info (device loop4): using sha256 (sha256-avx2) checksum algorithm [ 72.949012][ T4445] BTRFS info (device loop4): enabling disk space caching [ 72.956713][ T4210] usb 1-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 72.957262][ T4445] BTRFS info (device loop4): enabling auto defrag [ 72.978951][ T4210] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 72.991987][ T4210] usb 1-1: SerialNumber: syz [ 73.085944][ T4445] BTRFS info (device loop4): doing ref verification [ 73.092589][ T4445] BTRFS info (device loop4): use no compression [ 73.142151][ T4445] BTRFS info (device loop4): force clearing of disk cache [ 73.183985][ T4445] BTRFS info (device loop4): disabling disk space caching [ 73.191459][ T4445] BTRFS info (device loop4): has skinny extents [ 73.392129][ T4445] BTRFS info (device loop4): enabling ssd optimizations [ 73.554248][ T4445] BTRFS info (device loop4): clearing free space tree [ 73.620121][ T144] team0 (unregistering): Port device team_slave_1 removed [ 73.680450][ T4445] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 73.960950][ T4360] Bluetooth: hci2: command 0x040f tx timeout [ 73.967202][ T4445] BTRFS info (device loop4): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 74.099495][ T4210] usb 1-1: 0:2 : does not exist [ 74.101783][ T4474] loop3: detected capacity change from 0 to 8 [ 74.123134][ T144] team0 (unregistering): Port device team_slave_0 removed [ 74.131771][ T4210] usb 1-1: USB disconnect, device number 3 [ 74.194683][ T4474] SQUASHFS error: lzo decompression failed, data probably corrupt [ 74.214902][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 74.225304][ T4474] SQUASHFS error: Failed to read block 0x144: -5 [ 74.236013][ T4474] SQUASHFS error: Unable to read metadata cache entry [142] [ 74.249967][ T4474] SQUASHFS error: Unable to read inode 0x11f [ 74.268658][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 74.435715][ T4288] udevd[4288]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 74.519158][ T144] bond0 (unregistering): Released all slaves [ 74.642253][ T4317] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 74.707915][ T4317] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 74.775591][ T4317] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 74.845280][ T4497] loop4: detected capacity change from 0 to 16 [ 74.932472][ T4497] erofs: (device loop4): mounted with root inode @ nid 36. [ 75.039635][ T4495] netlink: 332 bytes leftover after parsing attributes in process `syz.1.48'. [ 75.103030][ T4495] netlink: 'syz.1.48': attribute type 9 has an invalid length. [ 75.148847][ T4495] netlink: 108 bytes leftover after parsing attributes in process `syz.1.48'. [ 75.193928][ T4506] loop0: detected capacity change from 0 to 512 [ 75.224573][ T4495] netlink: 32 bytes leftover after parsing attributes in process `syz.1.48'. [ 75.299507][ T4317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.310315][ T4506] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 75.393740][ T4506] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 75.698916][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 75.821218][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 75.924555][ T4506] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.50: invalid indirect mapped block 4294967295 (level 0) [ 75.959758][ T4317] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.048835][ T4506] EXT4-fs error (device loop0): ext4_free_branches:1030: inode #16: comm syz.0.50: invalid indirect mapped block 4294967295 (level 1) [ 76.063073][ T4212] Bluetooth: hci2: command 0x0419 tx timeout [ 76.069527][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 76.076179][ T4506] EXT4-fs (loop0): 1 orphan inode deleted [ 76.090552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 76.104808][ T4506] EXT4-fs (loop0): 1 truncate cleaned up [ 76.139384][ T4506] EXT4-fs (loop0): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,errors=continue,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 76.174709][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.181926][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.241418][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 76.291320][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 76.302872][ T4525] loop1: detected capacity change from 0 to 8 [ 76.317122][ T4506] EXT4-fs error (device loop0): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.0.50: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 76.333425][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.344624][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.393414][ T4525] ======================================================= [ 76.393414][ T4525] WARNING: The mand mount option has been deprecated and [ 76.393414][ T4525] and is ignored by this kernel. Remove the mand [ 76.393414][ T4525] option from the mount to silence this warning. [ 76.393414][ T4525] ======================================================= [ 76.443060][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 76.451294][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 76.534645][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 76.551046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 76.600579][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 76.640217][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 76.652952][ T4525] SQUASHFS error: xz decompression failed, data probably corrupt [ 76.682800][ T4525] SQUASHFS error: Failed to read block 0x108: -5 [ 76.698608][ T4525] SQUASHFS error: Unable to read metadata cache entry [106] [ 76.700574][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 76.715666][ T4525] SQUASHFS error: Unable to read inode 0x0 [ 76.757065][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 76.778349][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 76.812837][ T4239] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 76.819653][ T4317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 76.856333][ T4317] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 76.943552][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 76.973404][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 77.010392][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 77.223660][ T4239] usb 1-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 77.251298][ T4239] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 77.289928][ T4239] usb 1-1: config 0 descriptor?? [ 77.374134][ T4239] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 77.395433][ T4239] usb 1-1: Detected FT-X [ 77.503911][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 77.523887][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 77.560900][ T4317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.582146][ T4544] loop3: detected capacity change from 0 to 512 [ 77.591660][ T4239] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 77.622823][ T4239] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 77.653183][ T4239] ftdi_sio 1-1:0.0: GPIO initialisation failed: -71 [ 77.731067][ T4239] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 77.773848][ T4239] usb 1-1: USB disconnect, device number 4 [ 77.807146][ T4239] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 77.849118][ T4239] ftdi_sio 1-1:0.0: device disconnected [ 77.944140][ T4544] EXT4-fs (loop3): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 78.023143][ T4544] ext4 filesystem being mounted at /10/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 78.059905][ T4558] loop4: detected capacity change from 0 to 2048 [ 78.193559][ T4558] EXT4-fs (loop4): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 78.242260][ T4558] capability: warning: `syz.4.55' uses deprecated v2 capabilities in a way that may be insecure [ 78.250128][ T4569] Quota error (device loop3): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 78.401276][ T4569] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 78.422991][ T4558] capability: warning: `syz.4.55' uses 32-bit capabilities (legacy support in use) [ 78.468560][ T4569] EXT4-fs error (device loop3): ext4_acquire_dquot:6197: comm syz.3.54: Failed to acquire dquot type 1 [ 78.489466][ T4544] EXT4-fs error (device loop3): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 78.517773][ T4579] loop1: detected capacity change from 0 to 128 [ 78.534332][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 78.565782][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 78.637293][ T4579] ufs: You didn't specify the type of your ufs filesystem [ 78.637293][ T4579] [ 78.637293][ T4579] mount -t ufs -o ufstype=sun|sunx86|44bsd|ufs2|5xbsd|old|hp|nextstep|nextstep-cd|openstep ... [ 78.637293][ T4579] [ 78.637293][ T4579] >>>WARNING<<< Wrong ufstype may corrupt your filesystem, default is ufstype=old [ 78.808254][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 78.853895][ T4579] ufs: ufs_fill_super(): fragment size 2066844866 is not a power of 2 [ 78.958303][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 79.103908][ T4317] device veth0_vlan entered promiscuous mode [ 79.153968][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 79.180013][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 79.296031][ T4317] device veth1_vlan entered promiscuous mode [ 79.420934][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 79.449032][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 79.488210][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 79.523789][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 79.557669][ T4317] device veth0_macvtap entered promiscuous mode [ 79.588929][ T4317] device veth1_macvtap entered promiscuous mode [ 79.632906][ T4210] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 79.670988][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.701900][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.749063][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.778192][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.818631][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.849676][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.873163][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.909752][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.950634][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.972525][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 80.002845][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 80.028195][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 80.042393][ T4210] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 80.127503][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.150524][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.206354][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.253466][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.282349][ T4603] loop0: detected capacity change from 0 to 32768 [ 80.297301][ T4210] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 80.300277][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.306497][ T4210] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 80.308922][ T4210] usb 5-1: config 0 descriptor?? [ 80.334738][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.344769][ T4317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.355232][ T4317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.375125][ T4317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.386948][ T4317] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.395787][ T4317] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.415370][ T4317] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.430977][ T4317] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.445507][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 80.466472][ T4603] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.62 (4603) [ 80.489272][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 80.529364][ T4603] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 80.538441][ T4603] BTRFS info (device loop0): using free space tree [ 80.545191][ T4603] BTRFS info (device loop0): has skinny extents [ 80.789456][ T4582] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.825892][ T4210] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 80.841905][ T4210] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 80.850748][ T4582] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.854966][ T4210] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 80.865307][ T4210] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 80.872282][ T4210] lenovo 0003:17EF:6047.0001: unknown main item tag 0x0 [ 80.879410][ T4603] BTRFS info (device loop0): enabling ssd optimizations [ 80.899954][ T4210] lenovo 0003:17EF:6047.0001: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 81.014184][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 81.057819][ T1439] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.102736][ T1439] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.142459][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 81.302867][ T4212] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 81.418556][ T2855] cfg80211: failed to load regulatory.db [ 81.577420][ T4654] netlink: 32 bytes leftover after parsing attributes in process `syz.5.69'. [ 81.693448][ T4212] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 81.922468][ T4212] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 81.933882][ T4210] lenovo 0003:17EF:6047.0001: Sensitivity setting failed: -71 [ 82.071674][ T4210] usb 5-1: USB disconnect, device number 3 [ 82.082876][ T4212] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 82.183739][ T4212] usb 4-1: Product: syz [ 82.211293][ T4212] usb 4-1: Manufacturer: syz [ 82.216972][ T4212] usb 4-1: SerialNumber: syz [ 82.276919][ T4666] loop5: detected capacity change from 0 to 64 [ 82.304393][ T4212] cdc_ncm 4-1:1.0: skipping garbage [ 82.462252][ T4669] loop0: detected capacity change from 0 to 2048 [ 82.586668][ T4669] UDF-fs: warning (device loop0): udf_load_vrs: No anchor found [ 82.596492][ T4669] UDF-fs: Scanning with blocksize 512 failed [ 82.617680][ T4669] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 82.935376][ T4688] loop5: detected capacity change from 0 to 1024 [ 82.996295][ T4690] loop4: detected capacity change from 0 to 256 [ 83.053431][ T4690] exfat: Deprecated parameter 'namecase' [ 83.157467][ T4690] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 83.393054][ T4212] cdc_ncm 4-1:1.0: bind() failure [ 83.413338][ T4212] cdc_ncm 4-1:1.1: CDC Union missing and no IAD found [ 83.428187][ T4212] cdc_ncm 4-1:1.1: bind() failure [ 83.532233][ T4166] syz-executor (4166) used greatest stack depth: 18016 bytes left [ 83.562669][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #282!!! [ 83.736334][ T144] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.799894][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 83.800887][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #140!!! [ 84.215290][ T4632] loop3: detected capacity change from 0 to 512 [ 84.262825][ T4249] usb 5-1: new full-speed USB device number 4 using dummy_hcd [ 84.267883][ T4632] EXT4-fs (loop3): Ignoring removed mblk_io_submit option [ 84.290979][ T144] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.413230][ T144] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.529403][ T144] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.545624][ T4632] EXT4-fs (loop3): Test dummy encryption mode enabled [ 84.622299][ T4632] EXT4-fs error (device loop3): ext4_orphan_get:1401: comm syz.3.66: inode #13: comm syz.3.66: iget: illegal inode # [ 84.693101][ T4249] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 64 [ 84.713395][ T4632] EXT4-fs (loop3): Remounting filesystem read-only [ 84.716450][ T4249] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 84.719971][ T4632] EXT4-fs error (device loop3): ext4_orphan_get:1406: comm syz.3.66: couldn't read orphan inode 13 (err -117) [ 84.740568][ T4249] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 84.761254][ T4249] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 84.872001][ T4632] EXT4-fs (loop3): Remounting filesystem read-only [ 84.928641][ T4632] EXT4-fs (loop3): mounted filesystem without journal. Opts: user_xattr,i_version,noblock_validity,abort,mblk_io_submit,data_err=ignore,max_dir_size_kb=0x000000000000222a,errors=remount-ro,test_dummy_encryption,bsdgroups,. Quota mode: none. [ 85.024184][ T4714] loop5: detected capacity change from 0 to 32768 [ 85.033404][ T4249] usb 5-1: usb_control_msg returned -32 [ 85.038968][ T4249] usbtmc 5-1:16.0: can't read capabilities [ 85.058564][ T4704] loop4: detected capacity change from 0 to 2048 [ 85.065191][ T23] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 85.125044][ T4714] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop5 scanned by syz.5.81 (4714) [ 85.144550][ T4704] UDF-fs: error (device loop4): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 85.211729][ T4210] usb 4-1: USB disconnect, device number 3 [ 85.257368][ T4714] BTRFS info (device loop5): using crc32c (crc32c-intel) checksum algorithm [ 85.328855][ T4714] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 85.372278][ T4714] BTRFS info (device loop5): use zstd compression, level 3 [ 85.379914][ C0] usbtmc 5-1:16.0: usbtmc_write_bulk_cb - nonzero write bulk status received: -71 [ 85.397430][ T4704] usbtmc 5-1:16.0: Unable to send data, error -71 [ 85.402874][ T4714] BTRFS info (device loop5): using free space tree [ 85.409770][ T4722] chnl_net:caif_netlink_parms(): no params data found [ 85.433007][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 85.441994][ T4658] usb 5-1: USB disconnect, device number 4 [ 85.452752][ T23] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 85.500308][ T4714] BTRFS info (device loop5): has skinny extents [ 85.543073][ T23] usb 2-1: New USB device found, idVendor=060b, idProduct=700a, bcdDevice= 0.00 [ 85.571313][ T23] usb 2-1: New USB device strings: Mfr=2, Product=0, SerialNumber=0 [ 85.579967][ T23] usb 2-1: Manufacturer: syz [ 85.587556][ T23] usb 2-1: config 0 descriptor?? [ 85.685340][ T4714] BTRFS info (device loop5): enabling ssd optimizations [ 85.803270][ T4722] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.810584][ T4722] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.878346][ T4722] device bridge_slave_0 entered promiscuous mode [ 85.981729][ T4722] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.997846][ T4722] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.027011][ T4722] device bridge_slave_1 entered promiscuous mode [ 86.279931][ T23] cougar 0003:060B:700A.0002: hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.1-1/input0 [ 86.406010][ T4722] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.426764][ T4722] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.557229][ T2855] usb 2-1: USB disconnect, device number 2 [ 86.628747][ T4722] team0: Port device team_slave_0 added [ 86.645121][ T4722] team0: Port device team_slave_1 added [ 86.712801][ T4658] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 86.753292][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.783027][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.834842][ T4722] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.911808][ T4722] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.932816][ T2855] Bluetooth: hci0: command 0x0409 tx timeout [ 86.940781][ T4722] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.976851][ T4800] loop3: detected capacity change from 0 to 8 [ 86.996219][ T4722] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.098627][ T4797] device ip6erspan0 entered promiscuous mode [ 87.234392][ T4658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 87.247682][ T144] device hsr_slave_0 left promiscuous mode [ 87.282896][ T4658] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 87.293144][ T144] device hsr_slave_1 left promiscuous mode [ 87.321405][ T4658] usb 6-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 87.326060][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.366860][ T4658] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 87.366986][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.377060][ T4813] fuse: Bad value for 'rootmode' [ 87.403742][ T4658] usb 6-1: config 0 descriptor?? [ 87.421342][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.443763][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.486596][ T144] device bridge_slave_1 left promiscuous mode [ 87.494941][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.537704][ T144] device bridge_slave_0 left promiscuous mode [ 87.562983][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.636091][ T144] device veth1_macvtap left promiscuous mode [ 87.642153][ T144] device veth0_macvtap left promiscuous mode [ 87.649228][ T144] device veth1_vlan left promiscuous mode [ 87.673112][ T144] device veth0_vlan left promiscuous mode [ 87.905447][ T4658] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 87.925028][ T4658] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 87.968506][ T4658] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 87.997162][ T4658] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 88.030027][ T4658] lenovo 0003:17EF:6047.0003: unknown main item tag 0x0 [ 88.140261][ T4658] lenovo 0003:17EF:6047.0003: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.5-1/input0 [ 88.471359][ T144] team0 (unregistering): Port device team_slave_1 removed [ 88.530455][ T144] team0 (unregistering): Port device team_slave_0 removed [ 88.569505][ T4824] loop4: detected capacity change from 0 to 512 [ 88.574783][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.611240][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.649255][ T4822] loop3: detected capacity change from 0 to 32768 [ 88.702531][ T4822] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 scanned by syz.3.94 (4822) [ 88.737694][ T4824] EXT4-fs (loop4): mounted filesystem without journal. Opts: quota,barrier=0x0000000000001000,grpjquota=,norecovery,dioread_lock,,errors=continue. Quota mode: writeback. [ 88.763117][ T4824] ext4 filesystem being mounted at /19/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 88.781269][ T4822] BTRFS info (device loop3): using crc32c (crc32c-intel) checksum algorithm [ 88.790778][ T4822] BTRFS info (device loop3): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 88.803017][ T4822] BTRFS info (device loop3): use zstd compression, level 3 [ 88.817029][ T4822] BTRFS info (device loop3): using free space tree [ 88.859757][ T4822] BTRFS info (device loop3): has skinny extents [ 88.879028][ T4658] lenovo 0003:17EF:6047.0003: Sensitivity setting failed: -71 [ 88.918859][ T4824] Quota error (device loop4): do_check_range: Getting dqdh_prev_free 1792 out of range 0-6 [ 88.921936][ T4658] usb 6-1: USB disconnect, device number 2 [ 88.951641][ T4824] Quota error (device loop4): qtree_write_dquot: Error -117 occurred while creating quota [ 88.961965][ T4824] EXT4-fs error (device loop4): ext4_acquire_dquot:6197: comm syz.4.95: Failed to acquire dquot type 1 [ 88.995227][ T144] bond0 (unregistering): Released all slaves [ 89.012786][ T23] Bluetooth: hci0: command 0x041b tx timeout [ 89.039131][ T4824] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 89.156423][ T4722] device hsr_slave_0 entered promiscuous mode [ 89.170080][ T4822] BTRFS info (device loop3): enabling ssd optimizations [ 89.180456][ T4722] device hsr_slave_1 entered promiscuous mode [ 89.376391][ T4855] loop1: detected capacity change from 0 to 512 [ 89.517660][ T4855] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 89.558219][ T4855] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.97: invalid indirect mapped block 4294967295 (level 0) [ 89.613078][ T4855] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #16: comm syz.1.97: invalid indirect mapped block 4294967295 (level 1) [ 89.768045][ T4855] EXT4-fs (loop1): 1 orphan inode deleted [ 89.832925][ T4855] EXT4-fs (loop1): 1 truncate cleaned up [ 89.838611][ T4855] EXT4-fs (loop1): mounted filesystem without journal. Opts: errors=remount-ro,lazytime,errors=continue,block_validity,block_validity,quota,jqfmt=vfsv0,. Quota mode: writeback. [ 89.868081][ T4722] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 89.926925][ T4855] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz.1.97: bad entry in directory: rec_len is too small for name_len - offset=12, inode=2, rec_len=12, size=1024 fake=0 [ 89.952392][ T4722] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 90.017183][ T4722] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 90.185317][ T4867] loop4: detected capacity change from 0 to 32768 [ 90.250227][ T4722] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 90.302595][ T4867] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.100 (4867) [ 90.325775][ T4867] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 90.335216][ T4867] BTRFS info (device loop4): using free space tree [ 90.341756][ T4867] BTRFS info (device loop4): has skinny extents [ 90.370088][ T4872] Cannot find add_set index 0 as target [ 90.476175][ T4885] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 90.503034][ T4357] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 90.750940][ T4867] BTRFS info (device loop4): enabling ssd optimizations [ 90.863092][ T4357] usb 2-1: New USB device found, idVendor=0403, idProduct=6010, bcdDevice=c6.98 [ 90.867279][ T4722] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.880159][ T4357] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 90.914384][ T4357] usb 2-1: config 0 descriptor?? [ 90.974061][ T4357] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 91.007372][ T4357] usb 2-1: Detected FT-X [ 91.016848][ T4904] binder: BINDER_SET_CONTEXT_MGR already set [ 91.054131][ T4722] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.056670][ T4904] binder: 4903:4904 ioctl 4018620d 400000000040 returned -16 [ 91.094371][ T2855] Bluetooth: hci0: command 0x040f tx timeout [ 91.135143][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 91.182985][ T4357] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 91.203144][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 91.212797][ T4357] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 91.242782][ T4357] ftdi_sio 2-1:0.0: GPIO initialisation failed: -71 [ 91.276719][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 91.283092][ T4357] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 91.305753][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 91.336243][ T1439] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.343480][ T1439] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.425132][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 91.486930][ T4357] usb 2-1: USB disconnect, device number 3 [ 91.495824][ T4357] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 91.506227][ T4357] ftdi_sio 2-1:0.0: device disconnected [ 91.526178][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 91.908077][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 92.229608][ T1439] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.236741][ T1439] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.331624][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 92.453551][ T4722] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 92.485486][ T4722] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.548480][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 92.590603][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 92.648769][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 92.684519][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 92.769715][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 92.796911][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 92.846179][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 92.879060][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 92.938847][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 92.983997][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 93.020799][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 93.102541][ T4937] input: syz0 as /devices/virtual/input/input7 [ 93.172856][ T4777] Bluetooth: hci0: command 0x0419 tx timeout [ 93.215647][ T4915] loop3: detected capacity change from 0 to 32768 [ 93.399797][ T4915] JBD2: Ignoring recovery information on journal [ 93.420454][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 93.431785][ T1439] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 93.456940][ T4722] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.947452][ T4915] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 95.124556][ T4971] netlink: 12 bytes leftover after parsing attributes in process `syz.1.119'. [ 95.164016][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 95.183824][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 95.205889][ T4702] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 95.307456][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 95.326179][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 95.450627][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 95.517545][ T4706] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 95.693776][ T4722] device veth0_vlan entered promiscuous mode [ 95.882535][ T4722] device veth1_vlan entered promiscuous mode [ 96.070747][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 96.100929][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 96.136005][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 96.153523][ T4581] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 96.176062][ T4722] device veth0_macvtap entered promiscuous mode [ 96.201427][ T4722] device veth1_macvtap entered promiscuous mode [ 96.231867][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 96.260248][ T4991] loop3: detected capacity change from 0 to 8 [ 96.268233][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 96.314458][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.355620][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.401491][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.667033][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.856019][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.066217][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.372830][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.392830][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.413719][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 97.415151][ T5002] loop1: detected capacity change from 0 to 256 [ 97.427333][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.438672][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.464165][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.504060][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.551254][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.592766][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.628209][ T4722] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 97.659129][ T4722] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.694266][ T4722] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.744375][ T5002] exfat: Deprecated parameter 'namecase' [ 97.745863][ T5007] kvm: emulating exchange as write [ 97.760119][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 97.769621][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 97.785440][ T4991] SQUASHFS error: xz decompression failed, data probably corrupt [ 97.812975][ T4991] SQUASHFS error: Failed to read block 0x108: -5 [ 97.821152][ T4991] SQUASHFS error: Unable to read metadata cache entry [106] [ 97.842894][ T5002] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xe3f33698, utbl_chksum : 0xe619d30d) [ 97.846047][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 97.898200][ T4991] SQUASHFS error: Unable to read inode 0x0 [ 97.989387][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 98.015597][ T4722] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.052840][ T4722] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.142136][ T4722] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.185456][ T4722] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.508456][ T4269] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.531224][ T4269] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.607907][ T4269] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 98.628013][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.682416][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.729949][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 98.764803][ T4658] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 99.173238][ T4658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 99.212853][ T4658] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 99.352792][ T4178] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 99.369906][ T4658] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 99.464838][ T4658] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 99.538144][ T4658] usb 5-1: config 0 descriptor?? [ 99.925657][ T5032] loop6: detected capacity change from 0 to 512 [ 100.088540][ T5062] dccp_close: ABORT with 72 bytes unread [ 100.108658][ T5032] EXT4-fs (loop6): Ignoring removed nobh option [ 100.219161][ T5032] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 100.243029][ T5032] ext4 filesystem being mounted at /0/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 100.348574][ T5032] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 100.398989][ T5032] EXT4-fs (loop6): Remounting filesystem read-only [ 100.556514][ T5047] loop1: detected capacity change from 0 to 32768 [ 100.640282][ T5047] [ 100.640282][ T5047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.640282][ T5047] [ 100.661090][ T5080] loop3: detected capacity change from 0 to 256 [ 100.780530][ T5047] ERROR: (device loop1): diWrite: ixpxd invalid [ 100.780530][ T5047] [ 100.831231][ T5047] ERROR: (device loop1): txCommit: [ 100.831231][ T5047] [ 100.861283][ T5047] ERROR: (device loop1): diWrite: ixpxd invalid [ 100.861283][ T5047] [ 100.888071][ T5047] ERROR: (device loop1): txCommit: [ 100.888071][ T5047] [ 100.964299][ T5047] [ 100.964299][ T5047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 100.964299][ T5047] [ 101.011205][ T5085] ERROR: (device loop1): diWrite: ixpxd invalid [ 101.011205][ T5085] [ 101.022616][ T5047] [ 101.022616][ T5047] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.022616][ T5047] [ 101.089243][ T5085] ERROR: (device loop1): txCommit: [ 101.089243][ T5085] [ 101.124897][ T5085] [ 101.124897][ T5085] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 101.124897][ T5085] [ 101.443102][ T4658] usbhid 5-1:0.0: can't add hid device: -71 [ 101.449123][ T4658] usbhid: probe of 5-1:0.0 failed with error -71 [ 101.503059][ T4658] usb 5-1: USB disconnect, device number 5 [ 101.640803][ T5098] syz.6.130 uses obsolete (PF_INET,SOCK_PACKET) [ 102.069507][ T4175] [ 102.069507][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.069507][ T4175] [ 102.103049][ T4175] [ 102.103049][ T4175] ... Log Wrap ... Log Wrap ... Log Wrap ... [ 102.103049][ T4175] [ 102.882685][ T5123] loop6: detected capacity change from 0 to 64 [ 104.731264][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #382!!! [ 106.322689][ T5151] IPv4: Oversized IP packet from 136.202.26.0 [ 106.339471][ T5141] can: request_module (can-proto-0) failed. [ 106.373356][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 106.382306][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #08!!! [ 106.391290][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 106.400248][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 106.419551][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #88!!! [ 106.428707][ T0] NOHZ tick-stop error: Non-RCU local softirq work is pending, handler #8a!!! [ 107.177483][ T4357] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 107.225636][ T5146] netlink: 8 bytes leftover after parsing attributes in process `syz.5.143'. [ 107.510954][ T5139] loop4: detected capacity change from 0 to 512 [ 107.561490][ T5139] EXT4-fs (loop4): Ignoring removed nobh option [ 107.608461][ T5178] kvm: pic: non byte write [ 107.644894][ T5178] kvm: vcpu 0: requested lapic timer restore with starting count register 0x390=3832186367 (7664372734 ns) > initial count (4194322 ns). Using initial count to start timer. [ 107.682876][ T5139] EXT4-fs (loop4): mounted filesystem without journal. Opts: errors=remount-ro,noauto_da_alloc,delalloc,nobh,dioread_lock,. Quota mode: writeback. [ 107.698824][ T5139] ext4 filesystem being mounted at /27/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 107.721167][ T5139] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1152: group 0, block bitmap and bg descriptor inconsistent: 41 vs 39667 free clusters [ 107.753240][ T5139] EXT4-fs (loop4): Remounting filesystem read-only [ 107.933728][ T5190] loop5: detected capacity change from 0 to 128 [ 108.042711][ T5190] UDF-fs: error (device loop5): udf_read_tagged: read failed, block=256, location=256 [ 108.080892][ T5190] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 108.963297][ T5187] loop6: detected capacity change from 0 to 40427 [ 109.065494][ T5187] F2FS-fs (loop6): Invalid Fs Meta Ino: node(0) meta(0) root(83886083) [ 109.112955][ T5187] F2FS-fs (loop6): Can't find valid F2FS filesystem in 2th superblock [ 109.138647][ T5187] F2FS-fs (loop6): invalid crc value [ 109.187853][ T5187] F2FS-fs (loop6): Found nat_bits in checkpoint [ 109.352998][ T4357] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 109.528958][ T5187] F2FS-fs (loop6): Try to recover 2th superblock, ret: 0 [ 109.629525][ T5187] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 110.512632][ C1] sched: RT throttling activated [ 110.772940][ T4357] usb 5-1: Using ep0 maxpacket: 16 [ 110.967401][ T4357] usb 5-1: config 0 interface 0 has no altsetting 0 [ 111.712825][ T4357] usb 5-1: New USB device found, idVendor=1235, idProduct=0010, bcdDevice=29.82 [ 111.721904][ T4357] usb 5-1: New USB device strings: Mfr=83, Product=5, SerialNumber=10 [ 112.449648][ T4357] usb 5-1: Product: syz [ 112.454851][ T4357] usb 5-1: Manufacturer: syz [ 112.459478][ T4357] usb 5-1: SerialNumber: syz [ 112.483670][ T4357] usb 5-1: config 0 descriptor?? [ 112.502816][ T4357] usb 5-1: can't set config #0, error -71 [ 112.522898][ T4357] usb 5-1: USB disconnect, device number 7 [ 112.822995][ T5250] netlink: 36 bytes leftover after parsing attributes in process `syz.1.162'. [ 112.831903][ T5250] netlink: 'syz.1.162': attribute type 1 has an invalid length. [ 112.893069][ T5250] netlink: 13 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.130767][ T5267] loop6: detected capacity change from 0 to 40427 [ 113.177470][ T5267] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 113.184540][ T5267] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 113.197130][ T5267] F2FS-fs (loop6): invalid crc value [ 113.263542][ T5267] F2FS-fs (loop6): Found nat_bits in checkpoint [ 113.324700][ T5267] F2FS-fs (loop6): Try to recover 1th superblock, ret: 0 [ 113.331808][ T5267] F2FS-fs (loop6): Mounted with checkpoint version = 48b305e5 [ 113.953974][ T4722] attempt to access beyond end of device [ 113.953974][ T4722] loop6: rw=2049, want=45104, limit=40427 [ 114.156128][ T5290] device ip6erspan0 entered promiscuous mode [ 114.645854][ T5280] loop1: detected capacity change from 0 to 32768 [ 114.853632][ T5280] XFS (loop1): Mounting V5 Filesystem [ 115.024603][ T5280] XFS (loop1): Ending clean mount [ 115.305512][ T5319] kvm: pic: single mode not supported [ 115.317807][ T5319] kvm: pic: non byte write [ 115.372932][ T5319] kvm: pic: non byte write [ 115.393319][ T5319] kvm: pic: non byte write [ 115.426764][ T5319] kvm: pic: non byte write [ 115.431444][ T5319] kvm: pic: non byte write [ 115.458792][ T5319] kvm: pic: non byte write [ 115.492788][ T5319] kvm: pic: non byte write [ 115.497559][ T5319] kvm: pic: non byte write [ 115.518443][ T5319] kvm: pic: non byte write [ 115.526424][ T5280] xfs: Unknown parameter '˙˙˙˙˙˙˙˙˙˙˙˙˙˙18446744073709551615˙˙˙˙š@­LqE:†‹ á艞Ġt}²0ü$‰' [ 115.544660][ T5319] kvm: pic: non byte write [ 115.665988][ T4175] XFS (loop1): Unmounting Filesystem [ 116.278772][ T5341] fuse: root generation should be zero [ 116.294030][ T5324] loop3: detected capacity change from 0 to 32768 [ 116.602431][ T5324] ocfs2: Slot 0 on device (7,3) was already allocated to this node! [ 116.714555][ T5324] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 119.280279][ T5384] loop4: detected capacity change from 0 to 8 [ 119.362311][ T4177] ocfs2: Unmounting device (7,3) on (node local) [ 120.298523][ T5396] loop5: detected capacity change from 0 to 256 [ 121.834820][ T5416] loop6: detected capacity change from 0 to 524287999 [ 121.936404][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 121.990234][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.001555][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.013763][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.024756][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.042341][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.053356][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.116144][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.127183][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.197535][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.208532][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.236458][ C0] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 122.247414][ C0] Buffer I/O error on dev loop6, logical block 0, async page read [ 122.519093][ T5444] device syzkaller0 entered promiscuous mode [ 122.764941][ T5448] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 123.503654][ T5458] loop5: detected capacity change from 0 to 512 [ 123.696565][ T5458] EXT4-fs (loop5): Ignoring removed orlov option [ 123.722954][ T5458] EXT4-fs (loop5): Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 123.852278][ T5458] EXT4-fs error (device loop5): ext4_orphan_get:1401: inode #15: comm syz.5.196: casefold flag without casefold feature [ 124.108303][ T5458] EXT4-fs (loop5): Remounting filesystem read-only [ 124.279777][ T5458] EXT4-fs error (device loop5): ext4_orphan_get:1406: comm syz.5.196: couldn't read orphan inode 15 (err -117) [ 124.645758][ T5458] EXT4-fs (loop5): Remounting filesystem read-only [ 124.652327][ T5458] EXT4-fs (loop5): mounted filesystem without journal. Opts: orlov,nodelalloc,errors=remount-ro,grpquota,auto_da_alloc,dioread_nolock,quota,. Quota mode: writeback. [ 124.997525][ T5482] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 125.044366][ T5482] kvm: pic: level sensitive irq not supported [ 125.045396][ T5482] kvm: pic: non byte read [ 125.071346][ T5482] kvm: pic: level sensitive irq not supported [ 125.071485][ T5482] kvm: pic: non byte read [ 125.222512][ T4658] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 126.422816][ T4658] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 126.442805][ T4658] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 126.462763][ T4658] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 127.557016][ T4658] usb 2-1: config 0 descriptor?? [ 127.645276][ T4658] pwc: Askey VC010 type 2 USB webcam detected. [ 128.623065][ T4658] pwc: send_video_command error -71 [ 128.628633][ T4658] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 128.703144][ T4658] Philips webcam: probe of 2-1:0.0 failed with error -71 [ 128.776639][ T4658] usb 2-1: USB disconnect, device number 4 [ 128.794301][ T5523] loop5: detected capacity change from 0 to 64 [ 129.158687][ T5523] hfs: filesystem is marked locked, mounting read-only. [ 129.564571][ T5534] loop3: detected capacity change from 0 to 128 [ 129.862078][ T5534] EXT4-fs (loop3): Invalid want_extra_isize 1779 [ 131.147271][ T5552] loop1: detected capacity change from 0 to 256 [ 131.450486][ T5552] exFAT-fs (loop1): failed to load upcase table (idx : 0x00017f3e, chksum : 0x0b83170a, utbl_chksum : 0xe619d30d) [ 132.405495][ T5560] KVM: KVM_SET_CPUID{,2} after KVM_RUN may cause guest instability [ 132.427654][ T5560] KVM: KVM_SET_CPUID{,2} will fail after KVM_RUN starting with Linux 5.16 [ 132.617104][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.627264][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 135.732164][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.744656][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.860287][ T26] audit: type=1400 audit(1739378097.894:4): apparmor="DENIED" operation="change_profile" info="label not found" error=-22 profile="unconfined" name="&" pid=5574 comm="syz.3.219" [ 136.312882][ T4484] usb 5-1: new full-speed USB device number 8 using dummy_hcd [ 137.332911][ T4484] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 137.352748][ T4484] usb 5-1: New USB device found, idVendor=056a, idProduct=00da, bcdDevice= 0.00 [ 137.378777][ T4484] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 137.676201][ T4484] usb 5-1: config 0 descriptor?? [ 138.297289][ T4484] wacom 0003:056A:00DA.0004: Unknown device_type for 'HID 056a:00da'. Assuming pen. [ 139.076274][ T4484] wacom 0003:056A:00DA.0004: hidraw0: USB HID v0.03 Device [HID 056a:00da] on usb-dummy_hcd.4-1/input0 [ 139.123407][ T4484] input: Wacom Bamboo 2FG 4x5 SE Pen as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:056A:00DA.0004/input/input9 [ 139.224470][ T4484] usb 5-1: USB disconnect, device number 8 [ 141.068208][ T5643] loop3: detected capacity change from 0 to 2048 [ 141.720340][ T5643] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 142.211856][ T5658] hub 2-0:1.0: USB hub found [ 142.222547][ T5658] hub 2-0:1.0: 1 port detected [ 142.835501][ T5659] Zero length message leads to an empty skb [ 143.126828][ T5663] loop3: detected capacity change from 0 to 1024 [ 143.237324][ T5663] EXT4-fs (loop3): Ignoring removed orlov option [ 143.253062][ T5663] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 143.952837][ T5663] EXT4-fs (loop3): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 145.175277][ T5669] syz.5.237 sent an empty control message without MSG_MORE. [ 145.226681][ T5683] loop4: detected capacity change from 0 to 2048 [ 145.554449][ T5683] UDF-fs: warning (device loop4): udf_load_vrs: No anchor found [ 145.587824][ T5694] loop5: detected capacity change from 0 to 2048 [ 145.603003][ T5683] UDF-fs: Scanning with blocksize 512 failed [ 145.636154][ T5683] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 145.785099][ T5694] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 145.861263][ T5694] System zones: 0-7 [ 145.886451][ T5694] EXT4-fs (loop5): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,debug,bsddf,. Quota mode: none. [ 146.398755][ T5711] EXT4-fs error (device loop5): ext4_validate_block_bitmap:438: comm syz.5.243: bg 0: block 234: padding at end of block bitmap is not set [ 146.535717][ T5711] EXT4-fs (loop5): Remounting filesystem read-only [ 146.862890][ T4658] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 147.101199][ T5710] chnl_net:caif_netlink_parms(): no params data found [ 147.105454][ T4658] usb 4-1: Using ep0 maxpacket: 16 [ 147.243216][ T4658] usb 4-1: config 1 has an invalid descriptor of length 116, skipping remainder of the config [ 147.272890][ T4658] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 147.454300][ T4658] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 147.482820][ T4658] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 147.521644][ T4658] usb 4-1: Product: syz [ 147.581350][ T4658] usb 4-1: Manufacturer: syz [ 147.588275][ T5710] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.595862][ T5710] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.612804][ T4658] usb 4-1: SerialNumber: syz [ 147.614286][ T5710] device bridge_slave_0 entered promiscuous mode [ 147.787884][ T5710] bridge0: port 2(bridge_slave_1) entered blocking state [ 147.960824][ T5710] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.161258][ T5710] device bridge_slave_1 entered promiscuous mode [ 148.623149][ T4178] Bluetooth: hci5: command 0x0409 tx timeout [ 149.301169][ T5710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 149.348411][ T5710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 149.352921][ T4658] usb 4-1: 0:2 : does not exist [ 150.200123][ T4658] usb 4-1: USB disconnect, device number 4 [ 150.316563][ T5710] team0: Port device team_slave_0 added [ 150.352562][ T5710] team0: Port device team_slave_1 added [ 150.579596][ T4160] udevd[4160]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 150.692845][ T4658] Bluetooth: hci5: command 0x041b tx timeout [ 151.213054][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.250783][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.367188][ T5710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.644552][ T5710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.675585][ T5710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.459442][ T5710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.471109][ T5795] netlink: 12 bytes leftover after parsing attributes in process `syz.5.256'. [ 152.894127][ T4178] Bluetooth: hci5: command 0x040f tx timeout [ 153.093867][ T5804] ODEBUG: Out of memory. ODEBUG disabled [ 153.613533][ T5710] device hsr_slave_0 entered promiscuous mode [ 153.702167][ T5710] device hsr_slave_1 entered promiscuous mode [ 154.004731][ T5710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.038441][ T5710] Cannot create hsr debugfs directory [ 156.135464][ T4483] Bluetooth: hci5: command 0x0419 tx timeout [ 156.465240][ T5838] loop5: detected capacity change from 0 to 32768 [ 156.528370][ T5844] loop6: detected capacity change from 0 to 512 [ 157.596954][ T5838] gfs2: fsid=errors=withdraw: Trying to join cluster "lock_nolock", "errors=withdraw" [ 157.606944][ T5838] gfs2: fsid=errors=withdraw: Now mounting FS (format 1802)... [ 157.639461][ T5838] gfs2: fsid=errors=withdraw.0: can't read journal index: -116 [ 157.791505][ T5844] EXT4-fs error (device loop6): ext4_expand_extra_isize_ea:2766: inode #11: comm syz.6.268: corrupted xattr block 95 [ 157.806410][ T5844] EXT4-fs warning (device loop6): ext4_expand_extra_isize_ea:2816: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 157.823262][ T5844] EXT4-fs error (device loop6): ext4_validate_block_bitmap:429: comm syz.6.268: bg 0: block 7: invalid block bitmap [ 157.844070][ T5844] EXT4-fs error (device loop6) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 157.854857][ T5844] EXT4-fs error (device loop6): ext4_xattr_delete_inode:2932: inode #11: comm syz.6.268: corrupted xattr block 95 [ 157.872505][ T5844] EXT4-fs warning (device loop6): ext4_evict_inode:302: xattr delete (err -117) [ 157.881938][ T5844] EXT4-fs (loop6): 1 orphan inode deleted [ 157.887778][ T5844] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 159.769988][ T5710] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 160.241700][ T5710] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 160.307521][ T5710] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 160.353861][ T5710] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 160.608217][ T5872] loop6: detected capacity change from 0 to 512 [ 161.506480][ T5872] EXT4-fs (loop6): Ignoring removed nomblk_io_submit option [ 161.639069][ T5872] EXT4-fs error (device loop6): ext4_orphan_get:1401: inode #15: comm syz.6.272: casefold flag without casefold feature [ 161.667393][ T5872] EXT4-fs error (device loop6): ext4_orphan_get:1406: comm syz.6.272: couldn't read orphan inode 15 (err -117) [ 161.720670][ T5872] EXT4-fs (loop6): mounted filesystem without journal. Opts: dioread_lock,delalloc,nomblk_io_submit,,errors=continue. Quota mode: writeback. [ 162.756951][ T4582] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.890861][ T5710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 162.960937][ T5900] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.968524][ T5900] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.101561][ T5908] device bridge_slave_1 left promiscuous mode [ 163.189829][ T5908] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.843882][ T5908] device bridge_slave_0 left promiscuous mode [ 163.872779][ T5908] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.016113][ T5710] 8021q: adding VLAN 0 to HW filter on device team0 [ 164.258442][ T4582] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.273286][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 164.282053][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 164.330046][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 164.339680][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 164.381680][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.388822][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 164.427510][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 164.436660][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 164.448641][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.455767][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.481844][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 164.497830][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 164.545315][ T4582] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.595098][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 164.622999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 164.658880][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 164.688768][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 164.724150][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 164.741933][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 164.755781][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 164.766761][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 164.788928][ T5710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.021837][ T5710] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 166.122910][ T5963] overlayfs: failed to clone upperpath [ 166.714062][ T4582] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.944904][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.976476][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.847617][ T5961] netlink: 4 bytes leftover after parsing attributes in process `syz.5.291'. [ 167.915877][ T4178] kernel write not supported for file [eventfd] (pid: 4178 comm: kworker/0:3) [ 167.945078][ T5710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.982956][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.995951][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.182288][ T5988] netlink: 80 bytes leftover after parsing attributes in process `syz.3.294'. [ 169.318325][ T5994] loop3: detected capacity change from 0 to 128 [ 169.724590][ T5994] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 169.921238][ T6005] loop6: detected capacity change from 0 to 256 [ 170.817926][ T5994] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 171.448071][ T4659] FAT-fs (loop3): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 172.993876][ T5710] device veth0_vlan entered promiscuous mode [ 173.068938][ T6039] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 173.447574][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 173.473529][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 173.853358][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 174.012005][ T6051] virtio-fs: tag <(null)> not found [ 174.122906][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 174.319702][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 174.773185][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 174.897385][ T5710] device veth1_vlan entered promiscuous mode [ 175.558808][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 175.575254][ T4659] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 175.602457][ T5710] device veth0_macvtap entered promiscuous mode [ 175.751974][ T5710] device veth1_macvtap entered promiscuous mode [ 175.953982][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 176.070234][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 176.803590][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.857431][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.882551][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.906023][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.922736][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.942734][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.972075][ T6067] kvm [6064]: vcpu0, guest rIP: 0x1be disabled perfctr wrmsr: 0xc1 data 0x4015 [ 176.981465][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.998586][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.012839][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 177.033876][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.064341][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 177.098194][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 177.117610][ T1230] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 177.195303][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.226758][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.262719][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.302917][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.392992][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.445915][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 177.493076][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 177.980694][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.001185][ T5710] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.023765][ T5710] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.252399][ T5710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.746918][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 178.756075][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 178.915615][ T5710] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.424567][ T5710] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.461494][ T5710] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.516487][ T5710] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.616433][ T4248] Bluetooth: hci1: command 0x0406 tx timeout [ 183.622795][ T4248] Bluetooth: hci3: command 0x0406 tx timeout [ 184.344221][ T6110] tipc: Failed to remove unknown binding: 66,1,1/0:2323041973/2323041975 [ 184.353264][ T6110] tipc: Failed to remove unknown binding: 66,1,1/0:2323041973/2323041975 [ 185.179278][ T6120] loop6: detected capacity change from 0 to 2048 [ 185.223198][ T4262] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.243312][ T4262] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.312420][ T6120] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 185.315210][ T4262] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 185.431439][ T26] audit: type=1800 audit(1739378147.464:5): pid=6129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.324" name="bus" dev="loop6" ino=1367 res=0 errno=0 [ 185.497666][ T1230] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.527545][ T1230] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.595856][ T4582] device hsr_slave_0 left promiscuous mode [ 185.648509][ T4582] device hsr_slave_1 left promiscuous mode [ 185.673579][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 185.694363][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 185.721513][ T4582] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 185.739264][ T4582] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 185.750981][ T4582] device bridge_slave_1 left promiscuous mode [ 185.770960][ T4582] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.801838][ T4582] device bridge_slave_0 left promiscuous mode [ 185.842141][ T4582] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.965037][ T4582] device veth1_macvtap left promiscuous mode [ 185.971126][ T4582] device veth0_macvtap left promiscuous mode [ 186.004383][ T4582] device veth1_vlan left promiscuous mode [ 186.032247][ T4582] device veth0_vlan left promiscuous mode [ 186.241463][ T6144] hub 6-0:1.0: USB hub found [ 186.252821][ T6144] hub 6-0:1.0: 1 port detected [ 187.195027][ T6146] loop6: detected capacity change from 0 to 2048 [ 187.324245][ T6146] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 190.719453][ T4582] team0 (unregistering): Port device team_slave_1 removed [ 190.863469][ T4582] team0 (unregistering): Port device team_slave_0 removed [ 190.880624][ T4582] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.897828][ T4582] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.072433][ T4582] bond0 (unregistering): Released all slaves [ 191.962876][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 192.052828][ T4249] Bluetooth: hci2: command 0x0406 tx timeout [ 192.074249][ T6180] loop3: detected capacity change from 0 to 32768 [ 192.238999][ T6180] BTRFS: device fsid ed167579-eb65-4e76-9a50-61ac97e9b59d devid 1 transid 8 /dev/loop3 scanned by syz.3.338 (6180) [ 192.367734][ T6180] BTRFS info (device loop3): using sha256 (sha256-avx2) checksum algorithm [ 192.376696][ T6180] BTRFS info (device loop3): enabling auto defrag [ 192.383348][ T6180] BTRFS info (device loop3): doing ref verification [ 192.390055][ T6180] BTRFS info (device loop3): use no compression [ 192.396383][ T6180] BTRFS info (device loop3): force clearing of disk cache [ 192.405258][ T6180] BTRFS info (device loop3): max_inline at 4096 [ 192.411652][ T6180] BTRFS info (device loop3): disabling free space tree [ 192.418621][ T6180] BTRFS info (device loop3): has skinny extents [ 194.127970][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.134334][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.394265][ T6180] BTRFS error (device loop3): open_ctree failed [ 197.536431][ T6259] loop6: detected capacity change from 0 to 64 [ 198.885419][ T6268] netlink: 24 bytes leftover after parsing attributes in process `syz.6.352'. [ 199.998483][ T4722] Trying to free block not in datazone [ 200.073163][ T4722] Trying to free block not in datazone [ 200.122291][ T4722] Trying to free block not in datazone [ 200.231452][ T4722] Trying to free block not in datazone [ 200.272770][ T4722] Trying to free block not in datazone [ 200.353277][ T4722] Trying to free block not in datazone [ 200.358792][ T4722] minix_free_inode: bit 6 already cleared [ 200.478594][ T4722] Trying to free block not in datazone [ 200.565000][ T4722] minix_free_inode: bit 7 already cleared [ 200.689430][ T6291] mkiss: ax0: crc mode is auto. [ 202.746547][ T6306] loop5: detected capacity change from 0 to 256 [ 203.504875][ T6314] loop6: detected capacity change from 0 to 1024 [ 203.724663][ T6306] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 203.735866][ T6306] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 203.755009][ T6306] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 206.496667][ T6332] loop3: detected capacity change from 0 to 512 [ 207.675250][ T6332] EXT4-fs (loop3): Ignoring removed oldalloc option [ 207.692743][ T6332] EXT4-fs (loop3): Ignoring removed nomblk_io_submit option [ 208.037052][ T6332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:404: comm syz.3.370: inode #1: comm syz.3.370: iget: illegal inode # [ 208.125827][ T6332] EXT4-fs error (device loop3): ext4_xattr_inode_iget:409: comm syz.3.370: error while reading EA inode 1 err=-117 [ 208.139585][ T6332] EXT4-fs (loop3): 1 orphan inode deleted [ 208.147217][ T6332] EXT4-fs (loop3): mounted filesystem without journal. Opts: journal_ioprio=0x0000000000000005,journal_dev=0x0000000000008000,debug_want_extra_isize=0x0000000000000008,oldalloc,resgid=0x0000000000000000,nomblk_io_submit,usrjquota=,,errors=continue. Quota mode: none. [ 210.489183][ T6383] loop6: detected capacity change from 0 to 32768 [ 210.649318][ T6383] XFS (loop6): Mounting V5 Filesystem [ 210.719399][ T6383] XFS (loop6): Ending clean mount [ 210.761272][ T6383] XFS (loop6): Quotacheck needed: Please wait. [ 210.954644][ T6383] XFS (loop6): Quotacheck: Done. [ 212.108370][ T4722] XFS (loop6): Unmounting Filesystem [ 215.539417][ T6450] UBIFS error (pid: 6450): cannot open "./file0", error -22 [ 217.101521][ T6501] loop3: detected capacity change from 0 to 512 [ 217.272859][ T6501] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 217.346462][ T6501] EXT4-fs (loop3): 1 truncate cleaned up [ 217.389600][ T6501] EXT4-fs (loop3): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,stripe=0x0000000000000004,noinit_itable,quota,. Quota mode: writeback. [ 218.781016][ T6533] loop3: detected capacity change from 0 to 512 [ 218.862629][ T6533] EXT4-fs (loop3): mounted filesystem without journal. Opts: nolazytime,bsddf,max_dir_size_kb=0x0000000000000005,nobarrier,,errors=continue. Quota mode: writeback. [ 218.979335][ T6533] ext4 filesystem being mounted at /87/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 219.991494][ T6550] netlink: 16 bytes leftover after parsing attributes in process `syz.5.392'. [ 224.763634][ T6594] loop7: detected capacity change from 0 to 64 [ 229.018493][ T6647] loop6: detected capacity change from 0 to 764 [ 229.385789][ T6650] rock: directory entry would overflow storage [ 229.392629][ T6650] rock: sig=0x4f50, size=4, remaining=3 [ 229.398301][ T6650] iso9660: Corrupted directory entry in block 6 of inode 1792 [ 229.515001][ T4482] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 229.912917][ T4482] usb 4-1: Using ep0 maxpacket: 8 [ 232.292842][ T4482] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 232.352808][ T4482] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 233.550496][ T4482] usb 4-1: config 0 descriptor?? [ 233.608487][ T4482] usb 4-1: can't set config #0, error -71 [ 233.683256][ T4482] usb 4-1: USB disconnect, device number 5 [ 233.904424][ T6693] dccp_close: ABORT with 214 bytes unread [ 236.922689][ T6722] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:13 to non-existent VLAN 1280 [ 238.518528][ T6745] loop5: detected capacity change from 0 to 1024 [ 238.625078][ T6745] EXT4-fs (loop5): mounted filesystem without journal. Opts: discard,bsdgroups,resuid=0x0000000000000000,resgid=0x0000000000000000,minixdf,errors=remount-ro,journal_ioprio=0x0000000000000004,data_err=abort,max_dir_size_kb=0x0000000000001000,sysvgroups,bsddf,journal_dev=0x000000000000f. Quota mode: writeback. [ 241.325705][ T6742] loop6: detected capacity change from 0 to 1024 [ 241.749821][ T6777] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 243.107681][ T6742] EXT4-fs: failed to create workqueue [ 243.122915][ T6742] EXT4-fs (loop6): mount failed [ 243.542488][ T6785] bridge0: port 3(gretap0) entered blocking state [ 243.550479][ T6785] bridge0: port 3(gretap0) entered disabled state [ 243.558540][ T6785] device gretap0 entered promiscuous mode [ 243.564875][ T6785] bridge0: port 3(gretap0) entered blocking state [ 243.571322][ T6785] bridge0: port 3(gretap0) entered forwarding state [ 243.581332][ T6785] device gretap0 left promiscuous mode [ 243.587015][ T6785] bridge0: port 3(gretap0) entered disabled state [ 246.944437][ T6828] loop3: detected capacity change from 0 to 1024 [ 249.105648][ T6855] loop6: detected capacity change from 0 to 512 [ 249.998551][ T6855] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 250.005337][ T6866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.460'. [ 250.069943][ T6855] EXT4-fs (loop6): 1 truncate cleaned up [ 250.088402][ T6855] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,resuid=0x0000000000000000,debug_want_extra_isize=0x0000000000000068,stripe=0x0000000000000004,noinit_itable,quota,. Quota mode: writeback. [ 253.186691][ T6901] UBIFS error (pid: 6901): cannot open "./file0", error -22 [ 256.287075][ T6917] loop3: detected capacity change from 0 to 512 [ 257.388246][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 257.394731][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 268.753439][ T7026] overlayfs: failed to clone upperpath [ 269.211081][ T4482] Bluetooth: hci0: command 0x0406 tx timeout [ 270.463893][ T7044] loop6: detected capacity change from 0 to 64 [ 270.538625][ T7044] hfs: filesystem is marked locked, mounting read-only. [ 274.394648][ T4208] Bluetooth: hci5: command 0x0406 tx timeout [ 275.355458][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 276.655870][ T4248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.650642][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 278.908321][ T4208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.071006][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 280.918010][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.121057][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 281.377890][ T7182] loop7: detected capacity change from 0 to 1024 [ 281.474377][ T7179] loop6: detected capacity change from 0 to 524287999 [ 282.160154][ T7182] EXT4-fs (loop7): Ignoring removed orlov option [ 282.169056][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 32 prio class 0 [ 282.219670][ T7182] EXT4-fs (loop7): Ignoring removed nomblk_io_submit option [ 282.256547][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.267530][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.550272][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 282.585128][ C1] blk_update_request: I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.596057][ C1] Buffer I/O error on dev loop6, logical block 0, async page read [ 282.603976][ C1] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 0 [ 282.619990][ C0] blk_update_request: I/O error, dev loop6, sector 524287744 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 282.631680][ C0] Buffer I/O error on dev loop6, logical block 65535968, async page read [ 283.327466][ T7182] EXT4-fs (loop7): mounted filesystem without journal. Opts: noblock_validity,bsddf,sysvgroups,norecovery,debug_want_extra_isize=0x0000000000000080,orlov,nogrpid,noauto_da_alloc,nomblk_io_submit,,errors=continue. Quota mode: none. [ 283.572998][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 284.023501][ T7226] pit: kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 284.072033][ T7226] kvm: pic: non byte read [ 284.082982][ T7226] kvm: pic: level sensitive irq not supported [ 284.083059][ T7226] kvm: pic: non byte read [ 284.964546][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.255371][ T7256] loop7: detected capacity change from 0 to 2048 [ 286.416857][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 286.726235][ T7256] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 287.686679][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 287.898300][ T7275] loop6: detected capacity change from 0 to 2048 [ 288.146745][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.277082][ T7275] EXT4-fs (loop6): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 288.411362][ T4208] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.722512][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 288.802817][ T4482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 289.134459][ T7292] loop6: detected capacity change from 0 to 32768 [ 289.205490][ T7292] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 289.213809][ T7292] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 289.238739][ T7292] gfs2: fsid=syz:syz.s: journal 0 mapped with 5 extents in 0ms [ 289.343008][ T7292] gfs2: fsid=syz:syz.s: first mount done, others may mount [ 289.556954][ T7301] overlayfs: failed to clone upperpath [ 290.771784][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 291.842566][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 292.869839][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.506307][ T7350] loop3: detected capacity change from 0 to 2048 [ 293.610079][ T7350] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 293.652753][ T7350] UDF-fs: Scanning with blocksize 512 failed [ 293.696567][ T7350] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 293.829929][ T7358] loop6: detected capacity change from 0 to 2048 [ 293.877436][ T7362] loop5: detected capacity change from 0 to 2048 [ 293.901304][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 293.920817][ T7358] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.010703][ T7362] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 294.123694][ T26] audit: type=1800 audit(1739378256.170:6): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.560" name="bus" dev="loop5" ino=1367 res=0 errno=0 [ 294.957119][ T7392] xt_TCPMSS: Only works on TCP SYN packets [ 296.078047][ T26] audit: type=1326 audit(1739378256.950:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.568476][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 296.728172][ T26] audit: type=1326 audit(1739378256.960:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.750265][ T26] audit: type=1326 audit(1739378256.970:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.772338][ T26] audit: type=1326 audit(1739378256.970:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.795284][ T26] audit: type=1326 audit(1739378256.980:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.817428][ T26] audit: type=1326 audit(1739378256.980:12): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.869136][ T26] audit: type=1326 audit(1739378256.990:13): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 296.892768][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.129190][ T26] audit: type=1326 audit(1739378256.990:14): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 298.192055][ T26] audit: type=1326 audit(1739378256.990:15): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7388 comm="syz.5.563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f710ecbbde9 code=0x7ffc0000 [ 298.245141][ T4482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 298.252716][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 299.332435][ T4248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 300.007645][ T7425] loop7: detected capacity change from 0 to 2048 [ 301.247034][ T4248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 301.326537][ T7425] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 301.384818][ T7438] loop6: detected capacity change from 0 to 2048 [ 301.614567][ T7438] [EXT4 FS bs=2048, gc=1, bpg=262144, ipg=32, mo=a802e02c, mo2=0002] [ 301.640746][ T7438] System zones: 0-7 [ 301.718001][ T7438] EXT4-fs (loop6): mounted filesystem without journal. Opts: lazytime,usrjquota=,errors=remount-ro,bsdgroups,auto_da_alloc,jqfmt=vfsv1,nouid32,journal_dev=0x0000000000000007,debug,bsddf,. Quota mode: none. [ 302.710820][ T7453] EXT4-fs error (device loop6): ext4_validate_block_bitmap:438: comm syz.6.576: bg 0: block 234: padding at end of block bitmap is not set [ 302.736394][ T4248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 302.783146][ T7453] EXT4-fs (loop6): Remounting filesystem read-only [ 303.921410][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.201684][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 304.933138][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.004739][ T4702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 305.125731][ T7467] loop7: detected capacity change from 0 to 4096 [ 305.355157][ T7475] loop6: detected capacity change from 0 to 1024 [ 305.489927][ T7475] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 305.512276][ T26] kauditd_printk_skb: 24 callbacks suppressed [ 305.512289][ T26] audit: type=1800 audit(1739378267.550:40): pid=7475 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.584" name="file1" dev="loop6" ino=839 res=0 errno=0 [ 306.422481][ T4248] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.634524][ T5710] ntfs3: loop7: ntfs_evict_inode r=5 failed, -22. [ 306.682674][ T5710] ntfs3: loop7: Mark volume as dirty due to NTFS errors [ 306.710596][ T7483] loop5: detected capacity change from 0 to 2048 [ 306.730620][ T4482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 306.892361][ T7487] loop7: detected capacity change from 0 to 256 [ 306.925188][ T7483] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 306.993791][ T7487] FAT-fs (loop7): Unrecognized mount option "˙˙˙˙˙˙" or missing value [ 307.285434][ T7487] loop7: detected capacity change from 0 to 512 [ 307.349325][ T7487] EXT4-fs error (device loop7): ext4_validate_block_bitmap:429: comm syz.7.587: bg 0: block 5: invalid block bitmap [ 307.388822][ T7487] EXT4-fs error (device loop7) in ext4_mb_clear_bb:6183: Corrupt filesystem [ 307.418090][ T7487] EXT4-fs error (device loop7): ext4_free_branches:1030: inode #11: comm syz.7.587: invalid indirect mapped block 3 (level 2) [ 307.513187][ T7487] EXT4-fs (loop7): 1 orphan inode deleted [ 307.518951][ T7487] EXT4-fs (loop7): 1 truncate cleaned up [ 307.524758][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 307.546483][ T7487] EXT4-fs (loop7): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: writeback. [ 307.883273][ T7504] EXT4-fs error (device loop7): ext4_check_all_de:664: inode #12: block 7: comm syz.7.587: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=4278190093, rec_len=255, size=124 fake=0 [ 308.323927][ T4239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.340563][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 308.700601][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.142959][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 310.255414][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.164071][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 312.175808][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.306794][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 313.376099][ T7547] loop7: detected capacity change from 0 to 4096 [ 313.571007][ T7551] loop6: detected capacity change from 0 to 2048 [ 313.752238][ T4582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.365866][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.380374][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 315.662383][ T7551] UDF-fs: bad mount option "anchor=00000000002147483649" or missing value [ 315.806193][ T7561] loop5: detected capacity change from 0 to 256 [ 316.012171][ T7547] NILFS (loop7): error -4 creating segctord thread [ 316.020168][ T7561] exfat: Unknown parameter 'nameŞ}t' [ 316.148935][ T7568] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 316.166480][ T7568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 316.174780][ T7568] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 316.190755][ T7568] device bridge_slave_0 left promiscuous mode [ 316.197697][ T7568] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.437853][ T7569] loop6: detected capacity change from 0 to 512 [ 317.416520][ T7569] EXT4-fs (loop6): 1 orphan inode deleted [ 317.422296][ T7569] EXT4-fs (loop6): mounted filesystem without journal. Opts: errors=remount-ro,nodiscard,noquota,init_itable,stripe=0x0000000000000079,resgid=0x0000000000000000,sysvgroups,delalloc,usrquota,. Quota mode: writeback. [ 317.446100][ T7569] ext4 filesystem being mounted at /92/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 317.609533][ T7569] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936 [ 317.663892][ T4239] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.323160][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 318.574304][ T7568] device bridge_slave_1 left promiscuous mode [ 318.580616][ T7568] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.733487][ T7574] loop5: detected capacity change from 0 to 256 [ 319.394422][ T4482] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.423124][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.423595][ T4702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.801752][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 319.815249][ T7568] bond0: (slave bond_slave_0): Releasing backup interface [ 319.850461][ T7574] exFAT-fs (loop5): Invalid boot checksum (boot checksum : 0x1119abd0, checksum : 0x111ce1d0) [ 319.860865][ T7574] exFAT-fs (loop5): invalid boot region [ 319.866462][ T7574] exFAT-fs (loop5): failed to recognize exfat type [ 319.894180][ T7568] bond0: (slave bond_slave_1): Releasing backup interface [ 319.950700][ T7568] team0: Port device team_slave_0 removed [ 320.022283][ T7568] team0: Port device team_slave_1 removed [ 320.029232][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.036976][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.068931][ T7568] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.076479][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.857135][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 321.306404][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.062985][ T1420] ieee802154 phy0 wpan0: encryption failed: -22 [ 322.069334][ T1420] ieee802154 phy1 wpan1: encryption failed: -22 [ 322.076030][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 322.412713][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 323.795408][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 324.913817][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 325.256017][ T4706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 326.546281][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.300080][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.818886][ T4269] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.852378][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 327.863845][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 328.934782][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.213262][ T7687] loop5: detected capacity change from 0 to 4096 [ 330.418487][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 330.936837][ T7687] ntfs3: loop5: Different NTFS' sector size (4096) and media sector size (512) [ 330.956578][ T7687] ntfs3: loop5: Mark volume as dirty due to NTFS errors [ 330.974291][ T7687] ntfs3: loop5: Failed to load $UpCase. [ 331.235076][ T7686] loop5: detected capacity change from 0 to 32768 [ 331.387113][ T7686] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by syz.5.639 (7686) [ 331.437165][ T4706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.461973][ T7686] BTRFS info (device loop5): using blake2b (blake2b-256-generic) checksum algorithm [ 331.471561][ T7686] BTRFS info (device loop5): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 331.483186][ T7686] BTRFS info (device loop5): use zstd compression, level 3 [ 331.490439][ T7686] BTRFS info (device loop5): using free space tree [ 331.497094][ T7686] BTRFS info (device loop5): has skinny extents [ 331.511146][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 331.609910][ T4581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 332.327078][ T7686] BTRFS error (device loop5): open_ctree failed [ 332.345924][ T6106] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop5 scanned by udevd (6106) [ 334.406891][ T4706] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 334.934888][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 335.117626][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.236633][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 336.802802][ T4702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.729647][ T4777] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 337.754301][ T4702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.419926][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 339.763552][ T4581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.064754][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 341.998594][ T7815] loop5: detected capacity change from 0 to 2048 [ 342.055690][ T7814] mip6: mip6_rthdr_init_state: spi is not 0: 3557031936 [ 342.710371][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 342.988482][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.057915][ T4581] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 343.093424][ T7815] EXT4-fs (loop5): mounted filesystem without journal. Opts: ,errors=continue. Quota mode: none. [ 343.182922][ T6505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 344.246050][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.453747][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 345.494199][ T4582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 346.600721][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 347.884381][ T7866] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 349.093544][ T4512] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.114428][ T4702] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 349.128661][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.165398][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.178057][ T4157] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.201356][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.036674][ T7916] loop6: detected capacity change from 0 to 512 [ 353.108619][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 353.294506][ T7916] EXT4-fs (loop6): external journal device major/minor numbers have changed [ 354.159269][ T4780] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.193785][ T5786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 354.269990][ T7922] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 355.404385][ T9] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 355.594244][ T7916] EXT4-fs (loop6): failed to open journal device unknown-block(2940,205839) -6 [ 355.632185][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.597421][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 356.831463][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 357.655134][ T7950] netlink: 'syz.6.702': attribute type 15 has an invalid length. [ 358.110466][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 358.543150][ T2855] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.237907][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.256675][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.433770][ T7966] netlink: 2 bytes leftover after parsing attributes in process `syz.5.706'. [ 359.654737][ T7967] netlink: 'syz.3.707': attribute type 15 has an invalid length. [ 361.193154][ T144] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 361.496280][ T7973] netlink: 'syz.3.708': attribute type 15 has an invalid length. [ 361.524873][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.126729][ T5786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 363.844319][ T4210] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.746927][ T7997] loop7: detected capacity change from 0 to 2048 [ 364.894364][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.928920][ T7997] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 365.166656][ T8009] netlink: 'syz.4.717': attribute type 15 has an invalid length. [ 365.853928][ T5786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 365.953089][ T26] audit: type=1800 audit(1739378328.000:41): pid=8010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.7.716" name="bus" dev="loop7" ino=1367 res=0 errno=0 [ 368.404276][ T5786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.842826][ T8023] netlink: 'syz.4.722': attribute type 15 has an invalid length. [ 369.197340][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 369.354225][ T8028] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 369.565460][ T8032] netlink: 'syz.3.725': attribute type 15 has an invalid length. [ 369.911001][ T8038] xt_policy: neither incoming nor outgoing policy selected [ 370.277885][ T8051] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 370.993927][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.333142][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.578988][ T8063] netlink: 'syz.3.733': attribute type 15 has an invalid length. [ 374.995176][ T5786] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.007195][ T1439] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.538748][ T8094] netlink: 'syz.3.741': attribute type 15 has an invalid length. [ 377.058315][ T4582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 377.360532][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 378.663831][ T8102] xt_policy: neither incoming nor outgoing policy selected [ 380.125354][ T8132] netlink: 'syz.6.750': attribute type 15 has an invalid length. [ 380.300188][ T4582] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.935893][ T6503] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.998286][ T26] audit: type=1326 audit(1739378343.040:42): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d0b2de9 code=0x7ffc0000 [ 381.488738][ T8147] loop5: detected capacity change from 0 to 8192 [ 381.619192][ T8147] FAT-fs (loop5): Unrecognized mount option "" or missing value [ 381.629208][ T26] audit: type=1326 audit(1739378343.410:43): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f9c7d0b2de9 code=0x7ffc0000 [ 381.734556][ T26] audit: type=1326 audit(1739378343.570:44): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8142 comm="syz.3.758" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f9c7d0b2de9 code=0x7ffc0000 [ 486.612478][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 486.619495][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P3545/1:b..l [ 486.628110][ C1] (detected by 1, t=10503 jiffies, g=24617, q=32) [ 486.634620][ C1] task:udevd state:R running task stack:22720 pid: 3545 ppid: 1 flags:0x00004002 [ 486.647006][ C1] Call Trace: [ 486.650313][ C1] [ 486.653259][ C1] __schedule+0x12c4/0x45b0 [ 486.657823][ C1] ? validate_chain+0x112/0x5930 [ 486.662787][ C1] ? lockdep_hardirqs_on_prepare+0x438/0x7a0 [ 486.668783][ C1] ? release_firmware_map_entry+0x190/0x190 [ 486.674699][ C1] ? preempt_schedule_irq+0xec/0x1c0 [ 486.680006][ C1] preempt_schedule_irq+0xf7/0x1c0 [ 486.685130][ C1] ? __cond_resched+0x20/0x20 [ 486.689810][ C1] ? read_lock_is_recursive+0x10/0x10 [ 486.695199][ C1] irqentry_exit+0x53/0x80 [ 486.699629][ C1] asm_sysvec_reschedule_ipi+0x16/0x20 [ 486.705097][ C1] RIP: 0010:dput+0xee/0x1a0 [ 486.709612][ C1] Code: f8 03 00 00 84 c0 0f 85 ac 00 00 00 48 89 df e8 88 06 00 00 48 85 c0 0f 84 b1 00 00 00 48 89 c3 e8 d7 bc a4 ff e9 25 ff ff ff 3d 8c 63 08 89 c3 31 ff 89 c6 e8 22 c0 a4 ff 85 db 74 18 e8 a9 [ 486.729257][ C1] RSP: 0018:ffffc90002d1f568 EFLAGS: 00000202 [ 486.735355][ C1] RAX: 0000000080000001 RBX: ffff88801dfb2000 RCX: 0000000000000001 [ 486.743333][ C1] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000001 [ 486.751310][ C1] RBP: 0000000000000001 R08: dffffc0000000000 R09: ffffed1003bf6413 [ 486.759292][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: ffffc90002d1f650 [ 486.767268][ C1] R13: ffffc90002d1fbc0 R14: dffffc0000000000 R15: 1ffff920005a3ec4 [ 486.775268][ C1] ? dput+0xb7/0x1a0 [ 486.779178][ C1] step_into+0x352/0xe90 [ 486.783443][ C1] ? lookup_fast+0x399/0x7b0 [ 486.788043][ C1] ? set_root+0x3b0/0x3b0 [ 486.792382][ C1] ? __up_read+0x2b9/0x690 [ 486.796818][ C1] walk_component+0x359/0x610 [ 486.801536][ C1] ? nd_alloc_stack+0xf0/0xf0 [ 486.806226][ C1] ? kernfs_iop_permission+0x25b/0x360 [ 486.811697][ C1] ? inode_permission+0x21e/0x450 [ 486.816738][ C1] ? inode_permission+0xf7/0x450 [ 486.821687][ C1] ? kernfs_evict_inode+0x60/0x60 [ 486.826718][ C1] ? bpf_lsm_inode_permission+0x5/0x10 [ 486.832200][ C1] ? security_inode_permission+0xad/0xf0 [ 486.837856][ C1] link_path_walk+0x642/0xd90 [ 486.842537][ C1] ? set_root+0x332/0x3b0 [ 486.846897][ C1] ? handle_lookup_down+0x130/0x130 [ 486.852138][ C1] path_openat+0x249/0x2f20 [ 486.856656][ C1] ? stack_trace_snprint+0xe0/0xe0 [ 486.861786][ C1] ? mark_lock+0x98/0x340 [ 486.866131][ C1] ? __lock_acquire+0x1295/0x1ff0 [ 486.871190][ C1] ? do_filp_open+0x460/0x460 [ 486.875908][ C1] do_filp_open+0x21c/0x460 [ 486.880430][ C1] ? vfs_tmpfile+0x2e0/0x2e0 [ 486.885046][ C1] ? _raw_spin_unlock+0x24/0x40 [ 486.889909][ C1] ? alloc_fd+0x598/0x630 [ 486.894266][ C1] do_sys_openat2+0x13b/0x4f0 [ 486.898964][ C1] ? do_sys_open+0x220/0x220 [ 486.903568][ C1] ? rcu_is_watching+0x11/0xa0 [ 486.908347][ C1] __x64_sys_openat+0x243/0x290 [ 486.913209][ C1] ? __ia32_sys_open+0x270/0x270 [ 486.918163][ C1] ? syscall_enter_from_user_mode+0x37/0x240 [ 486.924158][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 486.930162][ C1] do_syscall_64+0x3b/0xb0 [ 486.934591][ C1] ? clear_bhb_loop+0x15/0x70 [ 486.939283][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 486.945189][ C1] RIP: 0033:0x7f5d39fb49a4 [ 486.949613][ C1] RSP: 002b:00007ffc84cbca30 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 486.958031][ C1] RAX: ffffffffffffffda RBX: 0000000000000008 RCX: 00007f5d39fb49a4 [ 486.966019][ C1] RDX: 0000000000080000 RSI: 00007ffc84cbcb68 RDI: 00000000ffffff9c [ 486.974001][ C1] RBP: 00007ffc84cbcb68 R08: 0000000000000008 R09: 0000000000000001 [ 486.981976][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000080000 [ 486.989948][ C1] R13: 000055d00d1dcb42 R14: 0000000000000001 R15: 0000000000000000 [ 486.997938][ C1] [ 487.000963][ C1] rcu: rcu_preempt kthread starved for 10521 jiffies! g24617 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 487.012176][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 487.022150][ C1] rcu: RCU grace-period kthread stack dump: [ 487.028035][ C1] task:rcu_preempt state:R running task stack:26712 pid: 15 ppid: 2 flags:0x00004000 [ 487.038829][ C1] Call Trace: [ 487.042108][ C1] [ 487.045048][ C1] __schedule+0x12c4/0x45b0 [ 487.049573][ C1] ? _raw_spin_unlock_irqrestore+0x8b/0x130 [ 487.055481][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 487.061404][ C1] ? __mod_timer+0xa8e/0xeb0 [ 487.066017][ C1] ? release_firmware_map_entry+0x190/0x190 [ 487.071928][ C1] ? mod_timer_pending+0x20/0x20 [ 487.076882][ C1] ? lockdep_softirqs_off+0x420/0x420 [ 487.082288][ C1] schedule+0x11b/0x1f0 [ 487.086454][ C1] schedule_timeout+0x1b9/0x300 [ 487.091325][ C1] ? console_conditional_schedule+0x40/0x40 [ 487.097241][ C1] ? update_process_times+0x200/0x200 [ 487.102641][ C1] ? prepare_to_swait_event+0x321/0x340 [ 487.108204][ C1] rcu_gp_fqs_loop+0x2bf/0x1080 [ 487.113065][ C1] ? _raw_spin_unlock_irq+0x1f/0x40 [ 487.118284][ C1] ? dyntick_save_progress_counter+0x230/0x230 [ 487.124448][ C1] ? rcu_gp_init+0xdae/0x1140 [ 487.129162][ C1] ? rcu_gp_init+0x1140/0x1140 [ 487.133935][ C1] ? finish_swait+0xc5/0x1d0 [ 487.138532][ C1] rcu_gp_kthread+0xa4/0x360 [ 487.143125][ C1] ? _raw_spin_unlock+0x40/0x40 [ 487.147984][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 487.153103][ C1] ? _raw_spin_unlock_irqrestore+0xd9/0x130 [ 487.159005][ C1] ? __kthread_parkme+0x15c/0x1c0 [ 487.164036][ C1] kthread+0x3f6/0x4f0 [ 487.168111][ C1] ? rcu_report_qs_rsp+0x1a0/0x1a0 [ 487.173229][ C1] ? kthread_blkcg+0xd0/0xd0 [ 487.177828][ C1] ret_from_fork+0x1f/0x30 [ 487.182261][ C1] [ 487.185280][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 487.191598][ C1] NMI backtrace for cpu 1 [ 487.195936][ C1] CPU: 1 PID: 8149 Comm: syz.7.759 Not tainted 5.15.178-syzkaller #0 [ 487.204007][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 487.214065][ C1] Call Trace: [ 487.217356][ C1] [ 487.220270][ C1] dump_stack_lvl+0x1e3/0x2d0 [ 487.224975][ C1] ? io_uring_drop_tctx_refs+0x1a0/0x1a0 [ 487.230621][ C1] ? panic+0x860/0x860 [ 487.234721][ C1] nmi_cpu_backtrace+0x46a/0x4a0 [ 487.239679][ C1] ? __wake_up_klogd+0xd5/0x100 [ 487.244544][ C1] ? nmi_trigger_cpumask_backtrace+0x2a0/0x2a0 [ 487.250719][ C1] ? _printk+0xd1/0x120 [ 487.254895][ C1] ? cpu_online+0x1f/0x40 [ 487.259231][ C1] ? panic+0x860/0x860 [ 487.263314][ C1] ? arch_trigger_cpumask_backtrace+0x10/0x10 [ 487.269388][ C1] nmi_trigger_cpumask_backtrace+0x181/0x2a0 [ 487.275378][ C1] rcu_check_gp_kthread_starvation+0x1d2/0x240 [ 487.281564][ C1] print_other_cpu_stall+0x137a/0x14d0 [ 487.287048][ C1] ? print_cpu_stall+0x600/0x600 [ 487.292014][ C1] rcu_sched_clock_irq+0xa38/0x1150 [ 487.297243][ C1] ? rcutree_dead_cpu+0x20/0x20 [ 487.302096][ C1] ? do_raw_spin_unlock+0x137/0x8b0 [ 487.307306][ C1] ? hrtimer_run_queues+0x163/0x450 [ 487.312510][ C1] ? account_process_tick+0x232/0x3a0 [ 487.317926][ C1] update_process_times+0x196/0x200 [ 487.323147][ C1] tick_sched_timer+0x386/0x550 [ 487.328102][ C1] ? tick_setup_sched_timer+0x2d0/0x2d0 [ 487.333750][ C1] __hrtimer_run_queues+0x55b/0xcf0 [ 487.338974][ C1] ? hrtimer_interrupt+0x980/0x980 [ 487.344178][ C1] ? ktime_get_update_offsets_now+0x407/0x420 [ 487.350259][ C1] hrtimer_interrupt+0x392/0x980 [ 487.355244][ C1] __sysvec_apic_timer_interrupt+0x13b/0x4b0 [ 487.361239][ C1] sysvec_apic_timer_interrupt+0x9b/0xc0 [ 487.366888][ C1] [ 487.369825][ C1] [ 487.372772][ C1] asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 487.378757][ C1] RIP: 0010:syscall_enter_from_user_mode+0x37/0x240 [ 487.385361][ C1] Code: 49 89 fe 48 8b 7c 24 30 e8 46 f6 ff ff e9 8d 01 00 00 e9 91 01 00 00 e8 87 ab 47 f7 e8 72 a9 47 f7 fb 65 4c 8b 3d 39 15 c3 75 <49> 8b 5f 08 f6 c3 3f 0f 84 ce 00 00 00 f6 c3 20 74 17 4c 89 f7 e8 [ 487.404970][ C1] RSP: 0018:ffffc90002e6fef8 EFLAGS: 00000282 [ 487.411053][ C1] RAX: ee572316a0854d00 RBX: ffffc90002e6ff30 RCX: ffffffff96a92f03 [ 487.419065][ C1] RDX: dffffc0000000000 RSI: ffffffff8aab2b80 RDI: ffffffff8af9f2c0 [ 487.427057][ C1] RBP: ffffc90002e6ff48 R08: ffffffff81870420 R09: fffffbfff1c150ee [ 487.435056][ C1] R10: 0000000000000000 R11: dffffc0000000001 R12: 0000000000000000 [ 487.443035][ C1] R13: 0000000000000027 R14: ffffc90002e6ff58 R15: ffff888028e71dc0 [ 487.451016][ C1] ? trace_hardirqs_on+0x30/0x80 [ 487.455990][ C1] ? syscall_enter_from_user_mode+0x2e/0x240 [ 487.462001][ C1] do_syscall_64+0x1e/0xb0 [ 487.466437][ C1] ? clear_bhb_loop+0x15/0x70 [ 487.471148][ C1] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 487.477079][ C1] RIP: 0033:0x7fa815fa3da7 [ 487.481509][ C1] Code: 0b e9 68 fe ff ff 48 83 c4 18 48 8d 3d f2 8a d5 00 5b 5d 41 5c 41 5d 41 5e 41 5f e9 f3 f7 fb ff 0f 1f 00 b8 27 00 00 00 0f 05 0f 1f 84 00 00 00 00 00 b8 6e 00 00 00 0f 05 c3 0f 1f 84 00 00 [ 487.501132][ C1] RSP: 002b:00007fa813e15b08 EFLAGS: 00000202 ORIG_RAX: 0000000000000027 [ 487.509563][ C1] RAX: ffffffffffffffda RBX: 00007fa813e15c70 RCX: 00007fa815fa3da7 [ 487.517540][ C1] RDX: 00007fa813e15b40 RSI: 00007fa813e15c70 RDI: 0000000000000021 [ 487.525517][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: 0000000000000000 [ 487.533495][ C1] R10: 0000000000000000 R11: 0000000000000202 R12: 00007fa8161c5fac [ 487.541488][ C1] R13: 0000000000000000 R14: 00007ffe60e60590 R15: 00007ffe60e60678 [ 487.549485][ C1]