last executing test programs: 9m38.202073762s ago: executing program 0 (id=49): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x0, &(0x7f00000001c0)={[{@grpquota}, {@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x800}}, {@minixdf}]}, 0x1, 0x503, &(0x7f0000000fc0)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x101042, 0x174) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000140)) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x31, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) memfd_create(&(0x7f0000000000)='prodM\xb0\xea\a\x06\xbe\xaen/\xce4\xb7\xc1\xef\xba!\x9d\rSt\xa24\t\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x1dz\xd05\xe2e,\xb1\x84\xea\x91^%A\xe5\x9e\x13TdT\xc6^p\xb0#R\x04\x06\xae\xebA;Y\xeb\x8f\xec\xb4\xf9\x17\xb7\x04\xc2\xc0\xc6\xb4\v\xff\xfc\x88\x90\xabC\x02\x00\xf04\x03\x88\xae9\'>R^P{Vr!\xe2W\xc72\xea\xb7Wp\xc36\x96\xffZ\\A@\x00\x00\x00\xc9\xf3Y\xb8\x89#\xa1\xb1)Dk\xeb\xa1\t\x00{u[\xbd\x9d\xf4\xbf\\\xce\x02P\xf2MY\x05^\xffj\x9c\x14\xb7\xb6v\x1d*1>\x00 \x00\x00\x00\x00\x14C?]\x8c\xb4Y\xcf\x80\x85\xd6\x036\xc8~\xa8\f\x00\x00\xb5M\x9a\x9dc\xaaAU\xec\xe06\xed\xe4\xfb\xdf\a\xd0lg\x13\xf9\x8b:s>\xd7s\xef\xb3\x9f#\x15)\xf9\xe10\xc7\xb262\x00\x00\x00\x00\x00\x00\x00\x00Nz\x0eu\x8f\x01\x00\x00\x00\x00\x00\x00\xdd\xff\xff\xff\x00\x00\x00\x00\x00\x00\x00\x00\x00\xc3\xa7/\x0f\x9b`\xa5\x98\x81a\xeev\x00\x00\x00\x00\a\x10\x00m2\xf2\xd8,\x17\xf8\x8e\xae\xc8\xad\xed<\"\x8e\n\x9d\xb13\x8d\xef\x96\xd2I\"8=tg\xdfU\xd0q\x95/f\xec\xdc\xa3\xe1[\xc0\xaa\xefz\xc9\xf4[\x00\x00\x00Q\xff}5\x94\x88\xa1\xdc\xa1g\xe0q\xc5:\xe4\xdf\x80\xb3,\xb9\xb2\xdc\x81\x9f6\x0f\x84WY\xbfSY`\xb8\a\x19\xb1\x058\xa4\xc3\xbb\xf8aB:\x84\x02?\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\xf3o-GU\xb0\x00F\xb3o(aI[\xd6\x9fG\xaeI\x83\x93\x8cC\xc0#\xe0q\xd0Ex|\xdb\xa8\x16\xfe>:\t0\xfd\x8a\xc7\x84\xb5\xc7M-0A\xf0\x94\xf3\xcc\x8d\xbb3\\\"\x882\xb3\xa84\xac\x00\xdd}Ft\xc6\xcc\f}1X#\xe4\xe1\x94i\xce\xa1\xff\x95\x80\xb4T\x9c\x01\xf3\x1cLB\x94m(m\f\xbc\xebY\xa0\xf7\xf0\x9d\x10\xbd\x86\x1by\xe6\xdf\xc0\xc5\xb9\xb9\xbf\xdf~9\nC\xe9\xc5\x0e\xda\x9c(\x9b\"\xc7\x97\xfc\b\xd9\xc2T\xa7*}]\xc8\xb3 .\x9b\x89\x0f\xf8$\xdd>lU\x13EG\xbb1] \xda\x19\xc5\x9b\x15\x95\xc4\xfcw\xbb\x92\x91\xc4\xa6\x907XK\xfc\x17]\xfa\xff\'\xef\x92\x1c\xb8\x1fK\xb2o \xd1\xbd\xb2\x11+\xa3R\xefQ\xc2\xbdW\x05\xec\xb3=@\x03\xc6^\xa2\x15%\xb0\'D#\xb6Q\x8f\x82?S>\x0fP\x9cE\x92{d\xe6\x9cj1\x87\xb3\x01\xde\xe8\x89\xc4s\xb7\x14~}\xaa\x8c\xc3\x95BAE\xf2.\x8f#;a\x94\"\xd1U\xff\xe8v\xd3\x84d\xf4\x134\xa6XI\xe5h\xaa\x15\x9a\xf7Z\xe3%\x88p\x90\xbb\x9dt\xa3\xe1\r\x8d\x94\"\x19\x8b\x17)\xea\xd5\x17\xeb\xe4\x1b\x0fBZ1\xbe\xee\xfa\x1c\xf9\xa6\x11\x94\x06\\P:\xaf\xcex\xc2\x82\x9a\x16\xfc\xa1\xf9q\x12\xe3\x1a\xdc\xb7\x12\xbba\b\xbb\xed\xb2\xd1W\xe2\x8b\x8d8}\x10W\xbd\xa60A\xc3\x03\xfa\x890\x86#\bQ\xcb)\x00]\x9e\x14\xd2\xea\x82\xa8\xb7ZG\x15r\xf1\t\x00\x00\x00 \xc1\xaf\x19?\x00\\\x91\x13\x1b8\xe1\xc3\xa4\v\x94\xbfJ\xb5\xde\x95\x82\x00]B|\xe2[%\xe3\xf0\x04\xba\xed\xdb\xf5\x7f\x9d\xfe>\xf6m$M&\x7fq]\xe4\xf6\x82\xc3\x00\xb1zg}\x99E\xa4\x19\xe9\x1a4a\xd75D-k\x84\xa6\x12+\xebk\xa1\xfek\x89\xef\x18\xc1)6\xa65\xe2D\xbe\xe1\xdfq\xdd68\xf37g\xab9m\xe7\xddO\v?\xe0\xbe}\xa9U\xc7{\xd3\x16W\xbb\xe5\xd2\x93\xfe\xa4\x9d\r$\xe91c8`\x86\xbc)\xe29\xc3}\xb9P\xd5F\xc6\x12\x8c_x\xa8\xfa\xb5K\x03\x85\x93k\xe1\x8e\x1f)\".\xcc\'\v\xa6\x1bj\\\n\xe98yA\xd8T\x85\x80A\xcbo\x99\x99\xeb)r\x1a\xce\x18(\x185LL\xbcOeO\'\xe2\x86&\xe4\xe2\xe7~\x92\xa2\xb2\x1b\xc3\x00\x85\xce\xad7\x87\xa0\xfcc\xf5\xf8\xaf\v,q\xd4\x18\xbdM\x1a\xde\xba*L\x05m6\xecH\xd0T\xb8m\xdb\b\xa6\x02\xfb\x13\xac\x91\x8a\x8d\x94\x93\x8d=\xb1\x84\x9c\x9b\xe5\xc7\xa6\xc9Q\xc1eUc\xcc\x180^\x00\x00\x00\x00\x00\x00\x00\x00\xe7]6+\\\x00\x00\x00\x00?#C.\x1dj\xd9\xc3\xdd&\x80g:N\xec\x06[\x8f\x92\xe2\xb01\xb0\xef\x10,\xde\xf3\x86D\x8b\xf7\xf1>AH\xef\\\xf9\x8b\a\xe0\xb2\xcb\xf0\x97\b\r\xd5`\xb9\xd6\xa4\x1e\xbe\x12-}\xc5\x84\xde@\x18\x87\f\x01O\xedS\x8f\x9en,\xbce\xb2\xe4\x82v\x1c\xed\x84-s\xab\x06b\x9c\xba\xec\xa5\xc9A\x84\xd0\xe0 S\xc8\xa2\xaf\x85\v\xad\xa5\x88\xcf\xb6}`\x14\'\xea\xbfN\xac)\xa1\xe8\xb2\x9f\x112TJ\x16\x8c9\xe9\xf5\x18\x15Dd\x8a%>\x91\x93\x88\xe9\x18\x82]\x9e&\xfa\xaa\xfa8Z2\x00'/1301, 0x3) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 9m34.345273307s ago: executing program 0 (id=61): sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x4000800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x800000000000001, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019640)=""/102392, 0x18ff8) r1 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = fcntl$dupfd(r1, 0x0, r1) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000001140)=0x10000000) 9m30.47485508s ago: executing program 0 (id=72): socket(0x200000000000011, 0x2, 0x0) socket(0x200000000000011, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008f00850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket$inet6_icmp(0xa, 0x2, 0x3a) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000280)='kfree\x00', r0}, 0x18) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1f, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000d8d60b007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='fdinfo\x00') getdents(r2, &(0x7f0000000ec0)=""/4096, 0x1000) 9m29.603716134s ago: executing program 0 (id=76): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000680)='./bus\x00', 0x141842, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file2\x00', 0x404, &(0x7f0000000640), 0x3, 0x42f, &(0x7f0000000200)="$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") r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_user\x00', 0x275a, 0x0) copy_file_range(r1, 0x0, r0, 0x0, 0x81, 0x10000000000000) 9m27.688775652s ago: executing program 0 (id=84): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[@ANYBLOB="03010000b5"], 0xc8) r2 = syz_io_uring_setup(0x10d, &(0x7f0000000140)={0x0, 0x9a85, 0x0, 0x0, 0x180000}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x1}}) io_uring_enter(r2, 0x3516, 0x0, 0x0, 0x0, 0x0) mkdir(0x0, 0x0) close(0x4) 9m25.550612946s ago: executing program 0 (id=94): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) eventfd(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) 9m24.660112878s ago: executing program 32 (id=94): bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f00000001c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000580)='sched_switch\x00', r0}, 0x10) eventfd(0x0) read$FUSE(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x9, 0x8, 0x4, 0x7fc}, 0x50) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0x2000, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000380), 0xce4, r1}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r1, 0x0, 0x100000000000000}, 0x38) 7m53.466174994s ago: executing program 1 (id=308): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r6, r5, 0x2, 0x6, 0x4000}, 0x10) 7m52.050058828s ago: executing program 1 (id=311): open(&(0x7f00009e1000)='./file0\x00', 0x60840, 0x14) socket$inet6_sctp(0xa, 0x1, 0x84) write$UHID_INPUT(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={0xffffffffffffffff, 0x0, 0x3, 0x0, &(0x7f0000000440)="5cdd30", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) r0 = syz_io_uring_setup(0x10d2, &(0x7f0000000480)={0x0, 0x7737, 0x80, 0x0, 0x34f}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x2e, 0x0, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_POLL_REMOVE={0x7, 0x50, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 7m50.909387981s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000005c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) 7m1.810445771s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000005c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) 5m4.779261184s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000005c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) 2m24.049510499s ago: executing program 1 (id=315): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) connect$can_bcm(r1, &(0x7f00000005c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f"], 0x48}}, 0x0) 2m5.182433255s ago: executing program 4 (id=1131): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x80, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0xffffffffffffffff, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0xffffffffffffff92, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x0, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1ff, 0x2, 0x6b, 0x334]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000280), 0x208e24b) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) open(&(0x7f0000000140)='./file0\x00', 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r0, 0x0) sendmsg$key(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x40408c1) capset(&(0x7f0000000000)={0x20080522}, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x81, 0xffffffff}) ioctl$FS_IOC_SETFLAGS(r0, 0xc0189436, &(0x7f0000000140)) 2m4.183263169s ago: executing program 4 (id=1133): splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x2, 0xc) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x9) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x65, &(0x7f0000000080), 0x4) sendmmsg(r1, &(0x7f0000002840)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20044000) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r3, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, r3, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x800) 2m3.779981538s ago: executing program 4 (id=1135): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) set_mempolicy(0x3, &(0x7f0000000000)=0x8, 0x8) syz_80211_inject_frame(&(0x7f0000000340)=@device_b, &(0x7f0000000380)=@mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x1, 0x1, 0x1}, {0x6}, @broadcast, @device_a, @initial, {0x3, 0x9}}, @tdls_setup_resp={0xc, 0x1, 0x3, 0x7f, @val=0x2000, @val={0x1, 0x1, [{0x36}]}, @void, @void}}, 0x22) syz_init_net_socket$x25(0x9, 0x5, 0x0) mknod$loop(&(0x7f0000000240)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, 0x1) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) 2m1.48836398s ago: executing program 4 (id=1137): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$procfs(0xffffffffffffff9c, &(0x7f00000003c0)='/proc/sysvipc/shm\x00', 0x0, 0x0) syz_emit_vhci(&(0x7f00000005c0)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_complete={{0xe, 0x4}, @HCI_OP_WRITE_SCAN_ENABLE={{0x14}}}}, 0x7) r4 = syz_open_dev$evdev(&(0x7f0000000080), 0x0, 0x121041) ioctl$EVIOCGMASK(r4, 0x80104592, &(0x7f0000000100)={0x14, 0x0, 0x0}) lseek(r3, 0xfffffffffffffff5, 0x1) 1m59.689723816s ago: executing program 4 (id=1143): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r3) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0xffffff1f, 0xfffffffc, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_NAME(0xf, &(0x7f0000000140)='+}[@\x00') sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r6}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) 1m56.414615447s ago: executing program 4 (id=1155): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 1m40.665866723s ago: executing program 33 (id=1155): syz_usb_connect$hid(0x5, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0xc8c0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0x2}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x1c) 23.422433438s ago: executing program 5 (id=1335): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = syz_open_dev$usbfs(&(0x7f0000000e00), 0x77, 0x101301) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, &(0x7f0000000000)={0x80, 0x6, 0x9, 0xffff, 0x0, 0x0, 0x0}) 14.950249128s ago: executing program 3 (id=1347): timer_create(0x8, 0x0, &(0x7f0000bbdffc)) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000580)=ANY=[@ANYBLOB], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000140)=0x68) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000100)="1400000022000b0fd25a806c8c6f94f90124fc60", 0x14}], 0x1}, 0x4000010) r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents(r3, &(0x7f0000001fc0)=""/184, 0xb8) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, &(0x7f0000000240)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000200)="449d060721b9e6bb51f2f6f20504", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, 0x9}, 0x50) 14.620414786s ago: executing program 2 (id=1348): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = mq_open(&(0x7f0000000080)='eth0\x00#\x13\xaeu\xe0\xfbu0*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\xae\xf79k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3C\xae\x9dc\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\ax\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3CuT\xcc7\x8avs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\xaa{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\xab\xdb\r\xf2y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\xa2\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9(\xf6\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|', 0x42, 0x0, 0x0) mq_timedsend(r4, 0x0, 0x0, 0x6, 0x0) mq_timedreceive(r4, &(0x7f0000004600)=""/102381, 0xfffffceb, 0x0, 0x0) 13.516843089s ago: executing program 5 (id=1349): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_procfs(0xffffffffffffffff, 0x0) lseek(r3, 0x9, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000004cc0)=[{{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000380)="a1", 0x1}], 0x1, &(0x7f0000000a40)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r4, @ANYBLOB="0000000014"], 0x30, 0x40400d1}}], 0x1, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r6, 0x0, 0x400000, 0x100000000000000) 12.702379364s ago: executing program 2 (id=1350): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket(0x10, 0x80002, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000002c0)='./file1\x00', 0x80004, &(0x7f0000000080)={[{@data_err_abort}, {@noinit_itable}]}, 0xfe, 0x58f, &(0x7f000001b700)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'essiv(authenc(rmd160-generic,cbc-camellia-aesni-avx2),sha1-avx)\x00'}, 0x58) shutdown(r0, 0x1) 12.660855287s ago: executing program 3 (id=1351): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0314f9f407000904000200000001000000000000000800040001000000", 0x24) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0xc4c85513, &(0x7f0000000540)={{0xb, 0x6, 0x0, 0x2, 'syz0\x00', 0x281d}, 0x0, [0x1, 0x4ea3, 0x9, 0x56cd, 0x5, 0x6, 0x0, 0x80000001, 0x201, 0x1, 0x3fb, 0x1, 0x9, 0x7, 0x4, 0x10000, 0x43, 0x49b5e351, 0xfffffffffffffffc, 0xe8de, 0xfffffffffffffff9, 0x9, 0x1ff, 0x9, 0x1, 0x8, 0x80000000, 0x4, 0x2, 0x8000, 0x8, 0xa36, 0x57bf4b04, 0x4, 0x40000000000001, 0x6, 0x8, 0x100000000, 0x8, 0x7ff, 0x6, 0x401, 0x5, 0x1, 0x1ff, 0x10000, 0x2, 0xb7, 0x0, 0x5, 0xbe5, 0xa0000000000, 0x0, 0x1, 0x8, 0x8000000000000000, 0xd3d, 0xbbeb, 0x1, 0x6, 0x4, 0x6, 0x8001, 0x3, 0x1, 0x8000000000ec7, 0x646, 0xc58e, 0x3, 0x11ad, 0x0, 0x6, 0x8000, 0x100080, 0x7f, 0x9, 0x1, 0x5, 0x8000000000000000, 0x4, 0x7, 0xa5, 0x1b13, 0x4, 0x85, 0x8, 0x4, 0xf75, 0x9, 0xb, 0xffffffffffff66e3, 0xfffffffffffffff9, 0x851a, 0x5e997b8e, 0x0, 0x7, 0xffffffffffffffff, 0x3, 0x800000100, 0x4, 0x3ff, 0x6, 0x0, 0xffffffffffffff95, 0xa, 0x108000001, 0xcc7e, 0x8, 0x0, 0x6, 0x6, 0xfffffffffffffd96, 0x3f3, 0x1, 0x4, 0x0, 0x7, 0x5, 0x6, 0x1, 0xe1, 0xec2, 0x1, 0x5, 0xfff, 0x0, 0x80]}) sendmmsg$inet6(r4, &(0x7f0000002440)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x1, @remote, 0x8c}, 0x1c, 0x0, 0x0, &(0x7f00000002c0)=[@tclass={{0x14, 0x29, 0x37, 0x9ee}}], 0x18}}], 0x1, 0x80) 11.256961099s ago: executing program 6 (id=1352): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setrlimit(0x2, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) 10.542101037s ago: executing program 3 (id=1353): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) bind$can_j1939(0xffffffffffffffff, &(0x7f0000000080)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}, 0xfe}, 0x18) r1 = socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r1, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@mcast1, @in6=@empty, 0x20, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x7}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x6c}, 0x0, @in6=@empty, 0xffffffff, 0x0, 0x0, 0xb7, 0xffffffff, 0x5a8}}, 0xe8) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) 10.538348024s ago: executing program 5 (id=1354): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) gettid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(0xffffffffffffffff, 0x10e, 0x4, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) 10.489576118s ago: executing program 2 (id=1355): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x3) fsopen(&(0x7f0000000540)='mqueue\x00', 0x1) ioctl$VIDIOC_TRY_FMT(0xffffffffffffffff, 0xc0d05640, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000), &(0x7f0000000100)=0xc) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x1000, 0x1) gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="14"], &(0x7f0000000180), 0x0) open_by_handle_at(0xffffffffffffff9c, &(0x7f00000000c0)=ANY=[], 0x7028) 8.248996581s ago: executing program 6 (id=1356): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r5 = socket(0x28, 0x5, 0x0) connect$vsock_stream(r5, &(0x7f0000000140)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_TIOCOUTQ(r5, 0x5411, 0x0) 7.818461067s ago: executing program 5 (id=1357): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x4, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default]}) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, 0x0, 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000100000000000000ac1e000100000000000000000000000000000000000000000a0060"], 0xb8}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b80000001300e99900000000fedbdf25fc0000000000000000"], 0xb8}, 0x1, 0x0, 0x0, 0x80}, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc"], 0xb8}, 0x1, 0x0, 0x0, 0x4048000}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b80000001300e9990000000000000000fc000000000000000000000000000000ac1e000100000000000000000000000000000000000000000a0040"], 0xb8}}, 0x4000) 7.070608207s ago: executing program 2 (id=1358): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) r1 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000580), 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r3 = dup(r1) r4 = accept4(r2, 0x0, 0x0, 0x0) recvfrom(r4, &(0x7f0000000080)=""/175, 0x59000, 0x0, 0x0, 0x10000000000000) sendfile(r4, r3, 0x0, 0x8a000) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x40002, 0x0) 6.566001902s ago: executing program 3 (id=1359): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000fd0f00000700"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r5}, 0x10) quotactl$Q_SYNC(0xffffffff80000100, 0x0, 0x0, 0x0) openat$misdntimer(0xffffffffffffff9c, &(0x7f00000014c0), 0x2, 0x0) 6.539575478s ago: executing program 6 (id=1360): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000001000000e27f000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x1b, 0xc, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x80}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000004}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x1e8629867d7bdaee, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4}, 0x50) 6.308163663s ago: executing program 5 (id=1361): open(&(0x7f00000001c0)='./file0\x00', 0x16927e, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0x4) socket$packet(0x11, 0x2, 0x300) syz_usb_connect$cdc_ecm(0x3, 0x5c, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000020000102505a1a44000000001010902"], 0x0) socket$kcm(0x10, 0x2, 0x4) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002211c0000001f000000060001000000000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYBLOB='\n\x00'], 0x64}}, 0x0) 2.458734273s ago: executing program 6 (id=1362): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000fdffffff850000002d00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) r4 = add_key$fscrypt_provisioning(&(0x7f00000001c0), 0x0, &(0x7f0000000280)={0x2}, 0x8, 0xfffffffffffffffd) keyctl$read(0xb, r4, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 2.430362172s ago: executing program 2 (id=1363): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000001080)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x5, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) recvmmsg(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}, 0x3}], 0x1, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4, &(0x7f0000000000)=0x7f, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x4000002, 0x50032, 0xffffffffffffffff, 0x0) r1 = userfaultfd(0x80001) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f0000000100)={0xaa, 0x21}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r1, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r2 = syz_mount_image$iso9660(&(0x7f0000000240), &(0x7f0000000280)='./file1\x00', 0x800010, &(0x7f0000000300)=ANY=[], 0x0, 0x7ab, &(0x7f0000001b00)="$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") openat(r2, &(0x7f0000000000)='./file1\x00', 0xa00000, 0x1) 2.299820654s ago: executing program 3 (id=1364): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) connect$inet6(r3, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x8000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) writev(r5, &(0x7f0000004380)=[{&(0x7f00000007c0)='e', 0x1}], 0x1) 468.995503ms ago: executing program 6 (id=1365): ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(0xffffffffffffffff, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x1, 0x0, 0x0, 'syz0\x00', 0xfffffffe}, 0x6, 0x100, 0x4, 0x0, 0x0, 0x0, 'syz1\x00', 0x0}) openat$rdma_cm(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = gettid() r2 = openat$rfkill(0xffffffffffffff9c, &(0x7f0000000180), 0x40e02, 0x0) write$rfkill(r2, &(0x7f0000000300)={0x0, 0x2, 0x3, 0x1, 0x1}, 0x8) shmget$private(0x0, 0x3000, 0x10, &(0x7f0000003000/0x3000)=nil) timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000240)={{}, {0x0, 0x989680}}, 0x0) syz_open_dev$dri(0x0, 0xffffffffffffffff, 0x2a140) writev(r0, &(0x7f0000000280)=[{&(0x7f0000001740)="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", 0x134}, {&(0x7f0000001640)}, {0x0}], 0x3) socketpair$unix(0x1, 0x5, 0x0, 0x0) unshare(0xc000680) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f00000001c0)={0x0, 0x0}) 467.686446ms ago: executing program 5 (id=1366): syz_open_dev$sg(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0xb, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_mount_image$f2fs(&(0x7f0000000140), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x2, 0x5505, &(0x7f0000002480)="$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") prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) openat$sw_sync_info(0xffffffffffffff9c, &(0x7f00000007c0), 0x600, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) pwrite64(r1, &(0x7f0000000140)='2', 0xfffffd28, 0x8000c61) ioctl$EXT4_IOC_MOVE_EXT(r1, 0x40305829, &(0x7f0000000240)={0x17c04, 0xffffffffffffffff, 0x4ffa1, 0x100000001}) mount$overlay(0x0, 0x0, 0x0, 0x10000, 0x0) 122.536863ms ago: executing program 3 (id=1367): bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f00000008c0)={'#! ', '', [], 0xa, "2976369687352c0da8f10652cec42e485a65fab86f85de6c348670c29527e642ab2c10b69e35b0843ee16789d37abd93222a5cd2e73700487b84657c66bba8a08a2a8664198184e1824cea74a9c360a9df87e9456167190c5b4ff38cb5355aed5788ae9e9b023aac55ffc30336660812af57a949be3482caa38f5f337c6670a41e5ec93187bae1fa765b1ee4e31d640ead466b5701345d40a366815d1dc4ff8b86d137d826a58dc2b2980ab382d3b6207a3c51ea488e42f98539c8f6155545c12d2649026881bf04c45aa481692c3ec81535527ecafc79cee2752beff4667edb961fd2db1c2149b1c15c449e0a701c"}, 0xf3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) syz_emit_ethernet(0x5e, &(0x7f0000000340)={@local, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb763e", 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x41}, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, [{0x18, 0x3, "007c4de20278ab96e88afd5c976b4c1ce4a945b1aafb"}]}}}}}}, 0x0) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000540)={@rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4400046, r2}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) socket$inet6_mptcp(0xa, 0x1, 0x106) 30.517952ms ago: executing program 6 (id=1368): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x5) sched_setaffinity(0x0, 0xff43, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x304}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "0000000400"}, 0x38) 0s ago: executing program 2 (id=1369): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000580)={0x0, @in6={{0xa, 0x4e20, 0x6, @empty, 0x4}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x1, 0x20}, 0xc) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000200)={0x81, 0x40, 0x8, 0xff, 0x1, 0xe5, 0x81, 0x31, 0x2, 0x12, 0xb1, 0xff, 0x0, 0x5}, 0xe) bind$inet6(r3, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) kernel console output (not intermixed with test programs): d, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 239.554642][ T5951] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 239.666072][ T7481] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 239.687886][ T7485] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 240.584983][ T7490] bio_check_eod: 2 callbacks suppressed [ 240.585004][ T7490] syz.5.360: attempt to access beyond end of device [ 240.585004][ T7490] loop5: rw=34817, sector=2130, nr_sectors = 132 limit=2048 [ 240.647397][ T5940] usb 5-1: USB disconnect, device number 3 [ 240.647397][ C0] xpad 5-1:179.65: xpad_irq_in - usb_submit_urb failed with result -19 [ 240.647450][ C0] xpad 5-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 240.849373][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 240.923222][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 240.964591][ T13] kworker/u8:1: attempt to access beyond end of device [ 240.964591][ T13] loop5: rw=1, sector=2128, nr_sectors = 2 limit=2048 [ 240.979101][ T13] Buffer I/O error on dev loop5, logical block 1064, lost async page write [ 240.991115][ T13] kworker/u8:1: attempt to access beyond end of device [ 240.991115][ T13] loop5: rw=1, sector=2262, nr_sectors = 2 limit=2048 [ 241.007320][ T13] Buffer I/O error on dev loop5, logical block 1131, lost async page write [ 241.016169][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.016169][ T13] loop5: rw=1, sector=2264, nr_sectors = 2 limit=2048 [ 241.029707][ T13] Buffer I/O error on dev loop5, logical block 1132, lost async page write [ 241.045984][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.045984][ T13] loop5: rw=1, sector=2266, nr_sectors = 2 limit=2048 [ 241.070049][ T13] Buffer I/O error on dev loop5, logical block 1133, lost async page write [ 241.088296][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.088296][ T13] loop5: rw=1, sector=2268, nr_sectors = 2048 limit=2048 [ 241.106382][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.106382][ T13] loop5: rw=1, sector=4316, nr_sectors = 800 limit=2048 [ 241.123759][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.123759][ T13] loop5: rw=1, sector=5116, nr_sectors = 2 limit=2048 [ 241.140247][ T13] Buffer I/O error on dev loop5, logical block 2558, lost async page write [ 241.150566][ T13] kworker/u8:1: attempt to access beyond end of device [ 241.150566][ T13] loop5: rw=1, sector=5118, nr_sectors = 296 limit=2048 [ 241.195444][ T5951] usb 3-1: new full-speed USB device number 3 using dummy_hcd [ 241.364693][ T5951] usb 3-1: config 7 has an invalid interface number: 192 but max is 0 [ 241.419209][ T5951] usb 3-1: config 7 has no interface number 0 [ 241.425823][ T5951] usb 3-1: config 7 interface 192 has no altsetting 0 [ 241.488663][ T5951] usb 3-1: New USB device found, idVendor=09fb, idProduct=ebbe, bcdDevice=d4.8d [ 241.761311][ T5951] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 241.769416][ T5951] usb 3-1: Product: syz [ 241.807172][ T5951] usb 3-1: Manufacturer: syz [ 241.812034][ T5951] usb 3-1: SerialNumber: syz [ 243.375583][ T7471] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 243.432582][ T7499] lo speed is unknown, defaulting to 1000 [ 243.507988][ T7499] lo speed is unknown, defaulting to 1000 [ 243.559250][ T5951] usb 3-1: USB disconnect, device number 3 [ 243.638833][ T7499] lo speed is unknown, defaulting to 1000 [ 243.680550][ T7499] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 243.828690][ T7499] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 244.026756][ T7353] chnl_net:caif_netlink_parms(): no params data found [ 244.094639][ T7499] lo speed is unknown, defaulting to 1000 [ 244.145945][ T7499] lo speed is unknown, defaulting to 1000 [ 244.252604][ T7499] lo speed is unknown, defaulting to 1000 [ 244.321933][ T7499] lo speed is unknown, defaulting to 1000 [ 244.396868][ T7499] lo speed is unknown, defaulting to 1000 [ 244.567089][ T7353] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.613867][ T7353] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.636266][ T7353] bridge_slave_0: entered allmulticast mode [ 244.679852][ T7353] bridge_slave_0: entered promiscuous mode [ 244.715546][ T7499] lo speed is unknown, defaulting to 1000 [ 244.795793][ T7353] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.813194][ T7353] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.829968][ T7353] bridge_slave_1: entered allmulticast mode [ 244.920724][ T7353] bridge_slave_1: entered promiscuous mode [ 245.402392][ T5851] Bluetooth: hci5: unexpected event for opcode 0x0000 [ 245.579467][ T7353] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.634129][ T7353] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 245.839061][ T7353] team0: Port device team_slave_0 added [ 245.877285][ T7353] team0: Port device team_slave_1 added [ 246.228859][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.244869][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.374153][ T7353] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.610314][ T7353] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.596774][ T5851] Bluetooth: hci5: command 0x0c1a tx timeout [ 247.632549][ T7353] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.678426][ T7353] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.817469][ T7589] ptrace attach of "./syz-executor exec"[5853] was attempted by " [ 249.159994][ T7353] hsr_slave_0: entered promiscuous mode [ 250.093391][ T7353] hsr_slave_1: entered promiscuous mode [ 250.099745][ T7353] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.107356][ T7353] Cannot create hsr debugfs directory [ 250.111359][ T5851] Bluetooth: hci5: Controller not accepting commands anymore: ncmd = 0 [ 250.121368][ T5851] Bluetooth: hci5: Injecting HCI hardware error event [ 250.132439][ T5851] Bluetooth: hci5: hardware error 0x00 [ 251.379532][ T7633] netlink: 'syz.3.395': attribute type 39 has an invalid length. [ 252.017633][ T7634] loop4: detected capacity change from 0 to 256 [ 252.301353][ T5851] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 252.773699][ T7634] exFAT-fs (loop4): failed to load upcase table (idx : 0x00011bf5, chksum : 0xcea91b8a, utbl_chksum : 0xe619d30d) [ 253.641557][ T7634] exFAT-fs (loop4): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 255.016891][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.074950][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.844481][ T7353] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 259.033094][ T7353] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 260.044645][ T7353] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 260.063924][ T7694] loop6: detected capacity change from 0 to 1024 [ 260.272879][ T7353] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 261.350425][ T7694] net_ratelimit: 10 callbacks suppressed [ 261.350442][ T7694] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 261.600594][ T7718] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 263.207807][ T7353] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.366119][ T7353] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.421448][ T5833] usb 7-1: new full-speed USB device number 7 using dummy_hcd [ 263.569318][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.5.418'. [ 263.580181][ T7730] netlink: 28 bytes leftover after parsing attributes in process `syz.5.418'. [ 263.936928][ T6277] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.944145][ T6277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.058656][ T5833] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 264.073316][ T3525] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.080650][ T3525] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.097566][ T5833] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 264.215124][ T5833] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 264.293246][ T5833] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.351255][ T5833] usb 7-1: Product: syz [ 264.355489][ T5833] usb 7-1: Manufacturer: syz [ 264.360096][ T5833] usb 7-1: SerialNumber: syz [ 264.517618][ T7749] netlink: 24 bytes leftover after parsing attributes in process `syz.2.420'. [ 264.706848][ T7747] loop4: detected capacity change from 0 to 32768 [ 264.714124][ T7747] XFS: ikeep mount option is deprecated. [ 264.832440][ T7747] XFS (loop4): Mounting V5 Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 264.967990][ T5833] usb 7-1: 0:2 : does not exist [ 264.982733][ T5833] usb 7-1: 5:0: failed to get current value for ch 0 (-22) [ 265.049480][ T5833] usb 7-1: USB disconnect, device number 7 [ 265.155271][ T7747] XFS (loop4): Ending clean mount [ 265.187649][ T7747] XFS (loop4): Quotacheck needed: Please wait. [ 265.578266][ T7747] XFS (loop4): Quotacheck: Done. [ 268.096310][ T7353] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.129981][ T7780] netlink: 12 bytes leftover after parsing attributes in process `syz.3.426'. [ 268.400802][ T5861] XFS (loop4): Unmounting Filesystem bfdc47fc-10d8-4eed-a562-11a831b3f791 [ 268.418079][ T7353] veth0_vlan: entered promiscuous mode [ 268.486414][ T7790] loop3: detected capacity change from 0 to 128 [ 268.523852][ T7790] hpfs: Unexpected value for 'help' [ 268.545195][ T7353] veth1_vlan: entered promiscuous mode [ 268.680357][ T7353] veth0_macvtap: entered promiscuous mode [ 268.787193][ T7353] veth1_macvtap: entered promiscuous mode [ 268.890454][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 269.008988][ T7353] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 269.185777][ T7353] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.281393][ T7353] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.320550][ T7353] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.478940][ T7778] loop6: detected capacity change from 0 to 32768 [ 269.508239][ T7809] loop3: detected capacity change from 0 to 2048 [ 269.546239][ T7353] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 269.676319][ T7809] UDF-fs: warning (device loop3): udf_load_vrs: No anchor found [ 269.699934][ T7778] 9pnet: p9_errstr2errno: server reported unknown error 18446744073709 [ 269.718059][ T7809] UDF-fs: Scanning with blocksize 512 failed [ 270.150668][ T7809] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 270.201708][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.211171][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.461728][ T30] kauditd_printk_skb: 59 callbacks suppressed [ 270.461753][ T30] audit: type=1800 audit(1751805211.969:97): pid=7820 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.433" name="file2" dev="loop3" ino=819 res=0 errno=0 [ 270.610806][ T6987] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 270.822903][ T6987] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 270.903457][ T7807] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 818: i_size: 134285904 lbcount: 134288384 extent 65+34816 [ 271.197212][ T7809] UDF-fs: warning (device loop3): udf_truncate_tail_extent: Too long extent after EOF in inode 819: i_size: 12288 lbcount: 16384 extent 106+7168 [ 271.369973][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.369973][ T3525] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 271.404857][ T3525] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 271.430266][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.430266][ T3525] loop3: rw=1, sector=2048, nr_sectors = 2 limit=2048 [ 271.514446][ T3525] Buffer I/O error on dev loop3, logical block 1024, lost async page write [ 271.538039][ T7825] netlink: 28 bytes leftover after parsing attributes in process `syz.6.434'. [ 271.558846][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.558846][ T3525] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 271.597598][ T3525] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 271.626081][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.626081][ T3525] loop3: rw=1, sector=2050, nr_sectors = 2 limit=2048 [ 271.781267][ T3525] Buffer I/O error on dev loop3, logical block 1025, lost async page write [ 271.826642][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.826642][ T3525] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 271.889897][ T3525] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 271.930549][ T3525] kworker/u8:7: attempt to access beyond end of device [ 271.930549][ T3525] loop3: rw=1, sector=2052, nr_sectors = 2 limit=2048 [ 272.000051][ T3525] Buffer I/O error on dev loop3, logical block 1026, lost async page write [ 272.041522][ T3525] kworker/u8:7: attempt to access beyond end of device [ 272.041522][ T3525] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 272.097208][ T3525] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 272.317871][ T3525] kworker/u8:7: attempt to access beyond end of device [ 272.317871][ T3525] loop3: rw=1, sector=2054, nr_sectors = 2 limit=2048 [ 272.346622][ T3525] Buffer I/O error on dev loop3, logical block 1027, lost async page write [ 272.356230][ T3525] kworker/u8:7: attempt to access beyond end of device [ 272.356230][ T3525] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 272.401611][ T3525] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 272.410478][ T3525] kworker/u8:7: attempt to access beyond end of device [ 272.410478][ T3525] loop3: rw=1, sector=2056, nr_sectors = 2 limit=2048 [ 273.288830][ T49] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.572222][ T3525] Buffer I/O error on dev loop3, logical block 1028, lost async page write [ 273.913157][ T49] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.993409][ T7838] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 274.228821][ T49] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.772202][ T49] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.334428][ T7864] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 276.606517][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 276.630528][ T7865] netlink: 28 bytes leftover after parsing attributes in process `syz.2.445'. [ 276.710755][ T49] bridge_slave_1: left allmulticast mode [ 276.812349][ T49] bridge_slave_1: left promiscuous mode [ 276.818167][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.842760][ T49] bridge_slave_0: left allmulticast mode [ 276.849017][ T49] bridge_slave_0: left promiscuous mode [ 276.856321][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.966695][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 276.975376][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 276.983742][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 276.991748][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 276.999671][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.093149][ T5851] Bluetooth: hci0: command tx timeout [ 281.729507][ T5851] Bluetooth: hci0: command tx timeout [ 283.146015][ T7914] overlayfs: failed to clone lowerpath [ 283.199738][ T7914] overlayfs: failed to clone upperpath [ 283.439471][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.498447][ T7920] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 283.506646][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.525688][ T49] bond0 (unregistering): Released all slaves [ 283.610966][ T7909] tipc: Started in network mode [ 283.618946][ T7909] tipc: Node identity 4, cluster identity 4711 [ 283.619244][ T7923] netlink: 4 bytes leftover after parsing attributes in process `syz.2.464'. [ 283.646294][ T7909] tipc: Node number set to 4 [ 283.668051][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.740487][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.812328][ T5851] Bluetooth: hci0: command tx timeout [ 283.820364][ T7923] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.844552][ T7923] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.040589][ T30] audit: type=1326 audit(1751805225.549:98): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.081124][ T30] audit: type=1326 audit(1751805225.549:99): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.125090][ T30] audit: type=1326 audit(1751805225.549:100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.142034][ T7872] lo speed is unknown, defaulting to 1000 [ 284.159204][ T30] audit: type=1326 audit(1751805225.549:101): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.347126][ T30] audit: type=1326 audit(1751805225.549:102): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.448413][ T30] audit: type=1326 audit(1751805225.549:103): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.566483][ T30] audit: type=1326 audit(1751805225.549:104): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.632872][ T30] audit: type=1326 audit(1751805225.549:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.699689][ T30] audit: type=1326 audit(1751805225.549:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.742149][ T30] audit: type=1326 audit(1751805225.549:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7929 comm="syz.5.467" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 284.916879][ T49] hsr_slave_0: left promiscuous mode [ 284.974776][ T49] hsr_slave_1: left promiscuous mode [ 285.013531][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.069697][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.011283][ T5851] Bluetooth: hci0: command tx timeout [ 286.194299][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.218670][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.400816][ T49] veth1_macvtap: left promiscuous mode [ 286.422610][ T49] veth0_macvtap: left promiscuous mode [ 286.428301][ T49] veth1_vlan: left promiscuous mode [ 286.464381][ T49] veth0_vlan: left promiscuous mode [ 289.308640][ T7972] loop3: detected capacity change from 0 to 16 [ 289.377073][ T7972] erofs (device loop3): mounted with root inode @ nid 36. [ 291.285146][ T7972] erofs (device loop3): bogus lookback distance 1388 @ lcn 42 of nid 36 [ 291.364034][ T7972] erofs (device loop3): failed to decompress -3 in[47, 4049] out[1851] [ 291.372946][ T7972] erofs (device loop3): read error -117 @ 43 of nid 36 [ 291.727762][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 291.727784][ T30] audit: type=1326 audit(1751805233.249:132): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7975 comm="syz.4.482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f5d0f98e929 code=0x0 [ 293.348176][ T7990] loop4: detected capacity change from 0 to 8 [ 294.424632][ T8005] overlayfs: failed to clone upperpath [ 295.192233][ T8012] trusted_key: syz.2.492 sent an empty control message without MSG_MORE. [ 295.476475][ T8017] netlink: 452 bytes leftover after parsing attributes in process `syz.6.493'. [ 295.633330][ T49] team0 (unregistering): Port device team_slave_1 removed [ 295.898143][ T49] team0 (unregistering): Port device team_slave_0 removed [ 296.635312][ T5940] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 296.801339][ T5940] usb 7-1: Using ep0 maxpacket: 8 [ 297.117177][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 297.168279][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 297.210964][ T5940] usb 7-1: New USB device found, idVendor=056a, idProduct=0000, bcdDevice= 0.00 [ 297.230789][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.333216][ T5940] usb 7-1: config 0 descriptor?? [ 297.790830][ T5940] wacom 0003:056A:0000.0002: ignoring exceeding usage max [ 297.909231][ T5940] wacom 0003:056A:0000.0002: item fetching failed at offset 10/11 [ 298.050691][ T5940] wacom 0003:056A:0000.0002: parse failed [ 298.069636][ T5940] wacom 0003:056A:0000.0002: probe with driver wacom failed with error -22 [ 298.121329][ T5940] usb 7-1: USB disconnect, device number 8 [ 302.695195][ T30] audit: type=1804 audit(1751805244.219:133): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.6.505" name="/newroot/47/file1" dev="fuse" ino=1 res=1 errno=0 [ 302.901580][ T30] audit: type=1800 audit(1751805244.259:134): pid=8059 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.505" name="/" dev="fuse" ino=1 res=0 errno=0 [ 303.186870][ T8077] fuse: Bad value for 'fd' [ 303.229324][ T8080] netlink: 'syz.6.510': attribute type 83 has an invalid length. [ 303.252379][ T30] audit: type=1800 audit(1751805244.769:135): pid=8077 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.508" name="file1" dev="tmpfs" ino=561 res=0 errno=0 [ 303.359721][ T7996] syz_tun: entered allmulticast mode [ 303.369180][ T7996] syz_tun: left allmulticast mode [ 304.423588][ T8089] netlink: 24 bytes leftover after parsing attributes in process `syz.2.513'. [ 304.795013][ T8103] netlink: 'syz.4.514': attribute type 9 has an invalid length. [ 304.803195][ T8103] netlink: 'syz.4.514': attribute type 7 has an invalid length. [ 304.810901][ T8103] netlink: 'syz.4.514': attribute type 8 has an invalid length. [ 305.701583][ T8105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.513'. [ 306.216216][ T6522] wlan1: Trigger new scan to find an IBSS to join [ 307.266655][ T7872] chnl_net:caif_netlink_parms(): no params data found [ 307.595888][ T8130] mmap: syz.3.521 (8130) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 307.689769][ T7872] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.715001][ T7872] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.730894][ T7872] bridge_slave_0: entered allmulticast mode [ 307.828776][ T7872] bridge_slave_0: entered promiscuous mode [ 307.874448][ T7872] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.890576][ T7872] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.898059][ T7872] bridge_slave_1: entered allmulticast mode [ 307.912489][ T7872] bridge_slave_1: entered promiscuous mode [ 308.788568][ T7872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.888933][ T7872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 309.137830][ T7872] team0: Port device team_slave_0 added [ 309.175717][ T7872] team0: Port device team_slave_1 added [ 309.299456][ T8117] loop6: detected capacity change from 0 to 40427 [ 309.359993][ T8117] F2FS-fs (loop6): invalid crc value [ 309.389553][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 309.445811][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.479777][ T7872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 309.510042][ T7872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 309.526212][ T7872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 309.790510][ T7872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.212358][ T8068] wlan1: Trigger new scan to find an IBSS to join [ 310.356505][ T8162] ptrace attach of "./syz-executor exec"[5861] was attempted by "./syz-executor exec"[8162] [ 310.405065][ T8162] overlayfs: missing 'lowerdir' [ 311.150494][ T7872] hsr_slave_0: entered promiscuous mode [ 311.911575][ T7872] hsr_slave_1: entered promiscuous mode [ 311.917942][ T7872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.961390][ T7872] Cannot create hsr debugfs directory [ 312.033219][ T8173] netlink: 24 bytes leftover after parsing attributes in process `syz.5.535'. [ 312.953290][ T49] wlan1: Creating new IBSS network, BSSID 00:00:00:8d:00:00 [ 314.706997][ T8198] overlayfs: failed to clone upperpath [ 316.481981][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.491509][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.250823][ T8233] netlink: 'syz.6.554': attribute type 10 has an invalid length. [ 319.367619][ T8233] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 320.065186][ T7872] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 320.337878][ T8252] tipc: Enabled bearer , priority 10 [ 320.355251][ T7872] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 320.429219][ T7872] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 321.173168][ T8252] tipc: Enabled bearer , priority 0 [ 321.180073][ T7872] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 322.699942][ T7872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.620906][ T7872] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.535993][ T7872] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 324.547182][ T7872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 324.933464][ T3898] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.940637][ T3898] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.136271][ T3898] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.143522][ T3898] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.962690][ T30] audit: type=1326 audit(1751805267.449:136): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7fc00000 [ 326.190202][ T30] audit: type=1326 audit(1751805267.449:137): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f907518e929 code=0x7fc00000 [ 326.214160][ T30] audit: type=1326 audit(1751805267.459:138): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8310 comm="syz.5.575" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7fc00000 [ 326.942490][ T7872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 327.198225][ T8325] loop3: detected capacity change from 0 to 1024 [ 327.250738][ T8325] EXT4-fs (loop3): Test dummy encryption mode enabled [ 327.427546][ T8325] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 327.436182][ T7872] veth0_vlan: entered promiscuous mode [ 327.460598][ T7872] veth1_vlan: entered promiscuous mode [ 327.655533][ T7872] veth0_macvtap: entered promiscuous mode [ 327.703482][ T7872] veth1_macvtap: entered promiscuous mode [ 327.827891][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.866331][ T7872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.867431][ T8335] overlayfs: failed to clone upperpath [ 327.896598][ T7872] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.924645][ T7872] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.946137][ T7872] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.974479][ T7872] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.276240][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 328.515929][ T8341] capability: warning: `syz.5.582' uses deprecated v2 capabilities in a way that may be insecure [ 330.000858][ T8071] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.782412][ T8071] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 330.971873][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.979735][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.038584][ T8353] pim6reg1: entered promiscuous mode [ 331.056020][ T8353] pim6reg1: entered allmulticast mode [ 331.489738][ T8363] Invalid source name [ 331.494165][ T8363] UBIFS error (pid: 8363): cannot open "/dev/sg0", error -22 [ 332.443666][ T8367] gfs2: gfs2 mount does not exist [ 332.575025][ T8366] gretap1: entered promiscuous mode [ 334.153423][ T8381] loop4: detected capacity change from 0 to 512 [ 335.108546][ T8381] EXT4-fs (loop4): Invalid default hash set in the superblock [ 335.120175][ T8389] overlayfs: failed to clone upperpath [ 335.567806][ T8070] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.827734][ T8070] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.890092][ T8070] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.059566][ T8399] loop4: detected capacity change from 0 to 512 [ 336.095537][ T8070] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.116763][ T8399] EXT4-fs (loop4): Cannot turn on journaled quota: type 0: error -2 [ 336.194027][ T8399] EXT4-fs error (device loop4): ext4_free_branches:1023: inode #13: comm syz.4.601: invalid indirect mapped block 2683928664 (level 1) [ 336.265214][ T8399] EXT4-fs (loop4): Remounting filesystem read-only [ 336.306134][ T8399] EXT4-fs (loop4): 1 truncate cleaned up [ 336.325303][ T8399] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 336.507855][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 337.651655][ T8070] bridge_slave_1: left allmulticast mode [ 337.657348][ T8070] bridge_slave_1: left promiscuous mode [ 337.781557][ T8070] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.872434][ T8070] bridge_slave_0: left allmulticast mode [ 337.878126][ T8070] bridge_slave_0: left promiscuous mode [ 337.911583][ T8070] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.595850][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 338.605750][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 338.629133][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 338.689103][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 338.703789][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 340.536615][ T8438] netlink: 12 bytes leftover after parsing attributes in process `syz.5.610'. [ 340.786960][ T5851] Bluetooth: hci0: command tx timeout [ 341.154536][ T8450] syz.3.614 (8450): drop_caches: 2 [ 342.914944][ T5851] Bluetooth: hci0: command tx timeout [ 342.953278][ T6987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 343.599497][ T8070] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 343.950033][ T8482] trusted_key: encrypted_key: insufficient parameters specified [ 344.443248][ T8070] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.612308][ T8070] bond0 (unregistering): Released all slaves [ 344.870387][ T8425] lo speed is unknown, defaulting to 1000 [ 344.881508][ T10] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 344.931359][ T5851] Bluetooth: hci0: command tx timeout [ 345.074513][ T10] usb 4-1: Using ep0 maxpacket: 16 [ 345.091536][ T10] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 345.116844][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 345.149807][ T10] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 345.167964][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.186735][ T10] usb 4-1: Product: syz [ 345.200096][ T10] usb 4-1: Manufacturer: syz [ 345.210579][ T8494] loop4: detected capacity change from 0 to 512 [ 345.219186][ T10] usb 4-1: SerialNumber: syz [ 345.259844][ T8494] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 345.283798][ T10] usb 4-1: config 0 descriptor?? [ 345.307710][ T10] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 345.327336][ T10] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 345.343669][ T8494] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c119, mo2=0002] [ 345.372395][ T8494] System zones: 1-12 [ 345.410968][ T8494] EXT4-fs (loop4): 1 truncate cleaned up [ 345.464703][ T8494] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 345.872221][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 346.437853][ T10] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 346.666459][ T10] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 346.920790][ T8513] netlink: 'syz.4.632': attribute type 10 has an invalid length. [ 347.011719][ T5851] Bluetooth: hci0: command tx timeout [ 347.082925][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.190395][ T8513] bridge_slave_1: left allmulticast mode [ 347.237134][ T8513] bridge_slave_1: left promiscuous mode [ 347.284992][ T8513] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.401355][ T8513] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 347.431112][ T10] em28xx 4-1:0.0: Unknown AC97 audio processor detected! [ 348.744136][ T8528] netlink: 24 bytes leftover after parsing attributes in process `syz.4.637'. [ 348.964705][ T8070] hsr_slave_0: left promiscuous mode [ 348.991399][ T8070] hsr_slave_1: left promiscuous mode [ 348.993696][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 2 [ 349.014358][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 4 [ 349.025557][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 349.028471][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 6 [ 349.046211][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 54 [ 349.061623][ T10] em28xx 4-1:0.0: couldn't setup AC97 register 56 [ 349.081064][ T10] usb 4-1: USB disconnect, device number 6 [ 349.088778][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 349.148566][ T8537] netlink: 4 bytes leftover after parsing attributes in process `syz.4.637'. [ 349.162299][ T8070] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 349.188830][ T8070] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 349.255326][ T8070] veth1_macvtap: left promiscuous mode [ 349.260916][ T8070] veth0_macvtap: left promiscuous mode [ 349.294586][ T8070] veth1_vlan: left promiscuous mode [ 349.306679][ T8070] veth0_vlan: left promiscuous mode [ 351.177052][ T8070] team0 (unregistering): Port device team_slave_1 removed [ 351.257265][ T8070] team0 (unregistering): Port device team_slave_0 removed [ 355.267449][ T8425] chnl_net:caif_netlink_parms(): no params data found [ 356.927406][ T8425] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.775601][ T8425] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.791585][ T8425] bridge_slave_0: entered allmulticast mode [ 357.806700][ T8425] bridge_slave_0: entered promiscuous mode [ 357.831501][ T5940] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 357.894537][ T8425] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.912601][ T8425] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.921653][ T8425] bridge_slave_1: entered allmulticast mode [ 357.935830][ T8425] bridge_slave_1: entered promiscuous mode [ 358.000636][ T5940] usb 5-1: config 0 has no interfaces? [ 358.024451][ T5940] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 358.061287][ T5940] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.086424][ T5940] usb 5-1: config 0 descriptor?? [ 358.100907][ T8425] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 358.158476][ T8425] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 358.366554][ T5898] usb 5-1: USB disconnect, device number 4 [ 360.365804][ T8425] team0: Port device team_slave_0 added [ 360.440905][ T8425] team0: Port device team_slave_1 added [ 364.662812][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.669795][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.488979][ T8663] loop6: detected capacity change from 0 to 65536 [ 365.703207][ T8425] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.718841][ T8425] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.725975][ T8425] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.753882][ T8425] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.860869][ T8669] netlink: 'syz.2.677': attribute type 83 has an invalid length. [ 366.885691][ T8425] hsr_slave_0: entered promiscuous mode [ 366.908331][ T8671] loop4: detected capacity change from 0 to 512 [ 366.922383][ T8425] hsr_slave_1: entered promiscuous mode [ 366.928762][ T8425] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.983918][ T8671] EXT4-fs error (device loop4): __ext4_fill_super:5500: inode #2: comm syz.4.678: casefold flag without casefold feature [ 367.003891][ T8425] Cannot create hsr debugfs directory [ 367.027011][ T8671] EXT4-fs (loop4): get root inode failed [ 367.241451][ T8671] EXT4-fs (loop4): mount failed [ 375.164088][ T1153] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 375.384290][ T8425] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.385792][ T8729] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.406208][ T8736] overlayfs: failed to get inode (-116) [ 375.415428][ T8736] overlayfs: failed to get inode (-116) [ 375.429598][ T8425] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.440986][ T8736] overlayfs: failed to get inode (-116) [ 375.448309][ T8736] overlayfs: failed to get inode (-116) [ 375.459159][ T8425] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.487542][ T8425] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.846373][ T8425] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.946780][ T8425] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.049909][ T6522] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.057079][ T6522] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.073378][ T6522] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.080509][ T6522] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.919363][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 377.929045][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.047400][ T8762] Device name cannot be null; rc = [-22] [ 380.229331][ T8425] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.144560][ T8425] veth0_vlan: entered promiscuous mode [ 381.160228][ T8425] veth1_vlan: entered promiscuous mode [ 381.498782][ T8786] fuse: Bad value for 'fd' [ 381.824601][ T8787] trusted_key: encrypted_key: insufficient parameters specified [ 382.297241][ T8425] veth0_macvtap: entered promiscuous mode [ 382.585275][ T8425] veth1_macvtap: entered promiscuous mode [ 382.707808][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.780890][ T8425] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.880169][ T8425] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.918347][ T8425] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.953561][ T8425] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.969244][ T8425] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.584562][ T5851] Bluetooth: hci4: unexpected event for opcode 0x0419 [ 385.306244][ T6522] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.332153][ T8814] loop4: detected capacity change from 0 to 128 [ 385.338681][ T6522] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.406014][ T8814] EXT4-fs (loop4): Test dummy encryption mode enabled [ 385.427309][ T6522] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.451093][ T8816] bridge1: entered allmulticast mode [ 385.456880][ T6522] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.505902][ T8814] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 385.548459][ T8814] ext4 filesystem being mounted at /125/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 386.358058][ T8814] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 386.378589][ T5851] Bluetooth: hci3: ACL packet for unknown connection handle 201 [ 386.819328][ T5861] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 386.896137][ T8833] x_tables: ip_tables: osf match: only valid for protocol 6 [ 387.749812][ T8071] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.703037][ T10] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 388.732201][ T8071] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.882988][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 388.911393][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 388.932141][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 388.944217][ T8843] loop6: detected capacity change from 0 to 1024 [ 388.953238][ T8071] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.965211][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 52, changing to 9 [ 388.990595][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8241, setting to 1024 [ 389.028674][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 389.051277][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 389.059548][ T10] usb 5-1: Product: syz [ 389.086837][ T8843] hfsplus: xattr searching failed [ 389.088643][ T10] usb 5-1: Manufacturer: syz [ 389.115241][ T8843] hfsplus: xattr searching failed [ 389.131088][ T8843] hfsplus: xattr searching failed [ 389.138861][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 389.139260][ T8071] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.155093][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 389.183458][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 389.189397][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 389.248513][ T8843] hfsplus: xattr searching failed [ 389.349963][ T8843] hfsplus: xattr searching failed [ 389.409301][ T8071] bridge_slave_1: left allmulticast mode [ 389.427964][ T8071] bridge_slave_1: left promiscuous mode [ 389.437972][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.446066][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 389.456607][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 389.471483][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 389.479430][ T6009] hfsplus: b-tree write err: -5, ino 3 [ 389.488873][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 389.505616][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 389.515893][ T8071] bridge_slave_0: left allmulticast mode [ 389.523145][ T8071] bridge_slave_0: left promiscuous mode [ 389.532155][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.810461][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 390.836286][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 390.845861][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 390.856653][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 390.872456][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 390.909187][ T8866] loop6: detected capacity change from 0 to 1024 [ 391.888209][ T5159] Bluetooth: hci0: command tx timeout [ 392.371633][ T10] usb 5-1: USB disconnect, device number 5 [ 393.971389][ T5851] Bluetooth: hci1: command tx timeout [ 393.977984][ T5851] Bluetooth: hci0: command tx timeout [ 394.958479][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.006300][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.034711][ T8071] bond0 (unregistering): Released all slaves [ 395.708111][ T8865] lo speed is unknown, defaulting to 1000 [ 395.815036][ T8916] loop4: detected capacity change from 0 to 8 [ 396.051430][ T5851] Bluetooth: hci1: command tx timeout [ 396.057006][ T5159] Bluetooth: hci0: command tx timeout [ 396.062714][ T8845] lo speed is unknown, defaulting to 1000 [ 397.878971][ T8071] hsr_slave_0: left promiscuous mode [ 397.967874][ T8071] hsr_slave_1: left promiscuous mode [ 397.974393][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.991471][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.026797][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.034455][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.086702][ T8071] veth1_macvtap: left promiscuous mode [ 398.118073][ T8071] veth0_macvtap: left promiscuous mode [ 398.131011][ T8071] veth1_vlan: left promiscuous mode [ 398.141700][ T5851] Bluetooth: hci1: command tx timeout [ 398.147255][ T5159] Bluetooth: hci0: command tx timeout [ 398.390332][ T8071] veth0_vlan: left promiscuous mode [ 400.261340][ T5159] Bluetooth: hci1: command tx timeout [ 401.578969][ T10] hid-generic 0000:0000:0000.0003: unknown main item tag 0x0 [ 401.601419][ T5951] usb 7-1: new high-speed USB device number 9 using dummy_hcd [ 401.665777][ T10] hid-generic 0000:0000:0000.0003: hidraw0: HID v0.00 Device [syz1] on syz0 [ 402.421268][ T5951] usb 7-1: Using ep0 maxpacket: 32 [ 402.428139][ T5951] usb 7-1: config 0 has no interfaces? [ 402.436189][ T5951] usb 7-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 402.451562][ T5951] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.465446][ T5951] usb 7-1: config 0 descriptor?? [ 402.686094][ T5951] usb 7-1: USB disconnect, device number 9 [ 402.788587][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 402.949805][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 403.205588][ T8969] loop4: detected capacity change from 0 to 32768 [ 403.213389][ T8969] btrfs: Unknown parameter 'fragment' [ 403.834657][ T8983] loop6: detected capacity change from 0 to 164 [ 404.173574][ T8983] Unable to read rock-ridge attributes [ 407.551158][ T6987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 408.605644][ T5979] Process accounting resumed [ 409.265748][ T9031] netlink: 1041 bytes leftover after parsing attributes in process `syz.5.773'. [ 409.675694][ T9028] Process accounting resumed [ 413.302266][ T8845] chnl_net:caif_netlink_parms(): no params data found [ 414.722921][ T8865] chnl_net:caif_netlink_parms(): no params data found [ 414.829014][ T8071] IPVS: stop unused estimator thread 0... [ 415.047135][ T8845] bridge0: port 1(bridge_slave_0) entered blocking state [ 415.077532][ T8845] bridge0: port 1(bridge_slave_0) entered disabled state [ 415.107967][ T8845] bridge_slave_0: entered allmulticast mode [ 415.136436][ T8845] bridge_slave_0: entered promiscuous mode [ 415.152268][ T8845] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.159711][ T8845] bridge0: port 2(bridge_slave_1) entered disabled state [ 415.391544][ T8845] bridge_slave_1: entered allmulticast mode [ 415.399633][ T8845] bridge_slave_1: entered promiscuous mode [ 416.977051][ T30] audit: type=1326 audit(1751805358.499:139): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.060935][ T8845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.070195][ T30] audit: type=1326 audit(1751805358.529:140): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.093260][ T30] audit: type=1326 audit(1751805358.529:141): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=165 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.115590][ T30] audit: type=1326 audit(1751805358.529:142): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.137840][ T30] audit: type=1326 audit(1751805358.529:143): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.188276][ T30] audit: type=1326 audit(1751805358.529:144): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=69 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 417.351669][ T8845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.532260][ T30] audit: type=1326 audit(1751805358.529:145): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 418.248950][ T30] audit: type=1326 audit(1751805358.529:146): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 418.495759][ T30] audit: type=1326 audit(1751805358.529:147): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=71 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 418.518194][ T30] audit: type=1326 audit(1751805358.529:148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9092 comm="syz.5.790" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f907518e929 code=0x7ffc0000 [ 419.769005][ T8071] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.261312][ T9131] loop6: detected capacity change from 0 to 16 [ 420.830213][ T8865] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.837686][ T8865] bridge0: port 1(bridge_slave_0) entered disabled state [ 420.844964][ T8865] bridge_slave_0: entered allmulticast mode [ 420.854432][ T8865] bridge_slave_0: entered promiscuous mode [ 420.916877][ T8845] team0: Port device team_slave_0 added [ 420.923014][ T9131] erofs (device loop6): mounted with root inode @ nid 36. [ 420.927603][ T8845] team0: Port device team_slave_1 added [ 421.002095][ T8865] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.009597][ T8865] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.017158][ T8865] bridge_slave_1: entered allmulticast mode [ 421.047370][ T8865] bridge_slave_1: entered promiscuous mode [ 421.538397][ T8071] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.581502][ T5979] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 422.288113][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 422.288129][ T30] audit: type=1326 audit(1751805363.809:177): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.319013][ T30] audit: type=1326 audit(1751805363.839:178): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.341381][ T30] audit: type=1326 audit(1751805363.839:179): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.391940][ T30] audit: type=1326 audit(1751805363.919:180): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.482915][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.491610][ T5979] usb 7-1: Using ep0 maxpacket: 32 [ 422.510810][ T30] audit: type=1326 audit(1751805364.029:181): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.516587][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 422.553580][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.620697][ T30] audit: type=1326 audit(1751805364.029:182): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.640779][ T5979] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 422.654127][ T8845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.697681][ T5979] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.716352][ T30] audit: type=1326 audit(1751805364.029:183): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.718628][ T8845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.746993][ T8845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.808996][ T5979] usb 7-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 422.822815][ T5979] usb 7-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 422.831333][ T5979] usb 7-1: Product: syz [ 422.836718][ T5979] usb 7-1: Manufacturer: syz [ 422.841766][ T5979] usb 7-1: SerialNumber: syz [ 422.846557][ T8845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.860878][ T30] audit: type=1326 audit(1751805364.029:184): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.898092][ T5979] input: appletouch as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/input/input6 [ 422.910273][ T30] audit: type=1326 audit(1751805364.029:185): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 422.951917][ T30] audit: type=1326 audit(1751805364.079:186): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9136 comm="syz.6.804" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7fd93598e52b code=0x7ffc0000 [ 423.026162][ T8071] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.068945][ T8865] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.129372][ T8865] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 423.162094][ T6066] usb 7-1: USB disconnect, device number 10 [ 423.183042][ T8071] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 423.205580][ T6066] appletouch 7-1:1.0: input: appletouch disconnected [ 423.330865][ T8865] team0: Port device team_slave_0 added [ 423.359009][ T8845] hsr_slave_0: entered promiscuous mode [ 423.370398][ T8845] hsr_slave_1: entered promiscuous mode [ 423.377099][ T8845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.384706][ T8845] Cannot create hsr debugfs directory [ 423.572040][ T8865] team0: Port device team_slave_1 added [ 423.644171][ T9149] TCP: out of memory -- consider tuning tcp_mem [ 424.470732][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.504268][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.572750][ T8865] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 425.502422][ T8865] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.280655][ T8865] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.366381][ T8865] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.400066][ T9175] loop6: detected capacity change from 0 to 256 [ 426.407934][ T9175] exfat: Deprecated parameter 'utf8' [ 426.413373][ T9175] exfat: Deprecated parameter 'namecase' [ 426.419099][ T9175] exfat: Deprecated parameter 'utf8' [ 426.470731][ T9175] exFAT-fs (loop6): failed to load upcase table (idx : 0x00010000, chksum : 0x389acbd6, utbl_chksum : 0xe619d30d) [ 426.521512][ T9175] exFAT-fs (loop6): start_clu is invalid cluster(0x0) [ 426.732909][ T8071] bridge_slave_1: left allmulticast mode [ 426.740439][ T8071] bridge_slave_1: left promiscuous mode [ 426.749059][ T8071] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.780709][ T8071] bridge_slave_0: left allmulticast mode [ 426.978393][ T8071] bridge_slave_0: left promiscuous mode [ 426.985182][ T8071] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.646275][ T9232] netlink: 4 bytes leftover after parsing attributes in process `syz.2.836'. [ 430.770072][ T8071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 430.800490][ T8071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 430.825755][ T8071] bond0 (unregistering): Released all slaves [ 430.938977][ T8865] hsr_slave_0: entered promiscuous mode [ 430.954516][ T8865] hsr_slave_1: entered promiscuous mode [ 430.960908][ T8865] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 430.980352][ T8865] Cannot create hsr debugfs directory [ 432.841994][ T9261] ptrace attach of "./syz-executor exec"[6375] was attempted by " [ 433.619649][ T9264] netlink: 16 bytes leftover after parsing attributes in process `syz.4.843'. [ 435.451343][ T30] kauditd_printk_skb: 25 callbacks suppressed [ 435.451400][ T30] audit: type=1326 audit(1751805376.939:212): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9273 comm="syz.6.851" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd93598e929 code=0x0 [ 436.050314][ T8071] hsr_slave_0: left promiscuous mode [ 436.063809][ T8071] hsr_slave_1: left promiscuous mode [ 436.081997][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 436.124374][ T9285] xt_TPROXY: Can be used only with -p tcp or -p udp [ 436.154578][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 436.199225][ T8071] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 436.247209][ T8071] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 436.422996][ T8071] veth1_macvtap: left promiscuous mode [ 436.428618][ T8071] veth0_macvtap: left promiscuous mode [ 436.456199][ T8071] veth1_vlan: left promiscuous mode [ 436.472734][ T8071] veth0_vlan: left promiscuous mode [ 436.800453][ T9294] netlink: 420 bytes leftover after parsing attributes in process `syz.6.855'. [ 437.586105][ T9303] overlayfs: failed to clone upperpath [ 438.990090][ T8071] team0 (unregistering): Port device team_slave_1 removed [ 439.060309][ T8071] team0 (unregistering): Port device team_slave_0 removed [ 439.338406][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.345825][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 442.630611][ T9335] orangefs_mount: mount request failed with -4 [ 444.172729][ T9366] netlink: 'syz.4.877': attribute type 7 has an invalid length. [ 444.180684][ T9366] netlink: 'syz.4.877': attribute type 8 has an invalid length. [ 447.869464][ T8845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 447.912563][ T8845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 449.188527][ T8845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 449.585034][ T9404] loop4: detected capacity change from 0 to 32768 [ 449.709232][ T8865] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 449.739476][ T9404] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 449.748088][ T9404] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 449.769525][ T9404] gfs2: fsid=syz:syz.0: journal 0 mapped with 3 extents in 0ms [ 449.783153][ T5951] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 449.790078][ T5951] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 451.176678][ T5951] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 1386ms [ 451.187576][ T9413] virtio-fs: tag not found [ 451.261483][ T5951] gfs2: fsid=syz:syz.0: jid=0: Done [ 451.277650][ T9404] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 451.575470][ T9404] gfs2: fsid=syz:syz.0: found 1 quota changes [ 453.132143][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.142454][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.150289][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.720490][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.733213][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.307176][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 454.318589][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 454.327522][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 454.399039][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 454.416054][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 456.398538][ T5851] Bluetooth: hci0: command tx timeout [ 456.581441][ T5851] Bluetooth: hci1: command tx timeout [ 457.119142][ T9430] lo speed is unknown, defaulting to 1000 [ 457.455409][ T9500] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 458.471298][ T5851] Bluetooth: hci0: command tx timeout [ 458.624547][ T5851] Bluetooth: hci1: command tx timeout [ 460.548012][ T5851] Bluetooth: hci0: command tx timeout [ 460.692189][ T5851] Bluetooth: hci1: command tx timeout [ 460.712543][ T9440] lo speed is unknown, defaulting to 1000 [ 462.261370][ T9535] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 462.848385][ T5851] Bluetooth: hci0: command tx timeout [ 462.854785][ T5851] Bluetooth: hci1: command tx timeout [ 465.357166][ T6987] bridge_slave_1: left allmulticast mode [ 465.395412][ T6987] bridge_slave_1: left promiscuous mode [ 465.401165][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.693438][ T6987] bridge_slave_0: left allmulticast mode [ 465.699148][ T6987] bridge_slave_0: left promiscuous mode [ 466.721528][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.198401][ T9579] loop4: detected capacity change from 0 to 512 [ 467.231700][ T9579] EXT4-fs (loop4): feature flags set on rev 0 fs, running e2fsck is recommended [ 467.261308][ T9579] EXT4-fs (loop4): mounting ext2 file system using the ext4 subsystem [ 467.294789][ T9579] EXT4-fs (loop4): warning: checktime reached, running e2fsck is recommended [ 467.314559][ T9579] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a042c01c, mo2=0002] [ 467.351474][ T9579] System zones: 0-2, 18-18, 34-34 [ 467.376252][ T9579] EXT4-fs error (device loop4): ext4_orphan_get:1393: inode #15: comm syz.4.924: iget: bad i_size value: 360287970189639680 [ 467.392403][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 467.407906][ T9579] EXT4-fs error (device loop4): ext4_orphan_get:1398: comm syz.4.924: couldn't read orphan inode 15 (err -117) [ 467.620259][ T9579] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 467.662342][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 467.841079][ T6987] bond0 (unregistering): Released all slaves [ 469.273904][ T9430] chnl_net:caif_netlink_parms(): no params data found [ 469.312416][ T5861] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 469.455097][ T6987] hsr_slave_0: left promiscuous mode [ 469.472365][ T6987] hsr_slave_1: left promiscuous mode [ 469.484575][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 469.514541][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 472.939333][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 473.806271][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 473.961091][ T9624] netlink: 'syz.4.936': attribute type 2 has an invalid length. [ 473.971124][ T9624] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 475.631390][ T9440] chnl_net:caif_netlink_parms(): no params data found [ 475.663523][ T9640] loop4: detected capacity change from 0 to 1024 [ 476.573566][ T9639] TCP: out of memory -- consider tuning tcp_mem [ 477.284144][ T9652] netlink: 12 bytes leftover after parsing attributes in process `syz.6.943'. [ 477.354307][ T9430] bridge0: port 1(bridge_slave_0) entered blocking state [ 477.392409][ T9430] bridge0: port 1(bridge_slave_0) entered disabled state [ 477.447831][ T9430] bridge_slave_0: entered allmulticast mode [ 477.653385][ T9430] bridge_slave_0: entered promiscuous mode [ 477.783916][ T9662] loop4: detected capacity change from 0 to 128 [ 477.791425][ T9662] adfs: Bad value for 'uid' [ 477.795960][ T9662] adfs: Bad value for 'uid' [ 478.194392][ T9662] loop4: detected capacity change from 0 to 128 [ 478.235259][ T9662] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 478.261389][ T9662] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 479.612912][ T9430] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.621406][ T9430] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.629535][ T9430] bridge_slave_1: entered allmulticast mode [ 479.637460][ T9430] bridge_slave_1: entered promiscuous mode [ 479.689179][ T9440] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.766001][ T9440] bridge0: port 1(bridge_slave_0) entered disabled state [ 479.806998][ T9440] bridge_slave_0: entered allmulticast mode [ 479.821788][ T9440] bridge_slave_0: entered promiscuous mode [ 479.859668][ T9430] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.869233][ T9440] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.877869][ T9440] bridge0: port 2(bridge_slave_1) entered disabled state [ 479.885344][ T9440] bridge_slave_1: entered allmulticast mode [ 479.894936][ T9440] bridge_slave_1: entered promiscuous mode [ 480.908895][ T9430] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.447789][ T9440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 481.740022][ T9440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 481.867645][ T9430] team0: Port device team_slave_0 added [ 482.817436][ T9430] team0: Port device team_slave_1 added [ 483.147768][ T9440] team0: Port device team_slave_0 added [ 483.167192][ T9440] team0: Port device team_slave_1 added [ 483.199943][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 483.214153][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 483.907103][ T9430] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 484.087596][ T9430] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 484.096108][ T9430] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.633819][ T9430] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 484.829753][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.863712][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.951689][ T9440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.230350][ T9440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.238411][ T9440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.265377][ T9440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 487.275289][ T9729] o2cb: This node has not been configured. [ 487.281386][ T9729] o2cb: Cluster check failed. Fix errors before retrying. [ 487.288520][ T9729] (syz.2.963,9729,1):user_dlm_register:674 ERROR: status = -22 [ 487.296116][ T9729] (syz.2.963,9729,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 489.024334][ T9430] hsr_slave_0: entered promiscuous mode [ 489.038943][ T9430] hsr_slave_1: entered promiscuous mode [ 489.048160][ T9430] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.056186][ T9430] Cannot create hsr debugfs directory [ 489.888212][ T9440] hsr_slave_0: entered promiscuous mode [ 489.902776][ T9440] hsr_slave_1: entered promiscuous mode [ 489.920451][ T9440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 489.941160][ T9440] Cannot create hsr debugfs directory [ 489.964078][ T9764] netlink: 16 bytes leftover after parsing attributes in process `syz.6.972'. [ 490.017784][ T9766] netlink: 44 bytes leftover after parsing attributes in process `syz.5.973'. [ 490.508092][ T9774] netlink: 28 bytes leftover after parsing attributes in process `syz.6.972'. [ 491.034071][ T8071] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 491.417846][ T9495] bridge_slave_1: left allmulticast mode [ 491.426057][ T9495] bridge_slave_1: left promiscuous mode [ 492.376832][ T9495] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.497120][ T9495] bridge_slave_0: left allmulticast mode [ 492.546375][ T9495] bridge_slave_0: left promiscuous mode [ 492.580827][ T9495] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.271894][ T9788] fuse: Unknown parameter 'fd0x0000000000000003' [ 495.823888][ T9495] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 495.838378][ T9495] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 495.887981][ T9495] bond0 (unregistering): Released all slaves [ 496.681302][ T5159] Bluetooth: hci4: unexpected event for opcode 0x2023 [ 496.706004][ T9495] hsr_slave_0: left promiscuous mode [ 496.712647][ T9495] hsr_slave_1: left promiscuous mode [ 496.718685][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 496.730565][ T9495] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 496.993838][ T9836] TCP: out of memory -- consider tuning tcp_mem [ 497.604997][ T9495] team0 (unregistering): Port device team_slave_1 removed [ 497.681163][ T9495] team0 (unregistering): Port device team_slave_0 removed [ 500.778222][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 500.784605][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.031790][ T9867] netlink: 156 bytes leftover after parsing attributes in process `syz.6.1000'. [ 509.494440][ T9440] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 509.819362][ T9440] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 509.882754][ T9440] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 510.795301][ T9440] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 511.730414][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 511.761162][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 511.786029][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 511.809603][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 511.821009][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 511.895456][ T30] audit: type=1326 audit(1751805453.389:213): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.050737][ T30] audit: type=1326 audit(1751805453.389:214): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.141512][ T30] audit: type=1326 audit(1751805453.389:215): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.175842][ T30] audit: type=1326 audit(1751805453.389:216): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.523856][ T30] audit: type=1326 audit(1751805453.389:217): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.630440][ T30] audit: type=1326 audit(1751805453.389:218): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.922679][ T30] audit: type=1326 audit(1751805453.389:219): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 512.945256][ T30] audit: type=1326 audit(1751805453.389:220): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 513.891343][ T30] audit: type=1326 audit(1751805453.389:221): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 513.981444][ T30] audit: type=1326 audit(1751805453.389:222): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9939 comm="syz.6.1023" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd93598e929 code=0x7fc00000 [ 514.124688][ T5851] Bluetooth: hci6: command tx timeout [ 515.316705][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 515.927095][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 515.936112][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 515.946129][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 515.955425][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 516.282405][ T5159] Bluetooth: hci6: command tx timeout [ 518.056754][ T5159] Bluetooth: hci0: command tx timeout [ 519.008356][ T9950] lo speed is unknown, defaulting to 1000 [ 519.017082][ T5159] Bluetooth: hci6: command tx timeout [ 519.571032][ T9974] lo speed is unknown, defaulting to 1000 [ 520.144882][ T5159] Bluetooth: hci0: command tx timeout [ 522.381514][ T5851] Bluetooth: hci0: command tx timeout [ 522.473868][ T5159] Bluetooth: hci6: command tx timeout [ 524.599553][ T5159] Bluetooth: hci0: command tx timeout [ 526.534956][ T8073] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 529.951402][T10065] xt_nat: multiple ranges no longer supported [ 531.039538][ T9950] chnl_net:caif_netlink_parms(): no params data found [ 531.168709][ T6987] bridge_slave_1: left allmulticast mode [ 531.184757][ T6987] bridge_slave_1: left promiscuous mode [ 531.215466][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.338811][ T6987] bridge_slave_0: left allmulticast mode [ 531.355540][ T6987] bridge_slave_0: left promiscuous mode [ 532.318508][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 533.625660][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 533.712620][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 533.755601][ T6987] bond0 (unregistering): Released all slaves [ 534.911746][ T6987] hsr_slave_0: left promiscuous mode [ 534.952232][ T6987] hsr_slave_1: left promiscuous mode [ 534.958420][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 535.042426][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 536.472715][T10117] netlink: 212376 bytes leftover after parsing attributes in process `syz.6.1066'. [ 537.074544][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 537.134513][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 537.395989][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 537.538514][ T9950] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.546110][ T9950] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.555825][ T9950] bridge_slave_0: entered allmulticast mode [ 537.563916][ T9950] bridge_slave_0: entered promiscuous mode [ 537.613453][ T9950] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.620667][ T9950] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.628249][ T9950] bridge_slave_1: entered allmulticast mode [ 537.637795][ T9950] bridge_slave_1: entered promiscuous mode [ 537.691039][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.699557][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 537.707530][ T9974] bridge_slave_0: entered allmulticast mode [ 537.716767][ T9974] bridge_slave_0: entered promiscuous mode [ 537.741083][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.748509][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 537.756036][ T9974] bridge_slave_1: entered allmulticast mode [ 537.764400][ T9974] bridge_slave_1: entered promiscuous mode [ 537.791495][ T9950] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.820758][ T9950] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.849012][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 537.862523][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 537.894039][ T9950] team0: Port device team_slave_0 added [ 537.920629][ T9950] team0: Port device team_slave_1 added [ 537.965732][ T9974] team0: Port device team_slave_0 added [ 537.987742][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 537.995188][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.024128][ T9950] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.039989][ T9974] team0: Port device team_slave_1 added [ 538.062680][ T9950] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.069646][ T9950] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.095923][ T9950] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.132182][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 538.139172][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.165317][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 538.178957][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 538.186007][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 538.213001][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 538.254608][ T6987] bridge_slave_1: left allmulticast mode [ 538.260304][ T6987] bridge_slave_1: left promiscuous mode [ 538.266304][ T6987] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.275949][ T6987] bridge_slave_0: left allmulticast mode [ 538.281748][ T6987] bridge_slave_0: left promiscuous mode [ 538.287474][ T6987] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.418800][ T6987] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.430507][ T6987] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.440795][ T6987] bond0 (unregistering): Released all slaves [ 538.480143][ T9950] hsr_slave_0: entered promiscuous mode [ 538.486677][ T9950] hsr_slave_1: entered promiscuous mode [ 538.493216][ T9950] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.500821][ T9950] Cannot create hsr debugfs directory [ 538.610046][ T9974] hsr_slave_0: entered promiscuous mode [ 538.617719][ T9974] hsr_slave_1: entered promiscuous mode [ 538.624109][ T9974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 538.632400][ T9974] Cannot create hsr debugfs directory [ 538.670095][ T6987] hsr_slave_0: left promiscuous mode [ 538.676721][ T6987] hsr_slave_1: left promiscuous mode [ 538.683130][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 538.690907][ T6987] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 538.885664][ T6987] team0 (unregistering): Port device team_slave_1 removed [ 538.914438][ T6987] team0 (unregistering): Port device team_slave_0 removed [ 539.392961][ T9950] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 539.406837][ T9950] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 539.439406][ T9950] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 539.457161][ T9950] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.556626][ T9950] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.596217][ T9950] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.608929][ T9495] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.616103][ T9495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.649520][ T1130] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.656723][ T1130] bridge0: port 2(bridge_slave_1) entered forwarding state [ 539.835403][ T9974] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 539.857291][ T9974] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 539.873566][ T9974] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 539.893016][ T9974] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 540.012150][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 540.038807][ T9974] 8021q: adding VLAN 0 to HW filter on device team0 [ 540.056354][ T9950] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.074321][ T1130] bridge0: port 1(bridge_slave_0) entered blocking state [ 540.081496][ T1130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 540.100516][ T9495] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.107664][ T9495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 540.190725][ T9950] veth0_vlan: entered promiscuous mode [ 540.220272][ T9950] veth1_vlan: entered promiscuous mode [ 540.284715][ T9950] veth0_macvtap: entered promiscuous mode [ 540.305426][ T9950] veth1_macvtap: entered promiscuous mode [ 540.332310][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.348169][ T9950] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.366443][ T9950] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.377505][ T9950] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.387300][ T9950] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.396693][ T9950] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.525520][ T3525] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.542385][ T3525] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.579598][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 540.588502][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 540.590064][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 540.673628][ T9974] veth0_vlan: entered promiscuous mode [ 540.690848][ T9974] veth1_vlan: entered promiscuous mode [ 540.740921][ T9974] veth0_macvtap: entered promiscuous mode [ 540.768205][ T9974] veth1_macvtap: entered promiscuous mode [ 540.815465][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.840017][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.868927][ T9974] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.881107][ T9974] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.897093][ T9974] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.911131][ T9974] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 541.682733][ T9495] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.690588][ T9495] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.815670][ T6277] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.828070][ T6277] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 542.651898][ T5898] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 544.030806][T10173] loop3: detected capacity change from 0 to 256 [ 544.743200][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 544.786206][ T5898] usb 5-1: config 0 has no interface number 0 [ 544.951485][ T5898] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 544.963576][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.980232][ T5898] usb 5-1: config 0 descriptor?? [ 545.021978][ T5898] usb 5-1: can't set config #0, error -71 [ 545.046691][ T5898] usb 5-1: USB disconnect, device number 6 [ 549.721021][T10214] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1086'. [ 550.504200][ T9510] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.618331][ T9510] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.729602][ T9510] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.809847][ T9510] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 550.922648][ T9510] bridge_slave_1: left allmulticast mode [ 550.928328][ T9510] bridge_slave_1: left promiscuous mode [ 550.934520][ T9510] bridge0: port 2(bridge_slave_1) entered disabled state [ 550.945127][ T9510] bridge_slave_0: left allmulticast mode [ 550.950803][ T9510] bridge_slave_0: left promiscuous mode [ 550.956965][ T9510] bridge0: port 1(bridge_slave_0) entered disabled state [ 551.419236][ T9510] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 551.432213][ T9510] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 551.442860][ T9510] bond0 (unregistering): Released all slaves [ 555.674378][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 555.685771][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 556.412387][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 556.540170][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 556.594140][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 556.832099][T10268] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'filter' [ 557.464259][T10270] syz.2.1100 (10270) used greatest stack depth: 16184 bytes left [ 558.880832][T10294] loop4: detected capacity change from 0 to 256 [ 558.894873][T10294] exfat: Deprecated parameter 'namecase' [ 559.282930][ T5159] Bluetooth: hci0: command tx timeout [ 559.438712][T10294] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0x36dfe6b4, utbl_chksum : 0xe619d30d) [ 560.515996][T10264] lo speed is unknown, defaulting to 1000 [ 561.031032][ T9510] hsr_slave_0: left promiscuous mode [ 561.053879][T10309] loop3: detected capacity change from 0 to 4096 [ 561.091829][ T9510] hsr_slave_1: left promiscuous mode [ 561.106691][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 561.126839][T10309] EXT4-fs (loop3): Test dummy encryption mode enabled [ 561.384361][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 561.422156][ T5159] Bluetooth: hci0: command tx timeout [ 561.657265][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1113'. [ 561.666316][T10320] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1113'. [ 562.224538][ T9495] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 562.237490][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.283765][T10309] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c018, mo2=0003] [ 562.292052][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 562.315936][ T9510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.339061][T10309] System zones: 0-5 [ 562.359585][ T9510] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.378201][T10309] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 562.561151][ T9510] veth1_macvtap: left promiscuous mode [ 562.567589][ T9510] veth0_macvtap: left promiscuous mode [ 562.626086][ T9510] veth1_vlan: left promiscuous mode [ 562.641570][ T9510] veth0_vlan: left promiscuous mode [ 562.756278][T10336] fscrypt: AES-256-XTS using implementation "xts-aes-vaes-avx2" [ 562.769298][T10333] xt_hashlimit: size too large, truncated to 1048576 [ 562.776991][T10333] xt_hashlimit: max too large, truncated to 1048576 [ 563.491332][ T5159] Bluetooth: hci0: command tx timeout [ 565.164877][ T9950] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 565.573104][ T5159] Bluetooth: hci0: command tx timeout [ 566.879681][T10371] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1125'. [ 568.310374][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1128'. [ 568.564772][ T9510] team0 (unregistering): Port device team_slave_1 removed [ 569.353129][ T9510] team0 (unregistering): Port device team_slave_0 removed [ 569.594042][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1133'. [ 569.619056][T10396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1133'. [ 569.655098][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1133'. [ 569.680366][T10396] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1133'. [ 570.628465][T10403] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 572.345372][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1139'. [ 572.355981][ T5159] Bluetooth: hci4: unexpected event for opcode 0x1004 [ 573.458191][T10425] ptrace attach of "./syz-executor exec"[9950] was attempted by " eth0 #uu0*iƇ޿_k.\x22#p/yLa~+>3l{@!2!9k\x0b8I$Q=r\x09/vӧJ#KT_$A=z/XmOX)s޾_N)6m\x0a\x0b뻑z|d\x1byx\x1bLTrw|0\x09\x5c[ ]V:Þ\x07x.TTϿa%QCuTYZy!Ѧ7vs\x07j*I{]*5JtsĪ~0fۮG:Q\x1b㣤}`eL\x0dyg1\x09i/!,u~)\x1b2jNTh\x1bo:\x0bq7SHLBq([aF*q v ANTeL+u^\x07sha 넙LD7DQ2!8,%$֜yKƴ%:0dLWՐl\x1b\x0bh=m.\x0bhQ}8/P+:E\x5cԬטլCRr^gQ(>⺨=\x0c04*@vTځg:hzW6s)x\x [ 574.066115][T10430] netlink: 'syz.4.1143': attribute type 1 has an invalid length. [ 574.380930][T10430] 8021q: adding VLAN 0 to HW filter on device bond1 [ 574.411546][T10264] chnl_net:caif_netlink_parms(): no params data found [ 575.038262][T10442] loop3: detected capacity change from 0 to 4096 [ 575.136283][T10439] vlan2: entered allmulticast mode [ 575.174905][T10439] bond1: entered allmulticast mode [ 576.753513][ T5851] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 576.763444][ T5851] Bluetooth: hci4: Injecting HCI hardware error event [ 576.774903][ T5159] Bluetooth: hci4: hardware error 0x00 [ 578.227203][T10264] bridge0: port 1(bridge_slave_0) entered blocking state [ 578.931382][ T5159] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 579.140891][T10264] bridge0: port 1(bridge_slave_0) entered disabled state [ 579.168981][T10264] bridge_slave_0: entered allmulticast mode [ 579.251750][T10264] bridge_slave_0: entered promiscuous mode [ 579.657199][T10264] bridge0: port 2(bridge_slave_1) entered blocking state [ 579.676779][T10264] bridge0: port 2(bridge_slave_1) entered disabled state [ 580.581481][T10264] bridge_slave_1: entered allmulticast mode [ 580.589455][T10264] bridge_slave_1: entered promiscuous mode [ 584.199121][T10532] loop3: detected capacity change from 0 to 4096 [ 584.376355][T10532] ntfs3(loop3): Failed to read $AttrDef (-4). [ 584.446048][T10264] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 585.231841][T10264] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 586.468236][T10264] team0: Port device team_slave_0 added [ 587.687816][T10264] team0: Port device team_slave_1 added [ 588.237467][T10264] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 588.418576][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 588.458671][T10264] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.321740][T10264] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.367905][T10264] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.456482][T10264] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 592.073205][T10595] 9pnet_fd: Insufficient options for proto=fd [ 593.498307][T10264] hsr_slave_0: entered promiscuous mode [ 594.392288][T10264] hsr_slave_1: entered promiscuous mode [ 594.398701][T10264] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.413891][ T6987] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 594.618112][T10264] Cannot create hsr debugfs directory [ 598.412734][T10636] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 598.957678][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.972363][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 598.990776][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 599.006485][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 599.021489][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 599.671654][T10638] lo speed is unknown, defaulting to 1000 [ 599.682818][T10646] overlayfs: failed to clone upperpath [ 599.789985][T10647] overlayfs: failed to clone upperpath [ 599.842548][T10650] overlayfs: failed to resolve './file1': -2 [ 601.093142][ T5851] Bluetooth: hci1: command tx timeout [ 603.172777][ T5851] Bluetooth: hci1: command tx timeout [ 604.636235][T10638] chnl_net:caif_netlink_parms(): no params data found [ 605.914182][ T5851] Bluetooth: hci1: command tx timeout [ 605.925605][T10264] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 606.872435][T10264] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 606.920647][T10264] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 606.932729][T10264] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 607.971864][ T5851] Bluetooth: hci1: command tx timeout [ 608.217335][T10714] tipc: Enabling of bearer rejected, failed to enable media [ 609.163708][T10638] bridge0: port 1(bridge_slave_0) entered blocking state [ 609.172740][T10638] bridge0: port 1(bridge_slave_0) entered disabled state [ 609.179942][T10638] bridge_slave_0: entered allmulticast mode [ 609.223576][T10638] bridge_slave_0: entered promiscuous mode [ 609.278143][T10638] bridge0: port 2(bridge_slave_1) entered blocking state [ 609.321358][T10638] bridge0: port 2(bridge_slave_1) entered disabled state [ 609.524198][T10638] bridge_slave_1: entered allmulticast mode [ 609.534561][T10638] bridge_slave_1: entered promiscuous mode [ 611.664852][T10638] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 611.715203][T10638] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 612.525660][T10638] team0: Port device team_slave_0 added [ 612.575810][T10638] team0: Port device team_slave_1 added [ 612.687304][T10750] xt_recent: hitcount (33554432) is larger than allowed maximum (65535) [ 614.373796][T10638] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 614.380807][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 614.406821][ C0] vkms_vblank_simulate: vblank timer overrun [ 614.775903][T10638] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 616.506451][T10638] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 616.532210][T10638] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 616.860368][T10638] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 617.752096][ T5159] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 617.766445][ T5159] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 617.780786][ T5159] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 617.791164][ T5159] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 617.804396][ T5159] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 617.864887][T10638] hsr_slave_0: entered promiscuous mode [ 617.872783][T10638] hsr_slave_1: entered promiscuous mode [ 617.879300][T10638] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 617.887723][T10638] Cannot create hsr debugfs directory [ 618.734584][T10785] lo speed is unknown, defaulting to 1000 [ 618.748005][T10801] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 618.757070][T10801] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 618.766141][T10801] Bluetooth: hci6: Opcode 0x0c1a failed: -4 [ 618.772572][T10801] Bluetooth: hci6: Error when powering off device on rfkill (-4) [ 618.896496][T10801] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 618.902637][T10801] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 620.012075][ T5159] Bluetooth: hci0: command tx timeout [ 620.588055][T10801] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 620.677306][T10801] Bluetooth: hci0: Error when powering off device on rfkill (-4) [ 622.781816][ T5159] Bluetooth: hci0: command tx timeout [ 623.812208][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 623.818570][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 623.863059][ T36] bridge_slave_1: left allmulticast mode [ 623.868796][ T36] bridge_slave_1: left promiscuous mode [ 623.937775][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 624.029495][ T36] bridge_slave_0: left allmulticast mode [ 624.060164][ T36] bridge_slave_0: left promiscuous mode [ 624.184989][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 627.570192][ T8069] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 629.307416][T10875] vivid-007: ================= START STATUS ================= [ 629.319040][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 629.323036][T10875] vivid-007: Enable Output Cropping: true [ 629.341529][T10875] vivid-007: Enable Output Composing: true [ 629.347386][T10875] vivid-007: Enable Output Scaler: true [ 629.468624][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 629.487448][ T36] bond0 (unregistering): Released all slaves [ 630.308056][T10875] vivid-007: Tx RGB Quantization Range: Automatic [ 630.337566][T10875] vivid-007: Transmit Mode: HDMI [ 630.346453][T10875] vivid-007: Hotplug Present: 0x00000000 [ 631.207612][T10875] vivid-007: RxSense Present: 0x00000000 [ 631.219429][T10854] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 631.228984][T10854] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 631.238628][T10854] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 631.301688][T10875] vivid-007: EDID Present: 0x00000000 [ 631.307843][T10875] vivid-007: ================== END STATUS ================== [ 631.641366][ T36] hsr_slave_0: left promiscuous mode [ 631.657994][ T36] hsr_slave_1: left promiscuous mode [ 631.672113][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 631.700614][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 633.708703][T10905] loop3: detected capacity change from 0 to 2048 [ 634.952415][T10905] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 636.105120][ T36] team0 (unregistering): Port device team_slave_1 removed [ 636.892335][ T36] team0 (unregistering): Port device team_slave_0 removed [ 637.378001][T10940] xt_CT: You must specify a L4 protocol and not use inversions on it [ 638.913045][T10945] syz.2.1273: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 638.981706][T10945] CPU: 1 UID: 0 PID: 10945 Comm: syz.2.1273 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 638.981755][T10945] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 638.981772][T10945] Call Trace: [ 638.981782][T10945] [ 638.981793][T10945] dump_stack_lvl+0x189/0x250 [ 638.981837][T10945] ? __pfx_dump_stack_lvl+0x10/0x10 [ 638.981871][T10945] ? __pfx__printk+0x10/0x10 [ 638.981909][T10945] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.981949][T10945] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 638.981989][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982019][T10945] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 638.982062][T10945] warn_alloc+0x214/0x310 [ 638.982101][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982131][T10945] ? stack_depot_save_flags+0x40/0x900 [ 638.982180][T10945] ? __pfx_warn_alloc+0x10/0x10 [ 638.982222][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982252][T10945] ? kasan_save_track+0x4f/0x80 [ 638.982282][T10945] ? xskq_create+0x56/0x170 [ 638.982302][T10945] ? xsk_init_queue+0xb0/0x110 [ 638.982337][T10945] ? xsk_setsockopt+0x43f/0x710 [ 638.982375][T10945] ? do_sock_setsockopt+0x25a/0x3e0 [ 638.982409][T10945] ? __x64_sys_setsockopt+0x18b/0x220 [ 638.982443][T10945] ? do_syscall_64+0xfa/0x3b0 [ 638.982468][T10945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.982506][T10945] __vmalloc_node_range_noprof+0x125/0x12f0 [ 638.982579][T10945] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 638.982616][T10945] ? xskq_create+0x56/0x170 [ 638.982639][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982666][T10945] ? __kasan_kmalloc+0x93/0xb0 [ 638.982701][T10945] vmalloc_user_noprof+0xad/0xf0 [ 638.982735][T10945] ? xskq_create+0xbf/0x170 [ 638.982763][T10945] xskq_create+0xbf/0x170 [ 638.982790][T10945] xsk_init_queue+0xb0/0x110 [ 638.982831][T10945] xsk_setsockopt+0x43f/0x710 [ 638.982871][T10945] ? __pfx_xsk_setsockopt+0x10/0x10 [ 638.982905][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982932][T10945] ? __lock_acquire+0xab9/0xd20 [ 638.982965][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.982996][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.983024][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.983050][T10945] ? __pfx_xsk_setsockopt+0x10/0x10 [ 638.983088][T10945] do_sock_setsockopt+0x25a/0x3e0 [ 638.983124][T10945] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 638.983159][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.983189][T10945] ? __fget_files+0x2a/0x420 [ 638.983234][T10945] __x64_sys_setsockopt+0x18b/0x220 [ 638.983274][T10945] do_syscall_64+0xfa/0x3b0 [ 638.983298][T10945] ? lockdep_hardirqs_on+0x9c/0x150 [ 638.983322][T10945] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.983345][T10945] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.983373][T10945] ? exc_page_fault+0x9f/0xf0 [ 638.983414][T10945] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.983437][T10945] RIP: 0033:0x7f6650b8e929 [ 638.983458][T10945] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 638.983479][T10945] RSP: 002b:00007f6651ae1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 638.983504][T10945] RAX: ffffffffffffffda RBX: 00007f6650db5fa0 RCX: 00007f6650b8e929 [ 638.983523][T10945] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 638.983538][T10945] RBP: 00007f6650c10b39 R08: 0000000000000004 R09: 0000000000000000 [ 638.983553][T10945] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 638.983568][T10945] R13: 0000000000000000 R14: 00007f6650db5fa0 R15: 00007ffd52f5ab18 [ 638.983604][T10945] [ 638.983614][T10945] Mem-Info: [ 639.641435][T10945] active_anon:17333 inactive_anon:0 isolated_anon:0 [ 639.641435][T10945] active_file:17579 inactive_file:40503 isolated_file:0 [ 639.641435][T10945] unevictable:17624 dirty:175 writeback:50 [ 639.641435][T10945] slab_reclaimable:6236 slab_unreclaimable:102918 [ 639.641435][T10945] mapped:41329 shmem:12939 pagetables:1364 [ 639.641435][T10945] sec_pagetables:0 bounce:0 [ 639.641435][T10945] kernel_misc_reclaimable:0 [ 639.641435][T10945] free:1272531 free_pcp:11116 free_cma:0 [ 641.101557][T10945] Node 0 active_anon:46044kB inactive_anon:0kB active_file:70300kB inactive_file:161744kB unevictable:68960kB isolated(anon):0kB isolated(file):0kB mapped:142408kB dirty:376kB writeback:0kB shmem:27500kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12788kB pagetables:5456kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 641.191544][T10945] Node 1 active_anon:108kB inactive_anon:0kB active_file:16kB inactive_file:268kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:84kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:140kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 642.462898][T10945] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.941383][T10945] lowmem_reserve[]: 0 2498 2500 2500 2500 [ 642.971370][T10945] Node 0 DMA32 free:1192208kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:46384kB inactive_anon:0kB active_file:70300kB inactive_file:160184kB unevictable:68960kB writepending:484kB present:3129332kB managed:2558392kB mlocked:0kB bounce:0kB free_pcp:32288kB local_pcp:15340kB free_cma:0kB [ 643.431551][T10945] lowmem_reserve[]: 0 0 1 1 1 [ 644.163657][T10945] Node 0 Normal free:24kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1564kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 644.331347][T10945] lowmem_reserve[]: 0 0 0 0 0 [ 644.371320][T10945] Node 1 Normal free:3899700kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:108kB inactive_anon:0kB active_file:16kB inactive_file:268kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18816kB local_pcp:11584kB free_cma:0kB [ 644.624722][T10945] lowmem_reserve[]: 0 0 0 0 0 [ 645.397958][T10945] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 645.451502][T10945] Node 0 DMA32: 3130*4kB (UME) 598*8kB (UME) 620*16kB (UME) 529*32kB (UME) 231*64kB (UME) 354*128kB (UME) 176*256kB (UME) 87*512kB (UME) 40*1024kB (UME) 8*2048kB (UME) 230*4096kB (UM) = 1193272kB [ 645.541795][T10945] Node 0 Normal: 0*4kB 1*8kB (M) 1*16kB (M) 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 24kB [ 645.562282][T10945] Node 1 Normal: 231*4kB (UME) 57*8kB (UE) 47*16kB (UME) 111*32kB (UME) 30*64kB (UME) 9*128kB (UE) 3*256kB (UM) 4*512kB (UME) 3*1024kB (UME) 1*2048kB (E) 948*4096kB (M) = 3899700kB [ 645.593587][T10945] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 645.621734][ T6066] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 645.650284][T10945] Node 0 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 646.261057][T10945] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 646.328058][T10638] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 646.347563][T10945] Node 1 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 646.358119][T10945] 82137 total pagecache pages [ 646.369847][T10945] 0 pages in swap cache [ 646.376490][ T6066] usb 4-1: Using ep0 maxpacket: 8 [ 646.383321][T10945] Free swap = 124996kB [ 646.447174][T10945] Total swap = 124996kB [ 646.461864][ T6066] usb 4-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 646.487329][T10945] 2097051 pages RAM [ 646.491366][ T6066] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 646.491398][ T6066] usb 4-1: Product: syz [ 646.515356][T10638] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 646.519008][T10945] 0 pages HighMem/MovableOnly [ 646.551518][T10945] 425411 pages reserved [ 646.564859][ T6066] usb 4-1: Manufacturer: syz [ 646.568066][T10945] 0 pages cma reserved [ 646.569502][ T6066] usb 4-1: SerialNumber: syz [ 646.578508][ T6066] usb 4-1: config 0 descriptor?? [ 646.587092][T10785] chnl_net:caif_netlink_parms(): no params data found [ 646.639767][T10638] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 646.696747][T10638] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 647.792730][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 647.800249][ C0] raw-gadget.0 gadget.3: ignoring, device is not running [ 647.827593][ T6066] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 647.841778][ T6066] gspca_sunplus: reg_w_riv err -71 [ 647.851394][ T6066] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 647.861682][ T6066] usb 4-1: USB disconnect, device number 7 [ 653.754264][T10785] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.772660][T10785] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.934159][T10785] bridge_slave_0: entered allmulticast mode [ 653.968289][T10785] bridge_slave_0: entered promiscuous mode [ 654.043854][T10785] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.052035][T10785] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.059387][T10785] bridge_slave_1: entered allmulticast mode [ 654.085674][T10785] bridge_slave_1: entered promiscuous mode [ 654.271801][T11041] overlayfs: failed to clone upperpath [ 656.565016][T10785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 657.324946][T10785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 658.922792][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 658.943397][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 658.952080][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 658.960724][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 658.969605][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.981075][ T5159] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 659.083652][ T5159] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 659.092048][ T5159] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 659.100427][ T5159] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 659.108468][ T5159] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 659.164197][T10785] team0: Port device team_slave_0 added [ 659.203563][T10785] team0: Port device team_slave_1 added [ 659.341241][T10785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 659.348887][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.385790][T10785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 659.566610][T11063] lo speed is unknown, defaulting to 1000 [ 659.573498][T10785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 659.602697][T10785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 659.689079][T10785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 660.428331][T10785] hsr_slave_0: entered promiscuous mode [ 660.436788][T10785] hsr_slave_1: entered promiscuous mode [ 660.471849][T10785] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 660.503812][T10785] Cannot create hsr debugfs directory [ 661.571059][ T5851] Bluetooth: hci1: command tx timeout [ 662.696007][ T6277] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 663.389456][T11108] overlayfs: failed to clone upperpath [ 663.651364][ T5851] Bluetooth: hci1: command tx timeout [ 663.761504][ T5951] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 664.075374][ T5951] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 664.095798][ T5951] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 664.106415][ T5951] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 664.115828][ T5951] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 664.131249][ T5951] usb 4-1: SerialNumber: syz [ 665.014776][ T5951] usb 4-1: 0:2 : does not exist [ 665.019744][ T5951] usb 4-1: unit 5 not found! [ 665.045249][ T5951] usb 4-1: USB disconnect, device number 8 [ 666.011360][ T5159] Bluetooth: hci1: command tx timeout [ 666.715926][ T9506] bridge_slave_1: left allmulticast mode [ 666.737084][ T9506] bridge_slave_1: left promiscuous mode [ 666.771789][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 667.514822][ T9506] bridge_slave_0: left allmulticast mode [ 667.566137][ T9506] bridge_slave_0: left promiscuous mode [ 667.604325][ T9506] bridge0: port 1(bridge_slave_0) entered disabled state [ 668.110861][ T5851] Bluetooth: hci1: command tx timeout [ 668.471580][ T9506] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 668.499074][ T9506] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 668.525067][ T9506] bond0 (unregistering): Released all slaves [ 668.564385][T11180] overlayfs: failed to clone upperpath [ 669.177506][ T9506] hsr_slave_0: left promiscuous mode [ 669.967475][ T9506] hsr_slave_1: left promiscuous mode [ 669.979887][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 670.077401][ T9506] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 670.454049][T11197] loop3: detected capacity change from 0 to 32768 [ 670.463205][T11197] XFS (loop3): sunit and swidth must be specified together [ 671.225127][T11205] loop3: detected capacity change from 0 to 8 [ 673.720860][ T9506] team0 (unregistering): Port device team_slave_1 removed [ 673.764673][ T9506] team0 (unregistering): Port device team_slave_0 removed [ 677.687856][T11063] chnl_net:caif_netlink_parms(): no params data found [ 679.546137][ T5159] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 679.586952][ T5159] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 679.599140][ T5159] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 679.642065][ T5159] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 679.715902][ T5159] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 682.012374][ T5159] Bluetooth: hci5: command tx timeout [ 684.201762][ T5851] Bluetooth: hci5: command tx timeout [ 685.142029][ T1294] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.149279][ T1294] ieee802154 phy1 wpan1: encryption failed: -22 [ 685.781308][T11257] lo speed is unknown, defaulting to 1000 [ 686.065451][T11063] bridge0: port 1(bridge_slave_0) entered blocking state [ 686.423893][ T5851] Bluetooth: hci5: command tx timeout [ 686.787252][T11063] bridge0: port 1(bridge_slave_0) entered disabled state [ 686.794705][T11063] bridge_slave_0: entered allmulticast mode [ 686.802757][T11063] bridge_slave_0: entered promiscuous mode [ 686.958077][T11063] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.081709][T11063] bridge0: port 2(bridge_slave_1) entered disabled state [ 687.170257][T11063] bridge_slave_1: entered allmulticast mode [ 687.213683][T11063] bridge_slave_1: entered promiscuous mode [ 687.462215][T11343] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1361'. [ 688.494083][ T5159] Bluetooth: hci5: command tx timeout [ 691.387592][T11343] vlan2: entered promiscuous mode [ 691.395491][T11343] bond0: entered promiscuous mode [ 691.648993][T11063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 692.998562][T11063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 693.198650][ T9506] bridge_slave_1: left allmulticast mode [ 693.230273][ T9506] bridge_slave_1: left promiscuous mode [ 693.270792][ T9506] bridge0: port 2(bridge_slave_1) entered disabled state [ 693.582112][ T1153] ------------[ cut here ]------------ [ 693.588122][ T1153] WARNING: CPU: 0 PID: 1153 at io_uring/io_uring.c:2922 io_ring_exit_work+0x4ed/0x930 [ 693.597819][ T1153] Modules linked in: [ 693.602166][ T1153] CPU: 0 UID: 0 PID: 1153 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 693.614805][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.625134][ T1153] Workqueue: iou_exit io_ring_exit_work [ 693.631108][ T1153] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 693.637162][ T1153] Code: c6 05 b4 6d 60 0e 01 48 c7 c7 e0 fd e1 8b be 24 00 00 00 48 c7 c2 40 fd e1 8b e8 ee 16 73 00 e9 7b fe ff ff e8 94 18 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 693.657803][ T1153] RSP: 0018:ffffc90003c9f8e0 EFLAGS: 00010293 [ 693.664174][ T1153] RAX: ffffffff812b45fc RBX: 0000000100009951 RCX: ffff888026a71e00 [ 693.672253][ T1153] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 693.680255][ T1153] RBP: ffffc90003c9fa70 R08: ffffc90003c9f867 R09: 1ffff92000793f0c [ 693.688615][ T1153] R10: dffffc0000000000 R11: fffff52000793f0d R12: 000000010000994f [ 693.696686][ T1153] R13: ffff888023fa6310 R14: ffff888023fa6480 R15: dffffc0000000000 [ 693.704771][ T1153] FS: 0000000000000000(0000) GS:ffff888125c1c000(0000) knlGS:0000000000000000 [ 693.713777][ T1153] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 693.720491][ T1153] CR2: 00007f66518e56c0 CR3: 000000005a328000 CR4: 0000000000350ef0 [ 693.728623][ T1153] Call Trace: [ 693.732118][ T1153] [ 693.735079][ T1153] ? __pfx_io_ring_exit_work+0x10/0x10 [ 693.740577][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.746607][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.752131][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 693.757888][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 693.763721][ T1153] process_scheduled_works+0xae1/0x17b0 [ 693.769345][ T1153] ? __pfx_process_scheduled_works+0x10/0x10 [ 693.775461][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.781142][ T1153] worker_thread+0x8a0/0xda0 [ 693.785833][ T1153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 693.792290][ T1153] ? __kthread_parkme+0x7b/0x200 [ 693.797288][ T1153] kthread+0x711/0x8a0 [ 693.801479][ T1153] ? __pfx_worker_thread+0x10/0x10 [ 693.806628][ T1153] ? __pfx_kthread+0x10/0x10 [ 693.811414][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.817097][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 693.822746][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.828401][ T1153] ? lockdep_hardirqs_on+0x9c/0x150 [ 693.833763][ T1153] ? __pfx_kthread+0x10/0x10 [ 693.838383][ T1153] ret_from_fork+0x3fc/0x770 [ 693.843087][ T1153] ? __pfx_ret_from_fork+0x10/0x10 [ 693.848543][ T1153] ? __switch_to_asm+0x39/0x70 [ 693.853562][ T1153] ? __switch_to_asm+0x33/0x70 [ 693.858350][ T1153] ? __pfx_kthread+0x10/0x10 [ 693.863064][ T1153] ret_from_fork_asm+0x1a/0x30 [ 693.868381][ T1153] [ 693.871471][ T1153] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 693.878757][ T1153] CPU: 0 UID: 0 PID: 1153 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00324-g1f988d0788f5 #0 PREEMPT(full) [ 693.890913][ T1153] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 693.900972][ T1153] Workqueue: iou_exit io_ring_exit_work [ 693.906535][ T1153] Call Trace: [ 693.909808][ T1153] [ 693.912736][ T1153] dump_stack_lvl+0x99/0x250 [ 693.917333][ T1153] ? __asan_memcpy+0x40/0x70 [ 693.921929][ T1153] ? __pfx_dump_stack_lvl+0x10/0x10 [ 693.927137][ T1153] ? __pfx__printk+0x10/0x10 [ 693.931750][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 693.937397][ T1153] panic+0x2db/0x790 [ 693.941334][ T1153] ? __pfx_panic+0x10/0x10 [ 693.945754][ T1153] ? show_trace_log_lvl+0x4fb/0x550 [ 693.950971][ T1153] ? ret_from_fork_asm+0x1a/0x30 [ 693.955926][ T1153] __warn+0x31b/0x4b0 [ 693.959906][ T1153] ? io_ring_exit_work+0x4ed/0x930 [ 693.965024][ T1153] ? io_ring_exit_work+0x4ed/0x930 [ 693.970144][ T1153] report_bug+0x2be/0x4f0 [ 693.974502][ T1153] ? io_ring_exit_work+0x4ed/0x930 [ 693.979620][ T1153] ? io_ring_exit_work+0x4ed/0x930 [ 693.984770][ T1153] ? io_ring_exit_work+0x4ef/0x930 [ 693.989887][ T1153] handle_bug+0x84/0x160 [ 693.994138][ T1153] exc_invalid_op+0x1a/0x50 [ 693.998645][ T1153] asm_exc_invalid_op+0x1a/0x20 [ 694.003493][ T1153] RIP: 0010:io_ring_exit_work+0x4ed/0x930 [ 694.009241][ T1153] Code: c6 05 b4 6d 60 0e 01 48 c7 c7 e0 fd e1 8b be 24 00 00 00 48 c7 c2 40 fd e1 8b e8 ee 16 73 00 e9 7b fe ff ff e8 94 18 95 00 90 <0f> 0b 90 b8 70 17 00 00 48 89 44 24 38 e9 5f ff ff ff 89 d9 80 e1 [ 694.028864][ T1153] RSP: 0018:ffffc90003c9f8e0 EFLAGS: 00010293 [ 694.034934][ T1153] RAX: ffffffff812b45fc RBX: 0000000100009951 RCX: ffff888026a71e00 [ 694.042907][ T1153] RDX: 0000000000000000 RSI: fffffffffffffffe RDI: 0000000000000000 [ 694.050873][ T1153] RBP: ffffc90003c9fa70 R08: ffffc90003c9f867 R09: 1ffff92000793f0c [ 694.058849][ T1153] R10: dffffc0000000000 R11: fffff52000793f0d R12: 000000010000994f [ 694.066820][ T1153] R13: ffff888023fa6310 R14: ffff888023fa6480 R15: dffffc0000000000 [ 694.074799][ T1153] ? io_ring_exit_work+0x4ec/0x930 [ 694.079947][ T1153] ? __pfx_io_ring_exit_work+0x10/0x10 [ 694.085425][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.091074][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.096284][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 694.102012][ T1153] ? process_scheduled_works+0x9ef/0x17b0 [ 694.107743][ T1153] process_scheduled_works+0xae1/0x17b0 [ 694.113335][ T1153] ? __pfx_process_scheduled_works+0x10/0x10 [ 694.119326][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.124971][ T1153] worker_thread+0x8a0/0xda0 [ 694.129567][ T1153] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 694.135914][ T1153] ? __kthread_parkme+0x7b/0x200 [ 694.140868][ T1153] kthread+0x711/0x8a0 [ 694.144950][ T1153] ? __pfx_worker_thread+0x10/0x10 [ 694.150077][ T1153] ? __pfx_kthread+0x10/0x10 [ 694.154670][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.160309][ T1153] ? _raw_spin_unlock_irq+0x23/0x50 [ 694.165519][ T1153] ? srso_alias_return_thunk+0x5/0xfbef5 [ 694.171151][ T1153] ? lockdep_hardirqs_on+0x9c/0x150 [ 694.176345][ T1153] ? __pfx_kthread+0x10/0x10 [ 694.180952][ T1153] ret_from_fork+0x3fc/0x770 [ 694.185551][ T1153] ? __pfx_ret_from_fork+0x10/0x10 [ 694.190666][ T1153] ? __switch_to_asm+0x39/0x70 [ 694.195437][ T1153] ? __switch_to_asm+0x33/0x70 [ 694.200204][ T1153] ? __pfx_kthread+0x10/0x10 [ 694.204815][ T1153] ret_from_fork_asm+0x1a/0x30 [ 694.209609][ T1153] [ 694.212879][ T1153] Kernel Offset: disabled [ 694.217228][ T1153] Rebooting in 86400 seconds..