last executing test programs: 8m49.765051505s ago: executing program 32 (id=74): setresgid(0xee00, 0xee01, 0x0) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000480)='task\x00') fchdir(r1) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x0, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='stat\x00') pread64(r2, &(0x7f00000000c0)=""/22, 0x16, 0x6) 8m29.44593438s ago: executing program 33 (id=193): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x61) openat(0xffffffffffffff9c, &(0x7f0000000100)='./file1\x00', 0x42, 0x1ff) syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x1, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) r0 = inotify_init1(0x0) inotify_add_watch(r0, &(0x7f0000000700)='./file1\x00', 0x2000775) linkat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0/file1\x00', 0xffffffffffffff9c, &(0x7f00000003c0)='./file0/file2\x00', 0x1000) 8m20.506627961s ago: executing program 34 (id=243): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4b, &(0x7f0000000100)=0x401, 0x4) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0xfffffffe, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x6}, 0x1c) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000356ffc)=0xffffffffffffff40, 0x4) bind$inet(r1, &(0x7f0000e15000)={0x2, 0x4e20, @multicast2}, 0x10) 8m11.270574369s ago: executing program 35 (id=286): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) ioctl$int_in(r0, 0x5421, &(0x7f00000000c0)=0x7fffffffffffffff) listen(r0, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r1, &(0x7f00000002c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x2, 0x2, {0x41}}, 0x10, 0x0}, 0x0) accept4(r0, 0x0, 0x0, 0x0) 7m46.006570783s ago: executing program 36 (id=416): socketpair$unix(0x1, 0x3, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x185) r1 = inotify_init() inotify_add_watch(r1, &(0x7f00000000c0)='.\x00', 0x5000009) fallocate(r0, 0x0, 0x1000000, 0x3) mmap(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x27ffff7, 0x4012011, r0, 0x400000) 7m35.479064655s ago: executing program 37 (id=478): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0xb, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) bind$packet(r0, &(0x7f00000001c0)={0x11, 0x11, r1, 0x1, 0xf, 0x6, @broadcast}, 0x14) pipe2(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RGETLOCK(r3, &(0x7f0000000200)=ANY=[], 0xffffff6a) splice(r2, 0x0, r0, 0x0, 0xfffd, 0x0) 7m5.240849916s ago: executing program 38 (id=659): syz_mount_image$hfs(&(0x7f00000000c0), &(0x7f0000000d00)='./file0\x00', 0x808808, &(0x7f0000000380)=ANY=[], 0x1, 0x2e4, &(0x7f0000001440)="$eJzs3T1v00Acx/HfOUmbPqiYtgiJBVSoBEtFgQGxgFBWdiYENKlUERXRFglYKIgR8QLYeQvMzCwg3gBMTLyAbkZ3PrtO4jgNJE3Tfj9SUvt8d76LffH/XEUWgBPrbu3np+u/7ctIJZUk3ZICSVWpLOmMzlafb+5s7DQb9aKKSq6EfRnFJU1HnrXNRl5RW86V8EK7VtZsNg3DEUXRnV/uTzTqpmCE3OjPEUiTfhy67dW8cT2GdqXzo27DYcseYLOnPb3Q3AibAwA4Avz1P/CXiVmXZBQE0rIP0ZPr/7GwN+oGDNaNZkdScTyfuf676C4y9viecpv253su1LPbg2SWeJDGVNrWJxSfWS0Bpuk1q3RtCabWN8paWXujeqC3uu1lsi2693p86iZ6tHapvxi2e20V3ZuOe+MiynZJk9Y3mo1Ju5DT/oX+9vj/zFfz3TwwoT6qnsZ/5cjYw+SOVNh2pIKKbf9Vv/al86ObcaVsrji/62fQkuW028k5vwfFAbiKe1nNn5Fk6yxnKotbkLYzh9v3vFpvK8S9W+1RaiGvVJiudSm12FKq5M+ElbWnzcJbKcORdNF8MPfNkv7os2qZ+D+w7VtWZmQWfdUbl9OfGXF/JvJzpp9NW3X7w+VCe87JvvoFr7+7Ze/1WDc1t/3y1ZNSs9nYsguPchaezW4Zn1J5J+XmGf5CSQV5tLufElmvo+igNUfDbPyVgVZovz/SFDt88jLbUZamBId9mI7dgh0pOZtq31R0Qo7PQhRJXTYN62sKR8m2SQ46F94TysZdJp7/uUjeR3UuzrdvYcFspOc/jTI1rqYzuNZQcN69T/c1g5vpPoPL7PFalzmjm3NdvCxdyiQaFe4x9O08JkxNP/SQ+/8AAAAAAAAAAAAAAAAAAADjZoA/J0h+ydixacRdBAAAAAAAAAAAAAAAAAAAAABg7P3T83+ncipyz/8NB/j838InjRU/GQjAgfwNAAD//xURd9I=") syz_mount_image$fuse(0x0, &(0x7f00000000c0)='./bus\x00', 0x3000009, 0x0, 0x2, 0x0, 0x0) chdir(&(0x7f0000000000)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x80, 0x141) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0xa04891, 0x0, 0x1, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) getdents64(r0, &(0x7f0000000f80)=""/4096, 0x1000) 6m49.441017403s ago: executing program 39 (id=748): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e21, 0x2, @dev={0xfe, 0x80, '\x00', 0x2d}, 0x9a}, 0x1c) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x2, @empty, 0x8}, 0x1c) listen(r0, 0x200204) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="580000001500add427323b470c45b4560a067fffffff81004e22030d00ff0028925aa8002000eaa57b00090080020efffeffe809020000ff0004f03a9a000000ffffffffffffffffffffffe7ee0000000000000000020000", 0x58}], 0x1) 6m1.726930885s ago: executing program 40 (id=1032): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x2010846, &(0x7f0000000b00), 0x1, 0x55f, &(0x7f0000000580)="$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") bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42042, 0x14a) fallocate(r0, 0x10, 0xed6, 0x8001) r1 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) preadv2(r1, &(0x7f0000001040)=[{&(0x7f0000001900)=""/4096, 0x5491}], 0x1000000000000094, 0x1000, 0x4005, 0x8) 5m26.60200703s ago: executing program 1 (id=1242): r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000480)={&(0x7f0000000000)=""/59, 0x204000, 0x800, 0x10, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x1}) 5m26.097738251s ago: executing program 1 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000140)=""/56, 0x38) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r2, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r0, 0x0, 0x0) 5m25.340512585s ago: executing program 41 (id=1246): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r1 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x40000, 0x0) mknodat(r1, &(0x7f0000000100)='./file0/file0\x00', 0x8910, 0x4) getdents64(r0, &(0x7f0000000140)=""/56, 0x38) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x400, 0x0) renameat2(r2, &(0x7f0000000440)='./file0\x00', r0, &(0x7f0000000200)='./file7\x00', 0x0) getdents64(r0, 0x0, 0x0) 4m59.655047049s ago: executing program 42 (id=1348): openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x14484, &(0x7f0000000380)=ANY=[@ANYBLOB="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", @ANYRESDEC, @ANYRES64=0x0, @ANYRESOCT, @ANYRESOCT, @ANYRESDEC=0x0, @ANYRES64, @ANYRESDEC], 0x0, 0x2ff, &(0x7f0000000540)="$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") r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv6_delrule={0x38, 0x18, 0x1, 0x0, 0x0, {0xa, 0x80, 0x0, 0x0, 0x0, 0x3}, [@FRA_DST={0x14, 0x7, @loopback}, @FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x4, 0x1}]}, 0x38}}, 0x20000000) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@loopback, 0x80, r3}) 4m2.141527134s ago: executing program 43 (id=1634): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1}, 0x6e) r1 = io_uring_setup(0x667, &(0x7f00000002c0)={0x0, 0x3986, 0x40, 0x0, 0x235}) close_range(r1, 0xffffffffffffffff, 0x0) listen(r0, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@file={0x1}, 0x6e) connect$unix(r2, &(0x7f0000000080)=@file={0x1}, 0x6e) 3m55.104291713s ago: executing program 44 (id=1668): socket$nl_route(0x10, 0x3, 0x0) openat$yama_ptrace_scope(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec29, 0x800, 0x1, 0x40000337}, &(0x7f0000000dc0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000001800)=""/216, 0xd8}], 0x1}) mprotect(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m39.043728927s ago: executing program 5 (id=2072): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000000)={0x73622a85, 0x10b}) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000180)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000540)='./binderfs/binder0\x00', 0x802, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r2, 0x4018620d, &(0x7f0000000040)={0x73622a85, 0x10a}) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000340)=[@acquire], 0xffffffffffffff67, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f00000001c0)={0x8, 0x0, &(0x7f0000000100)=[@decrefs={0x40046307, 0x2}], 0x0, 0x0, 0x0}) 2m38.604980612s ago: executing program 5 (id=2073): syz_emit_ethernet(0x76, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffff"], 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0b00000008000000010001000900000001"], 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r1, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800000d0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xa000000}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r3, r2, 0x25, 0x0, @void}, 0x10) syz_emit_ethernet(0x36, &(0x7f0000000840)={@remote, @link_local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "6410a6", 0x0, 0x4, 0x0, @empty, @mcast2}}}}, 0x0) 2m38.205053328s ago: executing program 5 (id=2074): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x0, 0x2}, 0x10) sendmsg$tipc(r2, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48800}, 0x4800) setsockopt$TIPC_GROUP_LEAVE(r2, 0x10f, 0x88) 2m37.704397468s ago: executing program 5 (id=2077): syz_mount_image$udf(&(0x7f0000000180), &(0x7f0000000100)='./bus\x00', 0x1014494, &(0x7f00000001c0)=ANY=[@ANYBLOB="696f636861727365743d63703933322c706172746974696f6e3d30303030303030303030303030303030303030332c6769643d666f726765742c6769643d666f726765742c6e6f6164696e6963622c756e64656c6574652c7569643d666f726765742c00fb5ebc1bbec00aea8217b7375ace1f91cad4e856ac3ce827902dd91a9a936650ca99205dc1adee73bc464ab6ea2dad7091eea47594f5ef5227a72684b2ed98640aa52eba3e04c81c829036f312ecb1c7483575d32ed9eef652c6b7284dc45cecea6a0ae3a01c5cd7b60af90431eddc00"/225], 0xfe, 0xc24, &(0x7f0000001480)="$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") mknod$loop(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x1) creat(&(0x7f0000000e00)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x141842, 0x0) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0, 0x0, 0xfc, 0x0, &(0x7f00000000c0)) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x8000, 0xa0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x8005, 0x0, 0x0, 0x12, 0xd, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x204]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) 2m36.9347374s ago: executing program 5 (id=2080): r0 = fsopen(&(0x7f00000000c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x1, 0x0) fchdir(r1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = socket$inet6(0xa, 0x805, 0x0) getsockopt$bt_hci(r3, 0x84, 0x85, &(0x7f0000002100)=""/4051, &(0x7f00000010c0)=0xfd3) 2m33.87370689s ago: executing program 5 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m33.202296596s ago: executing program 45 (id=2090): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x14, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) 2m27.925991449s ago: executing program 7 (id=2114): syz_mount_image$fuse(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x111024, 0x0, 0x1, 0x0, 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000280), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) listen(0xffffffffffffffff, 0xd) syz_fuse_handle_req(r0, &(0x7f0000004140)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000340)={0x50, 0x0, 0x100000000004, {0x7, 0x28, 0x7, 0x880000, 0x0, 0x0, 0x6, 0x3, 0x0, 0x0, 0x80, 0xfb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) faccessat2(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0, 0x1000) read$FUSE(r0, &(0x7f0000000840)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_ATTR(r0, &(0x7f0000000140)={0x78, 0x0, r1, {0x8, 0x401, 0x0, {0x3, 0x7, 0xffff, 0x1, 0x9, 0x101, 0x3, 0x3ff, 0x7574, 0xc000, 0x3, 0x0, 0x0, 0x1, 0x401}}}, 0x78) removexattr(0x0, 0x0) 2m27.556388701s ago: executing program 7 (id=2116): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) close_range(r0, 0xffffffffffffffff, 0x200000000000000) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000003000000850000008600000018010000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11}, 0x94) socket$netlink(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x28000600) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 2m26.699732094s ago: executing program 7 (id=2119): mkdir(&(0x7f0000000300)='./file0\x00', 0xfffffffffffffffe) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r0, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r2, r3, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r0, &(0x7f0000000440)={0x50, 0x0, r1, {0x7, 0x29, 0x0, 0x1086cce0, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) r4 = openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) ioctl$BLKPG(r4, 0x400c4d0f, 0x0) 2m26.262647268s ago: executing program 7 (id=2122): r0 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x34f}, &(0x7f00000002c0)=0x0, &(0x7f0000000080)=0x0) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback, 0xffffffff}, 0x1c) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x58}}, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f0000000200)=[{0x30, 0x8, 0x0, 0x4}]}, 0x10) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) syz_io_uring_submit(r1, r2, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x7b, 0x0, 0x0, 0x0, &(0x7f0000011000/0x4000)=nil, 0x4000, 0xc}) io_uring_enter(r0, 0x47bc, 0x0, 0x0, 0x0, 0x0) 2m25.854597665s ago: executing program 7 (id=2124): syz_mount_image$squashfs(&(0x7f0000000180), &(0x7f0000000000)='./file0\x00', 0x800, &(0x7f0000001180)=ANY=[], 0x1, 0x17c, &(0x7f0000000380)="$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") r0 = syz_io_uring_setup(0xbdc, &(0x7f0000000640)={0x0, 0xec25, 0x400, 0x1, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0xffff}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x3}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa4}, 0x1, 0x0, 0x0, 0x80}, 0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x847ba, 0x0, 0xe, 0x0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) 2m24.729284546s ago: executing program 7 (id=2133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002101, 0x1}) 2m20.16381869s ago: executing program 1 (id=2092): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x0, 0x3010}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r2, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) 2m16.535678321s ago: executing program 1 (id=2169): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x5) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r2 = syz_io_uring_setup(0xb77, &(0x7f0000000340)={0x0, 0xe824, 0x800, 0x0, 0x3d2}, &(0x7f0000000dc0)=0x0, &(0x7f0000000000)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f0000000200)=@IORING_OP_READV=@pass_iovec={0x1, 0x0, 0x0, @fd_index=0x4, 0x0, &(0x7f0000000600)=[{&(0x7f0000000640)=""/232, 0xe8}], 0x1}) io_uring_enter(r2, 0x847ba, 0x0, 0xe, 0x0, 0x0) 2m15.233659779s ago: executing program 1 (id=2172): mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mount$fuse(0x0, 0x0, 0x0, 0xfc5cd7921c2c19c4, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x40000, 0x120) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x888000, 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0)='debugfs\x00', 0x1214040, 0x0) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(r1, 0xc018937c, &(0x7f00000001c0)={{0x1, 0x1, 0x18, r0, {0x2}}, './file0\x00'}) 2m14.579769378s ago: executing program 1 (id=2173): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x3}, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x1c000) syz_mount_image$fuse(0x0, 0x0, 0x210a055, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008080) 2m9.436473237s ago: executing program 46 (id=2133): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x1104, &(0x7f0000000300)={0x0, 0xd6ca, 0x80, 0xffffffff, 0x8000021e}, &(0x7f00000001c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) io_uring_enter(r2, 0x47fa, 0x0, 0x0, 0x0, 0x0) syz_io_uring_submit(r3, r4, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40002101, 0x1}) 1m59.442385576s ago: executing program 47 (id=2173): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000000000)={0x3}, 0x2) r1 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(r1, 0x0, 0x0, 0x1c000) syz_mount_image$fuse(0x0, 0x0, 0x210a055, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x0) sendmmsg$sock(r0, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24008080) 1m24.874454461s ago: executing program 3 (id=2411): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x3, 0x4, @rand_addr=' \x01\x00'}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x7d, &(0x7f0000000000)={0x0, 0x2}, 0x8) 1m24.399632942s ago: executing program 3 (id=2414): r0 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0xfffffffd, @empty}, 0x1c) r1 = dup(r0) r2 = open(&(0x7f00000000c0)='./file0\x00', 0x1298c2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c010000190001000000000000000000e0000001000000000000000000000000fe8000000000000000000000000000aa4e220000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000104000000000000feffffffffffffff030000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000008400050020010000000000000000000000000000000000002b00000000000000000000000000000000000000000500000000000002000700000000000000000000000000e00000020000000000000000000000004000000033"], 0x13c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20040880) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x70bd2d, 0x0, {{@in6=@loopback, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xc, 0x0, 0x0, 0x3, 0xffffffffffffffff}, {0x0, 0xa00, 0x407ffffffffffe, 0x800000000000002}, 0x1, 0x0, 0x1}}, 0xb8}}, 0x0) ftruncate(r2, 0x200004) sendfile(r1, r2, 0x0, 0x80001d00c0d1) 1m23.774187232s ago: executing program 3 (id=2418): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x20, r5, 0x1, 0x0, 0x1000000, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 1m23.416912155s ago: executing program 3 (id=2420): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f0000000400)='./file0\x00', &(0x7f0000000100)='./file0\x00', 0x0, 0x18d883, 0x0) mount$bind(&(0x7f0000000180)='./file0/../file0\x00', &(0x7f0000000040)='./file0\x00', 0x0, 0x10a78c0, 0x0) fstat(0xffffffffffffffff, 0x0) open_tree(0xffffffffffffffff, &(0x7f00000004c0)='./file1\x00', 0x100000) syz_mount_image$ext4(&(0x7f0000000340)='ext4\x00', &(0x7f0000000280)='./file0\x00', 0x2800000, &(0x7f0000000680)={[{@debug}, {@stripe={'stripe', 0x3d, 0x61}}, {@grpid}, {@test_dummy_encryption_v1}, {@nodiscard}, {@data_err_ignore}, {@acl}, {@journal_ioprio}, {@resuid}]}, 0x1, 0xbb4, &(0x7f00000017c0)="$eJzs3M1rXOUaAPDnnHy2zb2TXi6X27tpLpdLC+I0raTYIthKxY0LQbdCQzopIdMPkkhNmsVE/wFR14IbQS1KF3bdjYJbN1q3FhdCkdgoiGjkzEeSJjNJ2k5yYvL7wZvzvvOcOe/z5DBzzgszE8CeNZD9SSMORcT5JKJQfzyNiO5qrzeiUttvYX525Jf52ZEkFhdf/jGJJCLuz8+ONI6V1LcH6oPeiPjquST+8ebaeSenZ8aHy+XSRH18bOrS1WOT0zNPjl0avli6WLp8/OTTQyeGTg6eGmpbrb9+d+bWz/994fvKbx/9fuOndz5I4kz01WMr66hX/dgGYmDpf7JSZ0QMt+H4O0FHvZ6VdSadGzwp3eKkAABoKV1xD/evKERHLN+8FeLzr3NNDgAAAGiLxY6IRQAAAGCXS6z/AQAAYJdrfA7g/vzsSKPl+4mE7XXvbET01+pfqLdapDMq1W1vdEXE/vtJrPxaa1J72mMbiIi73576NGvR5HvIW60yFxH/bnb+k2r9/fVvQq+uP42IwTbMP7Bq/Feq/0wb5s+7fgD2pttnaxeytde/dOn+J5pc/zqbXLseRd7Xv8b938Ka+7/l+jta3P+9tMk5rn/43rVWsaz+Z249/0mjZfNn28cq6iHcm4v4T2ez+pOl+pMW9Z/f5ByFP66VWsXyrn/x/Ygj0bz+hmT93yc6NjpWLg3W/jadY+7LoY9bzZ93/dn539+i/o3O/9UHjtT6R31ePXfuZqvYxvWnP3Qnr1R73fVHXh+empo4HtGdvLj28RPr19vYp3GMrP6j/1v/9d+s/uw9oVL/P2SVz9W32fiNVXM+e+P6Z+vVn6398jz/Fx7x/L+1yTn+/8XbR1vFVq5/s5bNfzeprYUBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoCGNiL5I0mJEJNV+mhaLEQci4p+xPy1fmZx6YvTKa5cvZLGI/uhKR8fKpcGIKNTGSTY+Xu0vj0+sGj8VEQcj4t3Cvuq4OHKlfCHv4gEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFhyICL6IkmLEZFGxEIhTYvFvLMCAAAA2q4/7wQAAACALWf9DwAAALuf9T8AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABb7ODh23eSiKic3ldtme56rCvXzICtluadAJCbjrwTAHLTmXcCQG4eco3vdgF2oWSDeG/LSE/bcwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAABg5zpy6PadJCIqp/dVW6a7Hutq+ozD25gdsJXSvBMActOxXrBz+/IAtp+XOOxdzdf4wF6SbBDvXd6n8mCkZ8tyAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGDn6au2JC1GRFrtp2mxGPG3iOiPrmR0rFwajIi/R8Q3ha6ebNyTd9IAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAC03eT0zPhwuVya0NHRybeT7Iw0ap2835kAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMjD5PTM+HC5XJqYzDsTAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIG+T0zPjw+VyaWITnZsPs/OKTt41AgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACQnz8DAAD//9b4DfQ=") 1m22.083505581s ago: executing program 3 (id=2426): mkdirat(0xffffffffffffff9c, &(0x7f00000002c0)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff}, 0x80000) r1 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000040), 0x2) r2 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\xc2%/u\x17\xdaM\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d_\v\xfc\xad\x0f\xa8\xc5\xad\x00\xc2\x12\xff\xff\xff\xff\xff\xff\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x11\xf0\xc3Gj+kV$\x80\x8aJ$\x81\xc0\x16\xf5\x9cz\x10\x97\xdb\x12H\xee/\xe3sY\x02D;L~\xd0\xb44\x01*\xfb\xa4 \xb2b\x90H$\xb2\xad\xbf\x8aM\xb6\x81\x81^\x02\xa0\xa7t\xfbHb\xa5=\xdd+$\xc06J\xb4\xf0\xab\x85Xz\x9f\xb2D$\xbe\xd9\x7f-\r\x9aj9r\n_\x11\xd4\x19\xb0\xa0G\xb7\x94\xf7\xfd~\xe9\xb6G\xbfE\xbb\x15\x15\xa6\xca2\xd0\xd3\x8c\xf7nO\xf9\xa8\xfd\x8a\xd2\xb2\xab\xff\xe4\xb0;\xd9\xa8\f\x03S\xbd%\x9fF\xee\x05\x06.3(QF?\f\x05\xa4uY\xee\xab\x8a\xeb~\xed\xcb0\xb7\x00\xe6?8g\x8aN\xda\x8f\x9d\xde\x1eNaS\x8fLk\xf1\x965N\x18\x8c\xb9=5\x991\xae\x89N\x13\xd1\xf7\xf0\x13\xb2\xaeS\xa1\x97\x18j\xea\x9f\xde\xb6\xdc\xdc\xe6*\x9c\xfdV\x82\x05\xcd@\xb1.P\xc9\xb0^\x83\t\xfd\x1c\x04\xd4*\x9bt:U\xda\xbe\x8f\x91\xc1\x92\xc0\xf0\x9b\xf5\rZ\xcdj\xc4\x9d\"\n\xa9jsB\n\xd4\xeb\xa6k>\xb2X\xf6\x1b\xef\xda\xbb\xc2\xfd\xec\xf1\xbf\xa5\xde#\x050xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 1m18.567340741s ago: executing program 48 (id=2433): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="b4050000fdff7f006110580000000000c60000000000000095000000000000009f33ef60916e6e713f1eeb0b725ad99b817fd98cd824498949714ffaac8a6f770600dcca55f21f3ca9e822d182054d54d53cd2b6db714e4beb5447000001000000008f2b9000f22425e4097ed62cbc891061017cfa6fa26fa7088c60897d4a6148a1c1e43f00001bde60beac671e8e8fdecb03588aa623fa71f31bf0f871ab5c2ff88afc60027f4e5b5271ed58e835cf0d0000000098b51fe6b1b8d9dbe87dcff414ed000000000000000000000000000000000000000000000000000000b347abe6352a080f8140e5fd10747b6ecdb3540546bf636e3d6e700e5b0500000000000000eb9e1403e6c8f7a187eaf60f3a17f0f046a307a403c19d9829c90bd2114252581567acae715cbe1b57d5cda432c5b910400623d24195405f2e76ccb7b37b41215c184e731fb1"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) close(r4) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)=""/179, 0x33fe0}], 0x1}, 0x0) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)}, 0x0) 10.466121577s ago: executing program 4 (id=2690): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0xe020000) semget$private(0x0, 0x4000, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(0xffffffffffffffff, 0x29, 0x2d, 0x0, 0x0) semctl$SETALL(0x0, 0x0, 0x11, &(0x7f0000000740)) 6.888354442s ago: executing program 4 (id=2705): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r0 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) fcntl$lock(r0, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) fremovexattr(r0, &(0x7f0000000000)=@known='system.posix_acl_default\x00') 6.271723846s ago: executing program 9 (id=2711): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x21c0, 0x103) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r1, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0xffe7) syz_fuse_handle_req(r1, &(0x7f00000082c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x20, 0x0, 0x9c, {0x0, 0x16}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r1, &(0x7f0000004200)={0x50, 0x0, r2, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0xff, 0x2, 0x0, 0x0, 0x100}}, 0x50) r3 = openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) close_range(r0, r1, 0x0) read$FUSE(r3, 0x0, 0x500) 6.271423068s ago: executing program 0 (id=2712): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) ioctl$DRM_IOCTL_GET_MAP(0xffffffffffffffff, 0xc0286404, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) mprotect(&(0x7f00002ae000/0x2000)=nil, 0x2000, 0x1) open(&(0x7f0000000180)='./bus\x00', 0x14957e, 0x0) readahead(0xffffffffffffffff, 0x0, 0xfffffffbfffffffd) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) 5.680920741s ago: executing program 9 (id=2715): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r2, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r2, 0x7a0, &(0x7f0000000240)={@hyper}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r2, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) close_range(r0, 0xffffffffffffffff, 0x0) 5.586338635s ago: executing program 8 (id=2716): timer_create(0x0, &(0x7f0000000240)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x1000000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000027c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x2d, 0x20040040) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_submit(r3, 0x1, &(0x7f0000000040)=[&(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0xffff, r2, 0x0}]) 5.525417705s ago: executing program 2 (id=2717): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x25, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x9}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0xd3283d0368e269b3, 0x8031, 0xffffffffffffffff, 0x0) r1 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(r1, 0x40345410, &(0x7f0000000340)={{0x1, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_START(r1, 0x54a0) readv(r1, &(0x7f0000000200)=[{&(0x7f0000003140)=""/4096, 0x8}], 0x2) 5.380540743s ago: executing program 9 (id=2718): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg}, 0x48) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r4, r3, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r4}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) recvmsg$unix(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000001780)=""/4071, 0xfe7}, {&(0x7f0000000300)=""/78, 0x4e}, {&(0x7f0000000400)=""/133, 0xe8b}], 0x9}, 0x40020000) sendmsg$inet(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000000280)='>', 0xfffe}], 0x1}, 0x0) 5.344911689s ago: executing program 4 (id=2719): openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = semget$private(0x0, 0x4, 0x0) semop(r2, &(0x7f0000000380)=[{0x0, 0x440}, {0x3, 0xffff}], 0x2) semctl$SETALL(r2, 0x0, 0x11, &(0x7f0000000080)=[0x7fff]) 5.300504109s ago: executing program 8 (id=2720): r0 = socket$tipc(0x1e, 0x4, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x83f}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x4, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4000884}, 0x4) 5.300255313s ago: executing program 6 (id=2721): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = creat(&(0x7f00000002c0)='./file0\x00', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000003bc0)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe020010850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000}, 0x94) write$P9_RVERSION(r1, &(0x7f0000000c40)=ANY=[], 0x13) r3 = syz_clone(0x40000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000003c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000280)='./file0\x00', &(0x7f0000000300)=[0x5], 0x0, 0x0, 0x1, 0x0, r3}}, 0x40) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7ffffffd}]}) r5 = dup2(r0, r4) close_range(r5, 0xffffffffffffffff, 0x0) 5.24837385s ago: executing program 2 (id=2722): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x400c004) recvmmsg(0xffffffffffffffff, &(0x7f0000006940)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000003c0)=""/6, 0x6}], 0x1}, 0x3}], 0x1, 0x2, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$sock(r2, &(0x7f00000044c0), 0x4000000000001c0, 0x0) recvfrom(r3, &(0x7f0000000280)=""/63, 0x18, 0x40002020, 0x0, 0x0) 5.047726883s ago: executing program 0 (id=2723): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) close(0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) close(0x3) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e21, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r2, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e61, 0x0, @mcast1, 0x80000000}}}, &(0x7f0000000040)=0x84) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="30000000000000008400000001000000000000017c"], 0x30, 0x180}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f0000000080)=@assoc_value={0x0, 0x4}, 0x8) 4.990313463s ago: executing program 8 (id=2724): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r2, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc, 0x8, 0x0, 0xc}, 0x10) r3 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r3, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) sendmmsg(r2, &(0x7f0000003240), 0x4000000000000e4, 0x101d0) 4.962117014s ago: executing program 9 (id=2725): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) ioctl$TCSBRKP(r0, 0x5425, 0x3) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001200), 0x101101, 0x0) socket$netlink(0x10, 0x3, 0x12) socket(0x10, 0x803, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f0000000400)={0x0, 0x54a5, 0x400, 0x1, 0x37a}, &(0x7f00000002c0)=0x0, &(0x7f00000003c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000240)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r1, 0x47ba, 0x3e82, 0x60, 0x0, 0x0) 4.184150805s ago: executing program 0 (id=2726): socket$inet_tcp(0x2, 0x1, 0x0) r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x2, 0x7fff7ffc}]}) memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\xdenJ\xeb\x87\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38\x14\xcb\xfa\xb3j\x92\f\xe0\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf0\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12\x00\x00\x00\x00\x00\x00\x00\x00\x00', 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r1 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000340)=ANY=[@ANYBLOB='G'], 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r2, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x0], 0x0, 0x0, 0x1, 0x1}}, 0x40) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x20, 0x10012, r1, 0x0) close_range(r0, 0xffffffffffffffff, 0x200000000000000) 3.828897197s ago: executing program 6 (id=2727): madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) r0 = fsopen(&(0x7f0000000140)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x3) syz_clone3(&(0x7f0000000340)={0x201800000, 0x0, 0x0, 0x0, {0x1f}, 0x0, 0x0, 0x0, 0x0, 0x0, {r1}}, 0x58) syz_clone(0x7821000, 0x0, 0x1d, 0x0, 0x0, 0x0) 3.717466104s ago: executing program 0 (id=2728): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket(0x28, 0x5, 0x0) r3 = syz_io_uring_setup(0x4f6, &(0x7f0000000380)={0x0, 0xc81d, 0x10, 0x4, 0x2cf}, &(0x7f0000000300)=0x0, &(0x7f00000002c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f0000000140)=@IORING_OP_CONNECT={0x10, 0x0, 0x0, r2, 0x80, &(0x7f00000001c0)=@vsock={0x28, 0x0, 0xffffffff, @host}, 0x0, 0x0, 0x1}) io_uring_enter(r3, 0x47b2, 0x10f9, 0x82, 0x0, 0x48) 3.371409494s ago: executing program 9 (id=2729): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = open(&(0x7f0000000000)='./file0\x00', 0x1, 0xd3) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), 0xffffffffffffffff) setsockopt$sock_int(r0, 0x1, 0x2d, &(0x7f0000000140)=0x40, 0x4) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x19, {0x0, 0x0, 0x1, 0xc1}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20044090}, 0x0) sendmsg$TIPC_CMD_GET_REMOTE_MNG(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r3, 0x400, 0x70bd28, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x80c0}, 0x4000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x0) 3.008932902s ago: executing program 8 (id=2730): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x9801}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gre={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}]}}}]}, 0x38}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xa, &(0x7f0000000080)=0x1, 0x4) setsockopt$packet_rx_ring(r4, 0x107, 0x5, &(0x7f0000000140)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x7ff, 0xf83, 0x3}, 0x1c) sendto$packet(r0, &(0x7f0000000180)="8b", 0x1, 0x0, &(0x7f0000000200)={0x11, 0x3, r3, 0x1, 0x4, 0x6, @local}, 0x14) 2.787367558s ago: executing program 0 (id=2731): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0xe, &(0x7f0000000900)=ANY=[@ANYBLOB="b7020000f7ffffffbfa70000000000002402000020fe29817a0af0fff8ffffff69a4f0ff00000000b70600000018d1fe2d6405000000000075040000000000400704000000000000b7040000100000206a0700fe000000008500000005000000b70000000a00000095000000000000000000c2c62f6004ad13aa957e2af5e49a53c2868f0399d909a63796c113a80c19aab9d607000000b6c9483be3f0d3253730e714c46cc4f79fd2b316da4f0de8163f6242fa7323f1740637c48468766af540439fce41f144631ac262dcae18c3d1a1fbe96dc86035b44174f7c0620254ab6d285e6b343185089a0f119e31975e551558050800000000000000125d67857f290870093f38153608561a2128a79cce912d1f05de330800a9f5422bee8ca49166f6a587f2f593775afcd071efc5a972f757521b7b38ec273c2ad3e406f8c124f7dc1c4553229a69df4b2780e6da4420d71489fe383e0b5ce08b750502f2b8add8d2dddde19ac050537e973782b4053150580035fb2c579e1b2100000033d1ee8cab6d236f05b1f7b9f78fd5abfe033eb79f7a0b498366f5edfe311258016fbf47d9c85bf5325bf61419372be377022433e20900a262b20bb8b36de7b0e6c5ebfc5baec1ebe58d4af587d33e2935ad68da6e0fea5c21301f5d002b51a5b60fc741cb2c5d4cd5e896774f9293a6435558795043404ac6eafc8310fbcacca7f971b260fd06d4590ded8429fcd1c9a8dbbdedb32675388df363c0bc536e00448208b72405ebf27ddb402e5a2d675aaad92e183cef1eadc1661140fb567b55c72907a1aca75277a5f0022b1e957ba737f10f1161c5ae6e2cc64072ff3b4e76084922242e63d4b7806e30f786cff147e4bc819060678319a0e5534f5a0db52526c30000000000000000000000a63705b1a60525620acca06d57c055059df7651768310c9085c5f86be6ab819506961ad51f18b35fdc3fd4d0a0dbbdcd494ef168931f27748787bee95d739fef7ee67dd21c34647de82707e41d7db6d981a4fcf0bbd3d38ebb7a2489e28c6b28c0f70092ffb016b7766399555f3e6b538c2c862d17e53eaeb2036f9f0ab6e95e71bda4b5bbf53344264ad93bac1207b31d6e9c78181c7fe204c0b7582d1c762857f2a2e0c60f4a4855591a4f70f94df9629e470701103c40c8f6d3a3068091d62b58999e0a046f9509cb8ddc2a9ad4e0f1f85e5f076218b4b931acdff0c34fc5bdbad17ec481f1c9b17727c14e053e315d0d8d03c24ddaba65c5ce5b1aa04d1f767e25662b155d49460ec720d54044ac2856c11407835f341e2614bcae270000000001000000df7f736aab5d713240b2f40ec7be8251eba969686b2670ddc1a84df6ab12ab3e0cf8747837062233935704ebbd943ef0c5fef29513c7c1d6d2611796dccb45bdfd9e6533ad3574be5b9ea70e0c3b41a32067c03f5f8ed147cd0655c90d656f66eaed18a3c284c4f19417b5d91431759356db5d45ea40c9866957105b6252b0c028c672049ce163126f143f5758faf2a43f4c4f45a69b4e9113f85ae531085c11c75edbdee5af454757cdaff396c15ab9b210c202ffaea96d1bac60c6d6c56a4babc659858789bd479334e13e1c7876f95429431e61400815788c1397b260600d78e7513c58d9ac9474d392cc06f789753e1e7ebf5f1b55e2a64b9150c6580bf48e7bff763034801cccf403108d127b959ffc425a563ea2b90fbe779fd7d2ebfe94"], &(0x7f0000000280)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000800)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x8, &(0x7f0000000180)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000002000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r3, 0xffffffffffffffff}, &(0x7f0000000240), &(0x7f00000003c0)=r0}, 0x20) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000005000000850000002e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r5}, &(0x7f0000000440), &(0x7f0000000480)=r6}, 0x20) sendmsg$inet(r2, &(0x7f0000001100)={0x0, 0x0, 0x0}, 0x40) 2.649403175s ago: executing program 4 (id=2732): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x80) sched_setscheduler(0x0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) syz_mount_image$exfat(&(0x7f0000000700), &(0x7f0000000140)='./file0\x00', 0x810000, &(0x7f0000000280)=ANY=[], 0x1, 0x150d, &(0x7f0000000780)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ftruncate(r0, 0x2000009) 2.472327904s ago: executing program 8 (id=2733): openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x80f, 0x4, 0x2, 0x0, 0x1}, 0x50) socket(0xa, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x400000000010, 0x3, 0x0) socket$tipc(0x1e, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x2b, 0x80801, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x1c, 0x39, 0x1, 0x7fffa, 0x25dfdaff, {0x1}, [@typed={0x8, 0xec, 0x0, 0x0, @fd=r0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c801}, 0x0) 2.361991368s ago: executing program 0 (id=2734): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008032, 0xffffffffffffffff, 0x1c5ed000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x19) r0 = userfaultfd(0x80001) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) ioctl$UFFDIO_COPY(r0, 0xc028aa05, &(0x7f0000000100)={&(0x7f0000ffd000/0x3000)=nil, &(0x7f0000013000/0x4000)=nil, 0x3000, 0x3}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) 2.134095553s ago: executing program 2 (id=2735): creat(&(0x7f0000000000)='./file0\x00', 0x6a) socket(0x840000000002, 0x3, 0xff) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0x4, 0xc000, 0x2, 0x20002f7}) r1 = io_uring_setup(0x7, &(0x7f0000000040)={0x0, 0xc89d, 0xc000, 0x8, 0x20204}) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1d, 0x4, 0x1, 0xbf22, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x200002, 0x1}, 0x50) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) fchmodat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0xfffffffb) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 2.038123115s ago: executing program 8 (id=2736): epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000180)=@abs, 0x11) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_io_uring_setup(0x10a, &(0x7f0000000140)={0x0, 0x5803, 0x0, 0x0, 0xfffffdfc}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x4004, @fd_index=0x3, 0x0, 0x0}) io_uring_enter(r2, 0x80003519, 0x0, 0x0, 0x0, 0x0) 2.037659483s ago: executing program 4 (id=2737): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000002c0)=[@timestamp, @sack_perm, @window={0x3, 0x9, 0x2}, @mss={0x2, 0x400}, @mss={0x2, 0xcb2}, @mss={0x2, 0x3}, @timestamp, @sack_perm, @sack_perm], 0x200000000000028c) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f00000006c0)="4c0f742e9cb62dffba72a942ab132eee4537258721e7c2166a42ab1efd9851930e1f0552e074037a77fccb6368860d24145db745edb5fb0b030f3dc03e5bde6a9b1dcea779e6095f0108d3b32f2e38e659fbdb0dd1e40217b3092dd138fa87b808e5c4b3d3b0dc64de13738046b424ae5ee04dbf98d7b921b9276c7cb42d44c4ab0e9c0e52dcb3ae8ddd42a4fd8f294918ab2ca145b90efb2ff5c1c637b7118183752e27c2c07a1880bbb1659b2d90691c5fe5e829", 0xb5, 0x440dc, 0x0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, 0x0, 0x0) sendmsg$inet(r0, &(0x7f0000002f80)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)="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", 0xe34}], 0x1}, 0x10) 1.981886186s ago: executing program 6 (id=2738): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f00000001c0)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) shutdown(r2, 0x1) 1.824107193s ago: executing program 2 (id=2739): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r1, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}}}, 0x10) bind$tipc(r1, &(0x7f0000000540)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000500)=@name={0x1e, 0x2, 0x3, {{0x42, 0x1}, 0x1}}, 0x10) sendmsg$tipc(r2, &(0x7f0000000340)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x4}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x20044894}, 0x0) 1.510340972s ago: executing program 4 (id=2740): setsockopt$MRT_DONE(0xffffffffffffffff, 0x0, 0xc9, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xf, 0x4008031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) io_uring_enter(0xffffffffffffffff, 0x234f, 0xb1e6, 0x1, 0x0, 0x0) fcntl$lock(0xffffffffffffffff, 0x26, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) madvise(&(0x7f0000000000/0x2000)=nil, 0x8000000, 0x19) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x9) 1.419916414s ago: executing program 9 (id=2741): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f00006e3000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r2 = io_uring_setup(0x7f9, &(0x7f0000000040)={0x0, 0xc8df, 0xfc00, 0xa, 0x20002f7}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x28}}, 0x0) io_uring_enter(r2, 0x2219, 0x7721, 0x16, 0x0, 0x0) 1.272170111s ago: executing program 2 (id=2742): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000058c0)=@newtfilter={0x38, 0x28, 0x575ac7824d421509, 0x70bd29, 0x4, {0x0, 0x0, 0x0, r3, {0x9}, {0xffff}, {0x10, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x0, 0x1}}]}, 0x38}, 0x1, 0x0, 0x0, 0x11}, 0x40) r4 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r4, &(0x7f0000000140), 0x4924b68, 0x0) 859.757071ms ago: executing program 6 (id=2743): socket$nl_netfilter(0x10, 0x3, 0xc) socket$rds(0x15, 0x5, 0x0) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff1000/0x3000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ff6000/0x3000)=nil, &(0x7f0000ff2000/0x1000)=nil, &(0x7f0000ff8000/0x8000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ffa000/0x2000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffa000/0x3000)=nil, &(0x7f00001e9000/0x1000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x1b7b, &(0x7f0000000040)={0x0, 0xc89c, 0xc000, 0x2, 0x6}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000093c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@deltfilter={0x24, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x0, 0xfff0}, {0xe, 0xffff}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x3, &(0x7f0000000000)=0x6, 0x4) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) io_uring_enter(r0, 0x2219, 0x7721, 0x16, 0x0, 0x0) 496.952701ms ago: executing program 6 (id=2744): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2}, 0x47) writev(r1, &(0x7f00000007c0)=[{&(0x7f0000000300)='5', 0x1}], 0x1) recvfrom$unix(r2, 0x0, 0x0, 0x122, 0x0, 0x0) 409.718866ms ago: executing program 2 (id=2745): prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x48}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x19, &(0x7f0000000000)={0xffffffff}, 0xf1, 0x10, &(0x7f0000000000)={0x0, 0x7}, 0x7}, 0x48) 0s ago: executing program 6 (id=2746): r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x140, 0x82) r1 = fanotify_init(0x2, 0x1000) r2 = openat$dir(0xffffffffffffff9c, &(0x7f0000000340)='.\x00', 0x0, 0x0) r3 = openat$dir(0xffffffffffffff9c, &(0x7f0000000280)='.\x00', 0x8000, 0x1f7) r4 = fanotify_init(0x8, 0x400) fanotify_mark(r4, 0x441, 0x8000001, r3, 0x0) r5 = fanotify_init(0x200, 0x0) fanotify_mark(r5, 0x1, 0x4000003e, r3, 0x0) fanotify_mark(r1, 0x105, 0x40001032, r0, 0x0) openat(r2, &(0x7f0000000100)='./file0\x00', 0x200, 0x60) kernel console output (not intermixed with test programs): : left promiscuous mode [ 364.482192][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.523281][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.562444][ T6830] XFS (loop8): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 364.604382][ T3492] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.627419][ T3492] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.723939][ T3492] veth1_macvtap: left promiscuous mode [ 364.746665][ T3492] veth0_macvtap: left promiscuous mode [ 364.758036][ T3492] veth1_vlan: left promiscuous mode [ 364.770430][ T3492] veth0_vlan: left promiscuous mode [ 366.434967][T11792] loop3: detected capacity change from 0 to 1024 [ 366.489937][T11792] EXT4-fs: Ignoring removed oldalloc option [ 366.548010][T11792] EXT4-fs (loop3): stripe (8) is not aligned with cluster size (4096), stripe is disabled [ 366.629748][T11792] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 366.707048][T11792] EXT4-fs (loop3): orphan cleanup on readonly fs [ 366.879178][T11792] EXT4-fs error (device loop3): __ext4_get_inode_loc:4830: comm syz.3.1496: Invalid inode table block 0 in block_group 0 [ 366.927816][T11792] loop3: lost filesystem error report for type 5 error -117 [ 366.941432][T11792] EXT4-fs (loop3): Remounting filesystem read-only [ 366.991411][T11792] Quota error (device loop3): write_blk: dquota write failed [ 367.010554][T11792] Quota error (device loop3): qtree_write_dquot: Error -117 occurred while creating quota [ 367.067823][T11792] EXT4-fs (loop3): 1 truncate cleaned up [ 367.101025][T11792] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 367.177831][ T1217] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 367.290555][ T5938] IPVS: starting estimator thread 0... [ 367.381818][ T1217] usb 6-1: too many configurations: 9, using maximum allowed: 8 [ 367.396547][ T1217] usb 6-1: config 0 has no interfaces? [ 367.405535][T11813] IPVS: using max 25 ests per chain, 60000 per kthread [ 367.422972][ T1217] usb 6-1: config 0 has no interfaces? [ 367.430318][ T1217] usb 6-1: config 0 has no interfaces? [ 367.442860][ T1217] usb 6-1: config 0 has no interfaces? [ 367.461659][ T1217] usb 6-1: config 0 has no interfaces? [ 367.476732][ T8763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 367.515849][ T1217] usb 6-1: config 0 has no interfaces? [ 367.534531][ T1217] usb 6-1: config 0 has no interfaces? [ 367.571640][ T1217] usb 6-1: config 0 has no interfaces? [ 367.580423][ T1217] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 367.624635][ T1217] usb 6-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 367.653896][ T1217] usb 6-1: Product: syz [ 367.665919][ T1217] usb 6-1: Manufacturer: syz [ 367.670547][ T1217] usb 6-1: SerialNumber: syz [ 367.747088][ T1217] usb 6-1: config 0 descriptor?? evice number 2 [ 368.988109][ T3492] team0 (unregistering): Port device team_slave_1 removed [ 369.073066][ T3492] team0 (unregistering): Port device team_slave_0 removed [ 369.427745][T11848] netlink: 'syz.5.1504': attribute type 4 has an invalid length. [ 369.487782][T11850] netlink: 'syz.5.1504': attribute type 4 has an invalid length. [ 370.314347][T11823] dvmrp0: entered allmulticast mode [ 370.494761][T11869] netlink: 'syz.8.1506': attribute type 1 has an invalid length. [ 370.730031][T11869] 8021q: adding VLAN 0 to HW filter on device bond1 [ 371.136511][T11876] bond1: (slave veth0_to_bond): making interface the new active one [ 371.296477][T11876] bond1: (slave veth0_to_bond): Enslaving as an active interface with an up link [ 371.665160][T11882] bond1: entered promiscuous mode [ 371.670218][T11882] veth0_to_bond: entered promiscuous mode [ 371.685966][T11890] loop0: detected capacity change from 0 to 32768 [ 371.693459][T11890] btrfs: Deprecated parameter 'usebackuproot' [ 371.699733][T11890] BTRFS warning: 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 371.709804][T11890] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 (7:0) scanned by syz.0.1512 (11890) [ 371.758642][T11890] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 371.770433][T11890] BTRFS info (device loop0): using crc32c checksum algorithm [ 371.807249][T11892] faux_driver vkms: [drm] Unknown color mode 2054; guessing buffer size. [ 371.818095][T11882] bond1: entered allmulticast mode [ 371.837106][T11882] veth0_to_bond: entered allmulticast mode [ 372.096228][ T3570] BTRFS warning (device loop0): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 372.152459][T11890] BTRFS error (device loop0): failed to load root extent [ 372.159902][T11890] BTRFS warning (device loop0): try to load backup roots slot 1 [ 372.206970][ T7518] BTRFS warning (device loop0): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 372.288060][T11890] BTRFS warning (device loop0): couldn't read tree root [ 372.295097][T11890] BTRFS warning (device loop0): try to load backup roots slot 2 [ 372.305490][ T3522] BTRFS error (device loop0): level verify failed on logical 5255168 mirror 1 wanted 0 found 1 [ 372.343123][T11890] BTRFS warning (device loop0): couldn't read tree root [ 372.350397][T11890] BTRFS warning (device loop0): try to load backup roots slot 3 [ 372.412706][T11890] BTRFS info (device loop0): rebuilding free space tree [ 372.570343][T11890] BTRFS info (device loop0): checking UUID tree [ 372.592521][T11890] BTRFS info (device loop0): enabling ssd optimizations [ 372.599583][T11890] BTRFS info (device loop0): turning on sync discard [ 372.606408][T11890] BTRFS info (device loop0): enabling free space tree [ 372.613248][T11890] BTRFS info (device loop0): force clearing of disk cache [ 372.620480][T11890] BTRFS info (device loop0): enabling auto defrag [ 372.626915][T11890] BTRFS info (device loop0): trying to use backup root at mount time [ 372.635036][T11890] BTRFS info (device loop0): use zstd compression, level 3 [ 373.011591][T11231] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 373.576379][T11944] loop9: detected capacity change from 0 to 512 [ 373.635671][T11944] EXT4-fs (loop9): Test dummy encryption mode enabled [ 373.684718][T11944] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (17031!=33349) [ 373.774690][T11944] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=e842e02c, mo2=0002] [ 373.893917][T11944] System zones: 1-12 [ 373.955081][T11944] EXT4-fs (loop9): orphan cleanup on readonly fs [ 373.962946][T11944] EXT4-fs error (device loop9): ext4_validate_block_bitmap:441: comm syz.9.1525: bg 0: block 361: padding at end of block bitmap is not set [ 374.048792][T11944] loop9: lost filesystem error report for type 5 error -117 [ 374.167910][T11944] EXT4-fs (loop9): Remounting filesystem read-only [ 374.236235][T11944] EXT4-fs (loop9): 1 truncate cleaned up [ 374.286679][T11944] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000007 ro without journal. Quota mode: none. [ 374.880556][T10776] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000007. [ 374.899725][T11969] loop3: detected capacity change from 0 to 1024 [ 375.017536][T11969] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=e040c01c, mo2=0002] [ 375.100413][T11969] System zones: 0-1, 3-36 [ 375.208290][T11969] EXT4-fs error (device loop3): ext4_orphan_get:1417: comm syz.3.1531: bad orphan inode 134217728 [ 375.297766][T11969] loop3: lost filesystem error report for type 5 error -117 [ 375.305898][T11969] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 375.665966][T11984] fuse: Bad value for 'fd' [ 375.734502][ T31] audit: type=1326 audit(1770872142.300:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 375.825561][T11988] netlink: 328 bytes leftover after parsing attributes in process `syz.9.1537'. [ 375.864969][ T31] audit: type=1326 audit(1770872142.300:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 375.903226][T11986] netlink: 'syz.8.1536': attribute type 6 has an invalid length. [ 375.978097][ T8763] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 376.004734][ T31] audit: type=1326 audit(1770872142.310:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 376.090534][ T31] audit: type=1326 audit(1770872142.340:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f846a15c84e code=0x7ffc0000 [ 376.218050][ T31] audit: type=1326 audit(1770872142.340:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f846a15c84e code=0x7ffc0000 [ 376.357690][ T31] audit: type=1326 audit(1770872142.340:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 376.434558][ T31] audit: type=1326 audit(1770872142.340:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 376.535864][ T31] audit: type=1326 audit(1770872142.340:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 376.649298][ T31] audit: type=1326 audit(1770872142.340:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f846a19bf79 code=0x7ffc0000 [ 376.755768][ T31] audit: type=1326 audit(1770872142.370:56): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=11985 comm="syz.8.1536" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f846a15c84e code=0x7ffc0000 [ 377.889434][ T5839] Bluetooth: hci2: command tx timeout [ 378.926694][ T30] kernel read not supported for file /snd/controlC0 (pid: 30 comm: kworker/1:2) [ 381.234786][T12161] loop9: detected capacity change from 0 to 128 [ 381.311013][T12161] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 381.395118][T12161] hpfs: filesystem error: improperly stopped [ 381.433994][T12161] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 381.534578][T12161] hpfs: You really don't want any checks? You are crazy... [ 381.595783][T12161] hpfs: hpfs_map_sector(): read error [ 381.606234][T12161] hpfs: code page support is disabled [ 381.645270][T12161] hpfs: hpfs_map_4sectors(): unaligned read [ 381.692477][T12161] hpfs: hpfs_map_4sectors(): unaligned read [ 381.719201][T12161] hpfs: filesystem error: unable to find root dir [ 381.742070][T12168] loop8: detected capacity change from 0 to 2048 [ 381.818151][T12161] hpfs: hpfs_map_4sectors(): unaligned read [ 381.850603][T12168] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 381.874624][ T5921] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 381.881367][T12161] hpfs: hpfs_map_sector(): read error [ 381.969216][T12172] hpfs: hpfs_map_4sectors(): unaligned read [ 382.025966][ T5921] usb 1-1: Using ep0 maxpacket: 32 [ 382.031997][T12172] hpfs: hpfs_map_sector(): read error [ 382.057687][ T5921] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 382.096810][ T5921] usb 1-1: config 0 has no interface number 0 [ 382.144584][ T5921] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 382.213653][ T5921] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 382.243695][T12179] EXT4-fs (loop8): shut down requested (0) [ 382.252614][ T5921] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.336658][ T5921] usb 1-1: Product: syz [ 382.347518][ T5921] usb 1-1: Manufacturer: syz [ 382.352148][ T5921] usb 1-1: SerialNumber: syz [ 382.445531][ T5921] usb 1-1: config 0 descriptor?? [ 382.461343][ T3570] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1306: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 382.507443][T12166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.530983][ T3570] EXT4-fs (loop8): Delayed block allocation failed for inode 18 at logical offset 0 with max blocks 128 with error 28 [ 382.594817][ T3570] EXT4-fs (loop8): This should not happen!! Data will be lost [ 382.594817][ T3570] [ 382.624537][ T3570] EXT4-fs (loop8): Total free blocks count 0 [ 382.656379][ T3570] EXT4-fs (loop8): Free/Dirty block details [ 382.672799][ T3570] EXT4-fs (loop8): free_blocks=2415919504 [ 382.708452][ T3570] EXT4-fs (loop8): dirty_blocks=160 [ 382.738446][T12166] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 382.755237][ T3570] EXT4-fs (loop8): Block reservation details [ 382.791861][ T3570] EXT4-fs (loop8): i_reserved_data_blocks=10 [ 382.967517][T12195] overlayfs: failed to clone upperpath [ 382.998284][T12194] loop5: detected capacity change from 0 to 512 [ 383.022959][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 383.032581][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.183137][ T5921] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 384.239358][ T5921] asix 1-1:0.188: probe with driver asix failed with error -71 [ 384.302957][ T5921] usb 1-1: USB disconnect, device number 2 [ 389.632357][T12298] loop8: detected capacity change from 0 to 131072 [ 389.670717][T12298] F2FS-fs (loop8): invalid crc value [ 389.807094][T12298] F2FS-fs (loop8): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 389.841304][T12298] F2FS-fs (loop8): Mounted with checkpoint version = 48b305e4 [ 390.307583][T12313] netlink: 2028 bytes leftover after parsing attributes in process `syz.5.1621'. [ 390.375829][T12313] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1621'. [ 391.394552][ T1217] usb 9-1: new high-speed USB device number 14 using dummy_hcd [ 391.629200][ T1217] usb 9-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 391.681754][ T1217] usb 9-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 391.805083][ T1217] usb 9-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 391.852892][ T1217] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 391.903434][ T1217] usb 9-1: SerialNumber: syz [ 392.249665][ T1217] usb 9-1: 0:2 : does not exist [ 392.302294][ T1217] usb 9-1: unit 5: unexpected type 0x09 [ 392.533920][ T1217] usb 9-1: USB disconnect, device number 14 [ 392.591581][ T29] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 392.628957][ T31] kauditd_printk_skb: 26 callbacks suppressed [ 392.628977][ T31] audit: type=1804 audit(1770872159.180:83): pid=12352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.1632" name="/newroot/39/file0" dev="tmpfs" ino=223 res=1 errno=0 [ 392.744140][ T5892] udevd[5892]: error opening ATTR{/sys/devices/platform/dummy_hcd.8/usb9/9-1/9-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 392.804612][ T29] usb 6-1: Using ep0 maxpacket: 32 [ 392.824177][ T29] usb 6-1: config 0 has an invalid interface number: 161 but max is 0 [ 392.904634][ T29] usb 6-1: config 0 has no interface number 0 [ 392.947287][ T29] usb 6-1: config 0 interface 161 has no altsetting 0 [ 393.008720][ T29] usb 6-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=31.ae [ 393.028340][ T29] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.064657][ T29] usb 6-1: Product: syz [ 393.119209][ T29] usb 6-1: Manufacturer: syz [ 393.144535][ T29] usb 6-1: SerialNumber: syz [ 393.167133][ T29] usb 6-1: config 0 descriptor?? [ 393.210375][ T29] em28xx 6-1:0.161: New device syz syz @ 480 Mbps (0413:6023, interface 161, class 161) [ 393.274485][ T29] em28xx 6-1:0.161: Video interface 161 found: bulk [ 393.598416][T12344] loop0: detected capacity change from 0 to 32768 [ 393.622662][ T29] em28xx 6-1:0.161: unknown em28xx chip ID (0) [ 393.746770][T12344] XFS (loop0): Mounting V5 Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 393.905255][T12344] XFS (loop0): Ending clean mount [ 394.036093][ T29] em28xx 6-1:0.161: reading from i2c device at 0xa0 failed: couldn't get the received message from the bridge (error=-5) [ 394.084738][ T29] em28xx 6-1:0.161: board has no eeprom [ 394.138900][T12377] loop9: detected capacity change from 0 to 8 [ 394.184533][ T29] em28xx 6-1:0.161: Identified as Leadtek Winfast USB II (card=7) [ 394.226928][ T29] em28xx 6-1:0.161: analog set to bulk mode. [ 394.239798][T11231] XFS (loop0): Unmounting Filesystem 986211a9-7d00-4ebf-a576-e3de63fa2cbd [ 394.243321][ T5960] em28xx 6-1:0.161: Registering V4L2 extension [ 394.488841][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 394.504872][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 394.515480][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 394.560691][ T5839] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 394.590249][ T5839] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 syzkaller syzkaller login: [ 394.868585][ T1217] usb 6-1: USB disconnect, device number 3 [ 394.880616][ T5960] em28xx 6-1:0.161: failed to get i2c transfer status from bridge register (error=-5) [ 394.896120][ T1217] em28xx 6-1:0.161: Disconnecting em28xx [ 395.195714][T12404] netlink: 'syz.9.1643': attribute type 15 has an invalid length. [ 395.237958][ T5960] em28xx 6-1:0.161: Config register raw data: 0xffffffed [ 395.264778][ T5960] em28xx 6-1:0.161: AC97 chip type couldn't be determined [ 395.284633][ T5960] em28xx 6-1:0.161: No AC97 audio processor [ 395.352345][ T5960] usb 6-1: Decoder not found [ 395.374834][ T5960] em28xx 6-1:0.161: failed to create media graph [ 395.394555][ T5960] em28xx 6-1:0.161: V4L2 device video103 deregistered [ 395.422926][ T5960] em28xx 6-1:0.161: Remote control support is not available for this card. [ 395.442945][ T1217] em28xx 6-1:0.161: Closing input extension [ 395.466426][ T1217] em28xx 6-1:0.161: Freeing device [ 395.552702][T12420] loop5: detected capacity change from 0 to 2048 [ 395.568090][T12420] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 395.757702][T12425] loop8: detected capacity change from 0 to 128 [ 396.693801][ T5839] Bluetooth: hci4: command tx timeout [ 396.809875][T12438] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1652'. [ 397.330186][T12385] chnl_net:caif_netlink_parms(): no params data found [ 397.606944][T12457] loop5: detected capacity change from 0 to 2048 [ 397.620532][T12457] UDF-fs: error (device loop5): udf_process_sequence: Primary Volume Descriptor not found! [ 397.676452][T12457] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 397.854026][T12385] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.894617][T12385] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.930905][T12385] bridge_slave_0: entered allmulticast mode [ 397.956361][T12385] bridge_slave_0: entered promiscuous mode [ 398.012739][T12385] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.062406][T12463] loop5: detected capacity change from 0 to 64 [ 398.078971][T12385] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.113392][T12385] bridge_slave_1: entered allmulticast mode [ 398.166561][T12385] bridge_slave_1: entered promiscuous mode [ 398.414382][T12385] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 398.441159][T12385] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 398.599846][T12385] team0: Port device team_slave_0 added [ 398.650621][T12385] team0: Port device team_slave_1 added [ 398.765701][ T5839] Bluetooth: hci4: command tx timeout [ 398.778722][T12385] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.797183][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.825021][T12385] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.838290][T12385] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.870397][T12385] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 398.901405][T12483] loop5: detected capacity change from 0 to 4096 [ 399.264534][T12385] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.569434][ T7525] ntfs3(loop5): ino=5, mi_enum_attr [ 399.746196][T12385] hsr_slave_0: entered promiscuous mode [ 399.936528][T12385] hsr_slave_1: entered promiscuous mode [ 399.949822][T12385] debugfs: 'hsr0' already exists in 'hsr' [ 399.963727][T12385] Cannot create hsr debugfs directory [ 400.026959][T12496] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1665'. [ 400.508360][ T5839] sysfs: cannot create duplicate filename '/devices/virtual/bluetooth/hci3/hci3:201' [ 400.520887][ T5839] CPU: 0 UID: 0 PID: 5839 Comm: kworker/u9:4 Tainted: G L syzkaller #0 PREEMPT(full) [ 400.520927][ T5839] Tainted: [L]=SOFTLOCKUP [ 400.520937][ T5839] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 400.520955][ T5839] Workqueue: hci3 hci_rx_work [ 400.520990][ T5839] Call Trace: [ 400.521000][ T5839] [ 400.521010][ T5839] dump_stack_lvl+0xe8/0x150 [ 400.521050][ T5839] sysfs_create_dir_ns+0x271/0x2a0 [ 400.521086][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521120][ T5839] ? __pfx_sysfs_create_dir_ns+0x10/0x10 [ 400.521157][ T5839] ? do_raw_spin_unlock+0xf5/0x210 [ 400.521202][ T5839] kobject_add_internal+0x62b/0xd00 [ 400.521242][ T5839] kobject_add+0x163/0x240 [ 400.521267][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521304][ T5839] ? __pfx_kobject_add+0x10/0x10 [ 400.521331][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521361][ T5839] ? _raw_spin_unlock+0x28/0x50 [ 400.521394][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521429][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521459][ T5839] ? get_device_parent+0x366/0x3a0 [ 400.521492][ T5839] device_add+0x408/0xb70 [ 400.521524][ T5839] hci_conn_add_sysfs+0xd5/0x210 [ 400.521558][ T5839] le_conn_complete_evt+0xf1d/0x1430 [ 400.521598][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521639][ T5839] ? __pfx_le_conn_complete_evt+0x10/0x10 [ 400.521677][ T5839] ? __mutex_unlock_slowpath+0x1bd/0x7d0 [ 400.521720][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521753][ T5839] ? __pfx___mutex_lock+0x10/0x10 [ 400.521778][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.521807][ T5839] ? skb_pull_data+0xfb/0x200 [ 400.521848][ T5839] hci_le_conn_complete_evt+0x187/0x470 [ 400.521901][ T5839] hci_event_packet+0x7af/0x12c0 [ 400.521940][ T5839] ? __pfx_hci_le_meta_evt+0x10/0x10 [ 400.521978][ T5839] ? __pfx_hci_event_packet+0x10/0x10 [ 400.522010][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522046][ T5839] ? kcov_remote_start+0x49a/0x7a0 [ 400.522082][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522112][ T5839] ? hci_send_to_monitor+0xe2/0x590 [ 400.522157][ T5839] hci_rx_work+0x3ee/0x1030 [ 400.522197][ T5839] ? process_scheduled_works+0xa0f/0x17a0 [ 400.522230][ T5839] process_scheduled_works+0xaec/0x17a0 [ 400.522292][ T5839] ? __pfx_process_scheduled_works+0x10/0x10 [ 400.522328][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522359][ T5839] ? assign_work+0x3d5/0x5e0 [ 400.522393][ T5839] worker_thread+0xa50/0xfc0 [ 400.522444][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522486][ T5839] kthread+0x388/0x470 [ 400.522524][ T5839] ? __pfx_worker_thread+0x10/0x10 [ 400.522552][ T5839] ? __pfx_kthread+0x10/0x10 [ 400.522591][ T5839] ret_from_fork+0x51e/0xb90 [ 400.522623][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522655][ T5839] ? __pfx_ret_from_fork+0x10/0x10 [ 400.522684][ T5839] ? srso_alias_return_thunk+0x5/0xfbef5 [ 400.522713][ T5839] ? __switch_to+0xc7d/0x1400 [ 400.522743][ T5839] ? __pfx_kthread+0x10/0x10 [ 400.522782][ T5839] ret_from_fork_asm+0x1a/0x30 [ 400.522841][ T5839] [ 400.522880][ T5839] kobject: kobject_add_internal failed for hci3:201 with -EEXIST, don't try to register things with the same name in the same directory. [ 400.847756][ T52] Bluetooth: hci4: command tx timeout [ 400.848567][ T5839] Bluetooth: hci3: failed to register connection device [ 400.994628][ T7525] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.324807][ T30] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 401.398157][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 401.410604][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 401.423876][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 401.434858][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 401.442606][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 401.499592][ T7525] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.577423][ T30] usb 6-1: Using ep0 maxpacket: 32 [ 401.599255][ T30] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 401.624586][ T30] usb 6-1: config 0 has no interface number 0 [ 401.637396][ T30] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 401.664203][ T30] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 401.706716][ T30] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.718646][T12530] overlayfs: failed to clone upperpath [ 401.724766][ T30] usb 6-1: Product: syz [ 401.734499][ T30] usb 6-1: Manufacturer: syz [ 401.749377][ T30] usb 6-1: SerialNumber: syz [ 401.823267][ T30] usb 6-1: config 0 descriptor?? [ 401.859978][T12516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 401.879611][ T7525] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.116403][T12516] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 402.126619][ T7525] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.936099][ T5839] Bluetooth: hci4: command tx timeout [ 403.088745][ T7525] bridge_slave_1: left allmulticast mode [ 403.095890][ T7525] bridge_slave_1: left promiscuous mode [ 403.102413][ T7525] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.186082][ T7525] bridge_slave_0: left allmulticast mode [ 403.216737][ T7525] bridge_slave_0: left promiscuous mode [ 403.237202][ T7525] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.288845][ T7525] tipc: Resetting bearer [ 403.496039][ T5839] Bluetooth: hci5: command tx timeout [ 403.546270][T12572] netlink: 212360 bytes leftover after parsing attributes in process `syz.2.1686'. [ 403.589891][ T30] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 403.670489][ T30] asix 6-1:0.188: probe with driver asix failed with error -71 [ 403.693445][T12576] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1687'. [ 403.734538][ T30] usb 6-1: USB disconnect, device number 4 [ 403.862386][T12580] loop0: detected capacity change from 0 to 1024 [ 404.438567][ T7525] tipc: Disabling bearer [ 404.857805][ T7525] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.970485][ T7525] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.027871][ T7525] bond0 (unregistering): Released all slaves [ 405.569389][ T5839] Bluetooth: hci5: command tx timeout [ 406.087681][ T7525] bond1 (unregistering): (slave veth0_to_bond): Releasing active interface [ 406.114607][ T7525] veth0_to_bond: left promiscuous mode [ 406.120353][ T7525] veth0_to_bond: left allmulticast mode [ 406.146555][ T7525] bond1 (unregistering): Released all slaves [ 406.297332][T12576] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 406.410088][T12607] loop0: detected capacity change from 0 to 4096 [ 406.565846][T12576] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 406.954709][T12616] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1700'. [ 406.972791][ T7525] tipc: Left network mode [ 407.674499][ T5839] Bluetooth: hci5: command tx timeout [ 408.474235][T12523] chnl_net:caif_netlink_parms(): no params data found [ 409.444193][T12385] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 409.515909][T12385] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 409.724718][ T5839] Bluetooth: hci5: command tx timeout [ 409.889367][T12662] overlayfs: invalid origin (0000) [ 409.923251][ T7525] hsr_slave_0: left promiscuous mode [ 409.988903][ T7525] hsr_slave_1: left promiscuous mode [ 410.015096][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 410.041108][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 410.123892][ T7525] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 410.133454][ T7525] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 410.280847][ T7525] veth1_macvtap: left promiscuous mode [ 410.290369][ T7525] veth0_macvtap: left promiscuous mode [ 410.305025][ T7525] veth1_vlan: left promiscuous mode [ 410.397372][ T7525] veth0_vlan: left promiscuous mode [ 410.572321][T12674] loop0: detected capacity change from 0 to 1024 [ 411.895071][ T5839] Bluetooth: hci0: Malformed MSFT vendor event: 0x02 [ 414.791813][ T7525] team0 (unregistering): Port device team_slave_1 removed [ 414.952418][ T7525] team0 (unregistering): Port device team_slave_0 removed [ 416.329278][ T7525] team0 (unregistering): Port device dummy0 removed [ 416.430655][T12385] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 416.540743][T12699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1726'. [ 416.821608][T12385] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 417.279259][T12523] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.349141][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.383945][T12523] bridge_slave_0: entered allmulticast mode [ 417.442360][T12523] bridge_slave_0: entered promiscuous mode [ 417.492823][T12523] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.544997][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.588316][T12523] bridge_slave_1: entered allmulticast mode [ 417.608572][T12523] bridge_slave_1: entered promiscuous mode [ 417.828251][T12523] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.867999][T12523] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.073654][T12523] team0: Port device team_slave_0 added [ 418.108265][T12523] team0: Port device team_slave_1 added [ 418.327590][T12523] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.340777][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.456098][T12523] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.516827][T12523] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.523800][T12523] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 418.613670][T12523] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.806088][T12523] hsr_slave_0: entered promiscuous mode [ 418.832212][T12523] hsr_slave_1: entered promiscuous mode [ 418.876487][T12523] debugfs: 'hsr0' already exists in 'hsr' [ 418.893626][T12523] Cannot create hsr debugfs directory [ 419.097688][T12385] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.374720][ T5960] usb 10-1: new full-speed USB device number 3 using dummy_hcd [ 419.567080][ T5960] usb 10-1: config 0 interface 0 altsetting 251 has an endpoint descriptor with address 0x44, changing to 0x4 [ 419.599203][ T5960] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x4 has an invalid bInterval 0, changing to 10 [ 419.631216][ T5960] usb 10-1: config 0 interface 0 altsetting 251 endpoint 0x4 has invalid maxpacket 16706, setting to 64 [ 419.651425][ T5960] usb 10-1: config 0 interface 0 has no altsetting 0 [ 419.676681][ T5960] usb 10-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 419.692417][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 419.711018][ T5960] usb 10-1: Product: syz [ 419.721134][ T5960] usb 10-1: Manufacturer: syz [ 419.876390][ T5960] usb 10-1: SerialNumber: syz [ 420.011411][T12385] 8021q: adding VLAN 0 to HW filter on device team0 [ 420.025951][ T5960] usb 10-1: config 0 descriptor?? [ 420.031876][T12790] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 420.076186][ T5960] usb 10-1: selecting invalid altsetting 0 [ 420.268165][ T7525] bridge0: port 1(bridge_slave_0) entered blocking state [ 420.275363][ T7525] bridge0: port 1(bridge_slave_0) entered forwarding state [ 420.338672][T12790] usb 10-1: BOGUS urb xfer, pipe 0 != type 1 [ 420.488337][ T7516] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.495565][ T7516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.544039][ T5960] usb 10-1: USB disconnect, device number 3 [ 422.375232][T12385] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.512292][T12858] loop0: detected capacity change from 0 to 4096 [ 423.016918][T12523] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 423.071287][T12523] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 423.132972][T12523] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 423.201104][T12523] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 423.643916][T12523] 8021q: adding VLAN 0 to HW filter on device bond0 [ 423.759266][T12523] 8021q: adding VLAN 0 to HW filter on device team0 [ 423.898060][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.905370][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 423.967345][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.974557][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.091838][T12385] veth0_vlan: entered promiscuous mode [ 424.321961][T12385] veth1_vlan: entered promiscuous mode [ 424.584358][T12385] veth0_macvtap: entered promiscuous mode [ 424.639270][T12385] veth1_macvtap: entered promiscuous mode [ 424.723184][T12385] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 424.808581][T12385] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 424.872930][ T50] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.911512][ T50] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 424.985560][ T1102] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.037871][ T1102] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 425.908222][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 425.964921][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 425.976722][T12940] overlayfs: failed to clone upperpath [ 426.006503][T12523] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 426.130946][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.141236][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.300403][T12523] veth0_vlan: entered promiscuous mode [ 427.339711][T12523] veth1_vlan: entered promiscuous mode [ 427.515661][T12523] veth0_macvtap: entered promiscuous mode [ 427.558208][T12523] veth1_macvtap: entered promiscuous mode [ 427.630110][T12523] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 427.667456][T12523] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 427.780104][ T1141] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.812159][ T1141] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.844149][ T1141] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 427.866524][ T1141] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 428.100734][T12994] loop4: detected capacity change from 0 to 256 [ 428.205120][T12994] exFAT-fs (loop4): failed to load upcase table (idx : 0x000104d0, chksum : 0x60d18cac, utbl_chksum : 0xe619d30d) [ 428.279819][T12994] exFAT-fs (loop4): failed to load alloc-bitmap [ 428.294054][T10413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.332405][T10413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.354523][T12994] exFAT-fs (loop4): failed to recognize exfat type [ 428.540151][T10413] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 428.588640][T10413] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 428.707722][T13014] loop0: detected capacity change from 0 to 2048 [ 428.890045][T13014] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 428.931603][T13014] ext4 filesystem being mounted at /74/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 429.357243][T11231] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 429.624168][T13044] bridge0: port 2(bridge_slave_1) entered disabled state [ 429.632116][T13044] bridge0: port 1(bridge_slave_0) entered disabled state [ 429.790746][T13056] loop4: detected capacity change from 0 to 164 [ 430.276209][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 430.429130][T13044] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 431.447630][T13052] loop5: detected capacity change from 0 to 32768 [ 431.560386][ T3570] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.596623][ T3570] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.632771][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 431.632771][T13052] [ 431.667464][T10413] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.700256][T10413] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.796317][T13052] ERROR: (device loop5): remounting filesystem as read-only [ 431.826671][T13052] xtLookup: xtSearch returned -5 [ 431.854574][T13052] add_index: get/read_metapage failed! [ 431.864503][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 431.864503][T13052] [ 431.937674][T13052] xtLookup: xtSearch returned -5 [ 431.982696][T13052] free_index: error reading directory table [ 432.004688][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 432.004688][T13052] [ 432.084533][T13052] xtLookup: xtSearch returned -5 [ 432.094935][T13052] free_index: error reading directory table [ 432.136810][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 432.136810][T13052] [ 432.174573][T13052] xtLookup: xtSearch returned -5 [ 432.199494][T13052] free_index: error reading directory table [ 432.229931][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 432.229931][T13052] [ 432.305689][T13052] xtLookup: xtSearch returned -5 [ 432.310763][T13052] free_index: error reading directory table [ 432.358657][T13052] ERROR: (device loop5): xtSearch: xt_getpage: xtree page corrupt [ 432.358657][T13052] [ 432.424478][T13052] xtLookup: xtSearch returned -5 [ 432.429463][T13052] free_index: error reading directory table [ 432.917300][T13105] loop9: detected capacity change from 0 to 32768 [ 432.925368][T13105] xfs: Deprecated parameter 'attr2' [ 432.930569][T13105] XFS: attr2 mount option is deprecated. [ 433.031334][T13105] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.132226][T13105] XFS (loop9): Ending clean mount [ 433.152129][T13105] XFS (loop9): Quotacheck needed: Please wait. [ 433.327784][T13105] XFS (loop9): Quotacheck: Done. [ 433.569594][T13124] net_ratelimit: 30 callbacks suppressed [ 433.569618][T13124] netlink: zone id is out of range [ 433.644671][T10776] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 433.700119][T13124] netlink: zone id is out of range [ 433.717953][T13124] netlink: zone id is out of range [ 433.754788][T13124] netlink: zone id is out of range [ 433.799896][T13124] netlink: zone id is out of range [ 433.864552][T13124] netlink: zone id is out of range [ 433.894858][T13124] netlink: zone id is out of range [ 433.911529][T13124] netlink: zone id is out of range [ 434.048831][T13124] netlink: zone id is out of range [ 434.055949][T13131] io-wq is not configured for unbound workers [ 434.065152][T13124] netlink: zone id is out of range [ 434.402845][T13138] veth0: entered promiscuous mode [ 434.451312][T13138] veth0: entered allmulticast mode [ 435.104614][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1832'. [ 435.720772][ T50] Bluetooth: hci6: Frame reassembly failed (-84) [ 436.289072][ T5837] Bluetooth: hci2: command 0x0406 tx timeout [ 437.278197][T13197] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1850'. [ 437.724728][ T52] Bluetooth: hci6: Opcode 0x1003 failed: -110 [ 437.823747][T13209] overlayfs: failed to clone upperpath [ 439.388019][T13222] loop4: detected capacity change from 0 to 131072 [ 439.431406][T13222] F2FS-fs (loop4): Invalid log sectorsize (67108873) [ 439.438214][T13222] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 439.496352][T13222] F2FS-fs (loop4): invalid crc value [ 439.728387][T13222] F2FS-fs (loop4): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 439.774800][T13222] F2FS-fs (loop4): Try to recover 1th superblock, ret: 0 [ 439.781876][T13222] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e4 [ 440.625240][T13234] loop5: detected capacity change from 0 to 131072 [ 440.667521][T13234] F2FS-fs (loop5): Invalid log sectorsize (67108873) [ 440.674301][T13234] F2FS-fs (loop5): Can't find valid F2FS filesystem in 1th superblock [ 440.688044][T13234] F2FS-fs (loop5): invalid crc value [ 440.773267][T13234] F2FS-fs (loop5): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 440.785569][T13234] F2FS-fs (loop5): Try to recover 1th superblock, ret: 0 [ 440.792619][T13234] F2FS-fs (loop5): Mounted with checkpoint version = 48b305e4 [ 440.824219][T13237] F2FS-fs (loop4): inconsistent node block, node_type:2, nid:8, node_footer[nid:8,ino:8,ofs:0,cpver:5013063228981249506,blkaddr:100678662] [ 440.874546][ T31] audit: type=1800 audit(1770872207.430:84): pid=13234 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1863" name="file1" dev="loop5" ino=7 res=0 errno=0 [ 441.487948][ T52] Bluetooth: hci0: command 0x0406 tx timeout [ 442.099875][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1875'. [ 442.170723][T13272] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1875'. [ 442.181187][T13274] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1876'. [ 442.230590][T13272] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1875'. [ 442.252605][T13274] loop0: detected capacity change from 0 to 8 [ 442.321652][T13274] SQUASHFS error: zstd decompression error: 10 [ 442.383750][T13274] SQUASHFS error: zstd decompression failed, data probably corrupt [ 442.453926][T13274] SQUASHFS error: Failed to read block 0x62b: -5 [ 442.504248][T13274] SQUASHFS error: Unable to read metadata cache entry [629] [ 442.504262][T13283] SQUASHFS error: Unable to read metadata cache entry [629] [ 442.565342][T13274] SQUASHFS error: Unable to read directory block [629:ff26] [ 442.631854][T13283] SQUASHFS error: Unable to read directory block [629:ff26] [ 444.283925][T13313] sd 0:0:1:0: PR command failed: 1026 [ 444.307410][T13313] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 444.339011][T13313] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 444.455986][ T30] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 444.465557][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 444.472094][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 444.692594][ T30] usb 1-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 444.750454][ T30] usb 1-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 444.781460][T13322] Bluetooth: MGMT ver 1.23 [ 444.804535][ T30] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 444.834159][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 444.891309][ T30] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 444.978497][ T30] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 445.014557][ T30] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 445.068765][ T30] usb 1-1: Product: syz [ 445.072984][ T30] usb 1-1: Manufacturer: syz [ 445.161142][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 445.195154][ T30] cdc_wdm 1-1:1.0: skipping garbage [ 445.215198][ T30] cdc_wdm 1-1:1.0: cdc-wdm0: USB WDM device [ 445.221141][ T30] cdc_wdm 1-1:1.0: Unknown control protocol [ 445.404510][ T5938] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 445.495062][ T30] usb 1-1: USB disconnect, device number 3 [ 445.594592][ T5938] usb 6-1: Using ep0 maxpacket: 32 [ 445.634732][ T5938] usb 6-1: config 0 has an invalid interface number: 188 but max is 0 [ 445.684965][ T5938] usb 6-1: config 0 has no interface number 0 [ 445.705697][ T5938] usb 6-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 445.750961][ T5938] usb 6-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 445.771725][T13340] binder: 13338:13340 ioctl c0306201 0 returned -14 [ 445.778602][ T5938] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.813810][ T5938] usb 6-1: Product: syz [ 445.831719][ T5938] usb 6-1: Manufacturer: syz [ 445.841275][ T5938] usb 6-1: SerialNumber: syz [ 445.859855][T13343] binder: 13338:13343 ioctl c0306201 0 returned -14 [ 445.868186][ T5938] usb 6-1: config 0 descriptor?? [ 445.885241][T13331] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 446.110232][T13331] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 446.393194][T13355] IPVS: Scheduler module ip_vs_sip not found [ 446.929726][T13364] cgroup: fork rejected by pids controller in /syz0 [ 447.456563][T13413] loop0: detected capacity change from 0 to 256 [ 447.761314][ T5938] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 447.793120][ T5839] Bluetooth: hci1: link tx timeout [ 447.799126][ T5839] Bluetooth: hci1: killing stalled connection 11:aa:aa:aa:aa:aa [ 447.813172][ T5938] asix 6-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 447.855220][ T5938] asix 6-1:0.188: probe with driver asix failed with error -71 [ 447.906598][ T5938] usb 6-1: USB disconnect, device number 5 [ 448.137049][ T31] audit: type=1326 audit(1770872214.710:85): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13420 comm="syz.2.1906" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1465b9bf79 code=0x0 [ 449.235850][ T5839] Bluetooth: hci0: SCO packet for unknown connection handle 0 [ 449.236214][ T5839] Bluetooth: hci0: connection err: -111 [ 449.890559][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 450.108666][ T5938] IPVS: starting estimator thread 0... [ 450.215215][T13476] IPVS: using max 25 ests per chain, 60000 per kthread [ 450.954524][ T5921] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 451.124278][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 451.165265][ T5921] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 451.232079][ T5921] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 451.275669][ T5921] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 451.301121][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 451.329452][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 451.354495][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 451.384496][ T5921] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 451.395110][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 451.457295][ T5921] usb 5-1: config 0 descriptor?? [ 451.676866][ T5921] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 3 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 451.752412][ T5921] usb 5-1: USB disconnect, device number 3 [ 451.789454][ T5921] usblp0: removed [ 452.345340][ T5921] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 452.514518][ T5921] usb 5-1: Using ep0 maxpacket: 32 [ 452.522242][ T5921] usb 5-1: config index 0 descriptor too short (expected 29220, got 36) [ 452.531226][ T5921] usb 5-1: config 0 has too many interfaces: 81, using maximum allowed: 32 [ 452.567659][ T5921] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 81 [ 452.624492][ T5921] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 452.664498][ T5921] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 452.708249][ T5921] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 18 [ 452.751991][ T5921] usb 5-1: New USB device found, idVendor=03f0, idProduct=6c17, bcdDevice= 0.40 [ 452.804590][ T5921] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 452.851788][ T5921] usb 5-1: config 0 descriptor?? [ 452.927515][T13529] netlink: 'syz.7.1934': attribute type 1 has an invalid length. [ 453.095468][ T5921] usblp 5-1:0.0: usblp0: USB Bidirectional printer dev 4 if 0 alt 0 proto 3 vid 0x03F0 pid 0x6C17 [ 453.173523][T13529] veth3: entered promiscuous mode [ 453.366128][T13532] binder: 13531:13532 ioctl c0306201 200000000480 returned -14 [ 453.400264][ C1] usblp0: nonzero read bulk status received: -71 [ 453.418101][ T1217] usb 5-1: USB disconnect, device number 4 [ 453.667005][T13485] usblp0: removed [ 454.137607][T13548] netlink: 12 bytes leftover after parsing attributes in process `syz.9.1939'. [ 455.945163][T13573] loop9: detected capacity change from 0 to 131072 [ 455.962845][T13573] F2FS-fs (loop9): Wrong CP boundary, start(512) end(1536) blocks(0) [ 455.974484][T13573] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 455.998357][T13573] F2FS-fs (loop9): invalid crc value [ 456.151247][T13573] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 456.188990][T13573] F2FS-fs (loop9): Try to recover 1th superblock, ret: 0 [ 456.199687][T13573] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 457.008073][T13616] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1958'. [ 457.201170][T13623] loop0: detected capacity change from 0 to 128 [ 457.259149][T13623] EXT4-fs (loop0): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 457.282096][T13623] ext4 filesystem being mounted at /102/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 457.450621][T13637] netlink: 'syz.4.1963': attribute type 13 has an invalid length. [ 457.856074][T11231] EXT4-fs (loop0): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 457.978626][T13637] bridge0: port 2(bridge_slave_1) entered disabled state [ 457.986181][T13637] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.976056][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 460.063902][T13637] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 460.712658][T13676] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1971'. [ 461.126460][T13686] overlayfs: failed to clone upperpath [ 461.337088][ T7525] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.363124][ T7525] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.377126][T13689] syz_tun: entered allmulticast mode [ 461.382571][ T7525] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.426169][ T7525] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 462.028016][T13724] loop5: detected capacity change from 0 to 512 [ 462.094184][T13724] EXT4-fs: Journaled quota options ignored when QUOTA feature is enabled [ 462.221961][T13724] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a84ec01c, mo2=0003] [ 462.293710][T13724] System zones: 1-2, 4-12, 8-8 [ 462.332873][T13724] EXT4-fs error (device loop5): ext4_orphan_get:1391: inode #15: comm syz.5.1986: iget: bad i_size value: 38620345925642 [ 462.351352][T13724] loop5: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 462.375783][T13724] EXT4-fs error (device loop5): ext4_orphan_get:1396: comm syz.5.1986: couldn't read orphan inode 15 (err -117) [ 462.485395][T13724] loop5: lost filesystem error report for type 5 error -117 [ 462.569798][T13724] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 462.906518][T13744] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1991'. [ 462.938214][T13744] netlink: 188 bytes leftover after parsing attributes in process `syz.2.1991'. [ 463.150809][T10844] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 463.546179][T13756] netlink: 'syz.2.1995': attribute type 1 has an invalid length. [ 463.922491][T13756] 8021q: adding VLAN 0 to HW filter on device bond1 [ 463.962475][T13758] bond1: (slave dummy0): making interface the new active one [ 463.975200][T13758] bond1: (slave dummy0): Enslaving as an active interface with an up link [ 464.256784][ T31] audit: type=1326 audit(1770872230.830:86): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13771 comm="syz.7.1999" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f178619bf79 code=0x0 [ 464.705405][T13763] bond1 (unregistering): (slave dummy0): Releasing active interface [ 464.726014][T13763] bond1 (unregistering): Released all slaves [ 464.864785][T13764] vxcan1: entered promiscuous mode [ 466.053915][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 466.144690][T13805] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2008'. [ 466.896540][T13792] loop7: detected capacity change from 0 to 32768 [ 467.084628][T13792] JBD2: Ignoring recovery information on journal [ 467.257974][T13792] ocfs2: Mounting device (7,7) on (node local, slot 0) with ordered data mode. [ 467.444519][ T5938] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 467.676195][T12523] ocfs2: Unmounting device (7,7) on (node local) [ 467.686504][ T5938] usb 1-1: config 0 has no interfaces? [ 467.695112][ T5938] usb 1-1: New USB device found, idVendor=18b4, idProduct=fffb, bcdDevice=dc.7b [ 467.729459][ T5938] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 467.776068][ T5938] usb 1-1: Product: syz [ 467.810809][ T5938] usb 1-1: Manufacturer: syz [ 467.828988][ T5938] usb 1-1: SerialNumber: syz [ 467.888080][ T5938] usb 1-1: config 0 descriptor?? [ 469.948822][T13867] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2029'. [ 470.338273][T13870] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2030'. [ 470.704319][T13873] netlink: 'syz.7.2031': attribute type 1 has an invalid length. [ 470.718309][T13873] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2031'. [ 472.897632][T13902] binder: 13901:13902 ioctl c0306201 2000000003c0 returned -14 [ 472.906618][T13902] binder: 13901:13902 unknown command 0 [ 472.912285][T13902] binder: 13901:13902 ioctl c0306201 2000000001c0 returned -22 [ 473.048304][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2044'. [ 473.057727][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2044'. [ 473.075448][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 473.088873][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2044'. [ 473.532364][T13911] netlink: 'syz.5.2046': attribute type 4 has an invalid length. [ 475.461132][ T5938] usb 10-1: new full-speed USB device number 4 using dummy_hcd [ 475.463996][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2056'. [ 475.721189][ T5938] usb 10-1: config 0 has no interfaces? [ 475.732186][ T5938] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 475.741740][T13956] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(6) [ 475.748276][T13956] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 475.754433][ T5938] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 475.779561][T13956] vhci_hcd vhci_hcd.0: Device attached [ 475.784536][ T5938] usb 10-1: SerialNumber: syz [ 475.810243][ T5938] usb 10-1: config 0 descriptor?? [ 475.868924][T13956] 9pnet: p9_errstr2errno: server reported unknown error 0x000000000 [ 475.909351][T13957] vhci_hcd: connection closed [ 475.912552][ T1141] vhci_hcd vhci_hcd.4: stop threads [ 475.945116][ T1141] vhci_hcd vhci_hcd.4: release socket [ 475.955200][ T5912] usb 1-1: USB disconnect, device number 4 [ 475.962814][ T1141] vhci_hcd vhci_hcd.4: disconnect device [ 476.006957][T13965] overlayfs: failed to clone upperpath [ 476.141543][ T5938] usb 10-1: USB disconnect, device number 4 [ 476.374304][T13971] usb usb8: usbfs: process 13971 (syz.7.2063) did not claim interface 0 before use [ 476.540712][T13976] bond1: entered allmulticast mode [ 476.548251][T13976] 8021q: adding VLAN 0 to HW filter on device bond1 [ 476.703662][T13976] bond1: (slave ip6gretap1): making interface the new active one [ 476.741334][T13976] ip6gretap1: entered allmulticast mode [ 476.790888][T13976] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 477.112019][T13997] binder: 13996:13997 ioctl c0306201 2000000003c0 returned -14 [ 478.542791][T14017] loop5: detected capacity change from 0 to 2048 [ 478.642263][T14017] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 99: 0x27 != 0x4d [ 478.708064][T14017] UDF-fs: error (device loop5): udf_read_tagged: tag checksum failed, block 160: 0xd2 != 0xd4 [ 478.766821][T14017] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 478.874956][ T30] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 478.894584][ T5960] usb 10-1: new full-speed USB device number 5 using dummy_hcd [ 478.935535][T14017] loop5: detected capacity change from 2048 to 0 [ 479.055063][ T30] usb 1-1: Using ep0 maxpacket: 8 [ 479.085933][ T5960] usb 10-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 479.114975][ T5960] usb 10-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 479.147556][ T30] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 479.160631][ T5960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 479.189530][ T30] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 479.205755][ T30] usb 1-1: Product: syz [ 479.209958][ T30] usb 1-1: Manufacturer: syz [ 479.224514][ T5960] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 479.245731][T10844] Buffer I/O error on dev loop5, logical block 128, lost sync page write [ 479.275165][ T30] usb 1-1: SerialNumber: syz [ 479.296924][ T5960] usb 10-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 479.318650][ T30] usb 1-1: config 0 descriptor?? [ 479.379701][ T5960] usb 10-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 479.414622][ T5960] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 479.422859][ T5960] usb 10-1: Product: syz [ 479.442364][ T5960] usb 10-1: Manufacturer: syz [ 479.501837][ T5960] usb 10-1: SerialNumber: syz [ 479.531969][ T30] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 479.548255][ T5960] usb 10-1: config 0 descriptor?? [ 479.810594][ T5960] radio-si470x 10-1:0.0: DeviceID=0x0000 ChipID=0x0000 [ 479.842525][ T5960] radio-si470x 10-1:0.0: This driver is known to work with firmware version 12, but the device has firmware version 0. [ 480.019981][ T5960] radio-si470x 10-1:0.0: software version 0, hardware version 0 [ 480.031481][ T5960] radio-si470x 10-1:0.0: This driver is known to work with hardware version 1, but the device has hardware version 0. [ 480.093551][ T5960] radio-si470x 10-1:0.0: If you have some trouble using this driver, please report to V4L ML at linux-media@vger.kernel.org [ 480.220918][ T5960] radio-si470x 10-1:0.0: submitting int urb failed (-90) [ 480.552817][ T30] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 480.768736][ T5938] usb 1-1: USB disconnect, device number 5 [ 481.430140][ T5960] radio-si470x 10-1:0.0: si470x_set_report: usb_control_msg returned -71 [ 481.479548][ T5960] radio-si470x 10-1:0.0: si470x_get_report: usb_control_msg returned -71 [ 481.572592][ T5960] usb 10-1: USB disconnect, device number 5 [ 482.188435][T14045] lec:lec_atm_close: lec0: Shut down! [ 483.994148][T14099] loop9: detected capacity change from 0 to 131072 [ 484.144146][T14099] F2FS-fs (loop9): invalid crc value [ 484.198905][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 484.214713][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 484.232695][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 484.300520][T14099] F2FS-fs (loop9): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 484.323361][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 484.334674][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 484.344610][T14099] F2FS-fs (loop9): Mounted with checkpoint version = 48b305e4 [ 484.501293][T14110] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2098'. [ 485.767129][T14130] loop0: detected capacity change from 0 to 64 [ 486.277189][T14104] chnl_net:caif_netlink_parms(): no params data found [ 486.444833][ T52] Bluetooth: hci0: command tx timeout [ 486.844676][T14104] bridge0: port 1(bridge_slave_0) entered blocking state [ 486.851890][T14104] bridge0: port 1(bridge_slave_0) entered disabled state [ 486.867185][T14104] bridge_slave_0: entered allmulticast mode [ 486.906522][T14104] bridge_slave_0: entered promiscuous mode [ 486.953220][T14104] bridge0: port 2(bridge_slave_1) entered blocking state [ 486.986466][T14104] bridge0: port 2(bridge_slave_1) entered disabled state [ 486.993784][T14104] bridge_slave_1: entered allmulticast mode [ 487.036610][T14104] bridge_slave_1: entered promiscuous mode [ 487.243636][T14104] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.356559][T14104] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 487.551500][T14104] team0: Port device team_slave_0 added [ 487.598756][T14104] team0: Port device team_slave_1 added [ 488.068698][T14104] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.136232][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.299876][T14104] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.346014][T14104] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.405380][T14104] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.524714][ T52] Bluetooth: hci0: command tx timeout [ 488.534702][T14104] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.962246][T14182] loop9: detected capacity change from 0 to 32768 [ 489.021037][T14182] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 489.029378][T14182] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 489.137578][T14182] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 489.147915][ T5938] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 489.164827][ T5938] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 489.196347][T14104] hsr_slave_0: entered promiscuous mode [ 489.239321][T14104] hsr_slave_1: entered promiscuous mode [ 489.254599][T14104] debugfs: 'hsr0' already exists in 'hsr' [ 489.290809][T14104] Cannot create hsr debugfs directory [ 489.394261][ T5938] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 229ms [ 489.470459][ T5938] gfs2: fsid=syz:syz.0: jid=0: Done [ 489.496267][T14182] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 490.346823][T14213] loop7: detected capacity change from 0 to 8 [ 490.614949][ T52] Bluetooth: hci0: command tx timeout [ 491.191477][T14233] loop0: detected capacity change from 0 to 512 [ 492.210238][T14104] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 492.283495][T14104] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 492.364202][T14104] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 492.429331][T14104] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 492.613293][T14270] loop9: detected capacity change from 0 to 2048 [ 492.662029][T14270] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 492.685740][ T52] Bluetooth: hci0: command tx timeout [ 492.772949][T14274] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2139'. [ 492.792853][T14104] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.813356][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 492.825127][T14274] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2139'. [ 492.847755][T14104] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.866545][ T7516] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.874518][ T7516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.935773][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.942977][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.985350][ T1217] usb 10-1: new high-speed USB device number 6 using dummy_hcd [ 493.166685][ T1217] usb 10-1: Using ep0 maxpacket: 16 [ 493.183535][ T1217] usb 10-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 493.207595][ T1217] usb 10-1: config 0 interface 0 has no altsetting 0 [ 493.227930][ T1217] usb 10-1: New USB device found, idVendor=1e71, idProduct=2009, bcdDevice= 0.00 [ 493.264012][ T1217] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.304163][ T1217] usb 10-1: config 0 descriptor?? [ 493.769383][T14104] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.781254][ T1217] nzxt-smart2 0003:1E71:2009.0007: hidraw0: USB HID v0.05 Device [HID 1e71:2009] on usb-dummy_hcd.9-1/input0 [ 493.873874][T14297] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.881548][T14297] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.174530][ T3570] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.201555][ T3570] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.223404][ T3570] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.237389][ T9] usb 10-1: USB disconnect, device number 6 [ 494.239428][ T3570] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.288251][ T3570] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.352728][T14303] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2147'. [ 494.371141][ T3570] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.388080][ T3570] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 494.398569][ T3570] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 494.593716][T14104] veth0_vlan: entered promiscuous mode [ 494.639285][T14104] veth1_vlan: entered promiscuous mode [ 494.710909][T14104] veth0_macvtap: entered promiscuous mode [ 494.737974][T14104] veth1_macvtap: entered promiscuous mode [ 494.792851][T14104] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.838073][T14104] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.893964][ T37] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.931982][ T37] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.965078][ T37] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.979968][ T37] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 495.361746][T10413] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.390030][T10413] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.469831][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 495.482378][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 495.679707][T14319] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2152'. [ 495.697407][T14319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2152'. [ 501.988013][T14413] loop4: detected capacity change from 0 to 256 [ 502.144658][ T31] audit: type=1800 audit(1770872268.710:87): pid=14413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2174" name="file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="loop4" ino=1048693 res=0 errno=0 [ 503.272468][T14437] loop4: detected capacity change from 0 to 128 [ 503.417591][T14437] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 503.482647][T14437] ext4 filesystem being mounted at /57/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 503.889131][T12385] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 505.909870][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.111761][ T5839] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 507.123205][ T5839] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 507.131550][ T5839] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 507.145743][ T5839] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 507.155421][ T5839] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 507.965799][T14506] netlink: 'syz.2.2196': attribute type 29 has an invalid length. [ 508.603096][T14490] chnl_net:caif_netlink_parms(): no params data found [ 508.794822][ T5921] usb 5-1: new low-speed USB device number 5 using dummy_hcd [ 508.844657][ T5960] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 508.979864][ T5921] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 508.983363][T14490] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.995314][T14490] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.002566][T14490] bridge_slave_0: entered allmulticast mode [ 509.011390][T14490] bridge_slave_0: entered promiscuous mode [ 509.017507][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 509.019215][ T5960] usb 1-1: Using ep0 maxpacket: 32 [ 509.038055][T14490] bridge0: port 2(bridge_slave_1) entered blocking state [ 509.052864][T14490] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.062148][ T5960] usb 1-1: config 0 has an invalid interface number: 188 but max is 0 [ 509.070814][ T5960] usb 1-1: config 0 has no interface number 0 [ 509.074710][ T5921] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 509.077684][T14490] bridge_slave_1: entered allmulticast mode [ 509.108422][ T5960] usb 1-1: config 0 interface 188 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 509.121284][ T5960] usb 1-1: New USB device found, idVendor=17ef, idProduct=7203, bcdDevice=2e.36 [ 509.132739][T14490] bridge_slave_1: entered promiscuous mode [ 509.138727][ T5960] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.154518][ T5960] usb 1-1: Product: syz [ 509.160726][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 509.166033][ T5960] usb 1-1: Manufacturer: syz [ 509.200015][ T5960] usb 1-1: SerialNumber: syz [ 509.212989][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 509.221199][ T5960] usb 1-1: config 0 descriptor?? [ 509.236509][T14490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.251786][ T5839] Bluetooth: hci6: command tx timeout [ 509.263616][ T5921] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 509.285759][T14523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 509.301126][T14490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.304456][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 509.375092][T14490] team0: Port device team_slave_0 added [ 509.388516][T14490] team0: Port device team_slave_1 added [ 509.457718][T14490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.475495][ T5921] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 509.480157][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.564686][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 509.575944][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 509.587183][T14490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.602309][ T5921] usb 5-1: config 168 descriptor has 1 excess byte, ignoring [ 509.616649][T14490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.623604][T14490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 509.668796][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x3 has invalid maxpacket 77, setting to 8 [ 509.680035][ T5921] usb 5-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 509.692259][T14523] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 509.704080][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 509.726252][T14490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.744418][ T5921] usb 5-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 8 [ 509.808676][ T5921] usb 5-1: string descriptor 0 read error: -22 [ 509.816999][ T5921] usb 5-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 509.844620][ T5839] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 509.875361][ T5921] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.971984][ T5921] adutux 5-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 510.056870][T14490] hsr_slave_0: entered promiscuous mode [ 510.084922][T14490] hsr_slave_1: entered promiscuous mode [ 510.091338][T14490] debugfs: 'hsr0' already exists in 'hsr' [ 510.136745][T14490] Cannot create hsr debugfs directory [ 510.419543][ T1217] usb 5-1: USB disconnect, device number 5 [ 510.426186][T14554] usb 5-1: Couldn't submit interrupt_out_urb -19 [ 510.497508][T14539] loop9: detected capacity change from 0 to 32768 [ 510.532832][T14539] XFS (loop9): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 510.617784][T14539] XFS (loop9): Ending clean mount [ 510.665033][T14539] XFS (loop9): Quotacheck needed: Please wait. [ 510.787646][T14539] XFS (loop9): Quotacheck: Done. [ 510.980214][T10776] XFS (loop9): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 511.342511][ T5839] Bluetooth: hci6: command tx timeout [ 511.393602][ T5960] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 511.415836][ T5960] asix 1-1:0.188 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 511.444706][ T5960] asix 1-1:0.188: probe with driver asix failed with error -71 [ 511.506613][ T5960] usb 1-1: USB disconnect, device number 6 [ 512.415894][ T5921] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 512.606592][ T5921] usb 1-1: Using ep0 maxpacket: 16 [ 512.625555][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 512.674975][ T5921] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 512.728159][ T5921] usb 1-1: New USB device found, idVendor=0458, idProduct=5016, bcdDevice= 0.00 [ 512.769288][ T5921] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.803199][ T5921] usb 1-1: config 0 descriptor?? [ 512.941598][T14490] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 512.972306][T14490] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 512.993694][T14490] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 513.019374][T14490] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 513.244227][ T5921] kye 0003:0458:5016.0008: control desc unexpectedly large [ 513.318143][ T5921] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input12 [ 513.406576][ T5839] Bluetooth: hci6: command tx timeout [ 513.431295][T14490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 513.459867][T14490] 8021q: adding VLAN 0 to HW filter on device team0 [ 513.517101][ T5921] input: HID 0458:5016 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:0458:5016.0008/input/input13 [ 513.590360][T14623] bond1: option lacp_rate: mode dependency failed, not supported in mode active-backup(1) [ 513.693338][ T5921] kye 0003:0458:5016.0008: input,hiddev0,hidraw0: USB HID v0.09 Device [HID 0458:5016] on usb-dummy_hcd.0-1/input0 [ 513.740855][T14623] bond1 (unregistering): Released all slaves [ 513.911646][ T3570] bridge0: port 1(bridge_slave_0) entered blocking state [ 513.918862][ T3570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 513.958800][ T3570] bridge0: port 2(bridge_slave_1) entered blocking state [ 513.966022][ T3570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 514.528676][ C0] kye 0003:0458:5016.0008: usb_submit_urb(ctrl) failed: -1 [ 515.303057][T14490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 515.486416][ T5839] Bluetooth: hci6: command tx timeout [ 515.505056][ T5831] usb 1-1: USB disconnect, device number 7 [ 515.695137][T14663] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2225'. [ 516.348320][T14683] tipc: Failed to remove unknown binding: 66,1,1/0:2536995822/2536995824 [ 516.421523][T14683] tipc: Failed to remove unknown binding: 66,1,1/0:2536995822/2536995824 [ 516.543178][T14683] tipc: Failed to remove unknown binding: 66,1,1/0:2536995822/2536995824 [ 516.724825][T14690] overlayfs: failed to clone upperpath [ 516.729661][T14490] veth0_vlan: entered promiscuous mode [ 516.802230][T14490] veth1_vlan: entered promiscuous mode [ 516.909776][T14490] veth0_macvtap: entered promiscuous mode [ 516.967122][T14490] veth1_macvtap: entered promiscuous mode [ 517.057260][ T5837] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 517.062362][T14490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 517.075507][ T5837] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 517.094077][ T5837] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 517.121236][ T5837] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 517.130907][ T5837] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 517.154132][T14490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 517.231157][ T7516] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.307197][ T7516] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.355243][ T7516] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.416590][ T1141] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 517.946544][ T7516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.996075][ T7516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.205093][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 518.377065][T14732] loop9: detected capacity change from 0 to 64 [ 518.429092][T14732] hfs: unable to locate alternate MDB [ 518.511363][T14732] hfs: continuing without an alternate MDB [ 518.584602][T14732] hfs: get root inode failed [ 518.590924][T14741] overlayfs: failed to clone lowerpath [ 518.642715][ T37] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.694835][ T37] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.923082][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.247818][ T52] Bluetooth: hci7: command tx timeout [ 519.740418][T14756] fuse: Bad value for 'fd' [ 519.857628][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 519.901112][T14759] loop4: detected capacity change from 0 to 1024 [ 519.908578][T14759] EXT4-fs: Ignoring removed bh option [ 519.914103][T14759] EXT4-fs: inline encryption not supported [ 519.931670][T14759] EXT4-fs (loop4): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 519.958886][T14759] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 519.974108][T14759] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 2: comm syz.4.2249: lblock 2 mapped to illegal pblock 2 (length 1) [ 519.988255][T14759] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 519.988991][T14759] Quota error (device loop4): qtree_write_dquot: dquota write failed [ 520.006321][T14759] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2249: lblock 0 mapped to illegal pblock 48 (length 1) [ 520.020467][T14759] loop4: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 520.021359][T14759] Quota error (device loop4): v2_write_file_info: Can't write info structure [ 520.042164][T14759] EXT4-fs error (device loop4): ext4_acquire_dquot:6998: comm syz.4.2249: Failed to acquire dquot type 0 [ 520.053587][T14759] loop4: lost filesystem error report for type 5 error -117 [ 520.064976][T14759] EXT4-fs error (device loop4) in ext4_reserve_inode_write:6298: Corrupt filesystem [ 520.075114][T14759] loop4: lost filesystem error report for type 5 error -117 [ 520.078465][T14759] EXT4-fs error (device loop4): ext4_evict_inode:253: inode #11: comm syz.4.2249: mark_inode_dirty error [ 520.097614][T14759] loop4: lost file I/O error report for ino 11 type 5 pos 0x0 len 0x0 error -117 [ 520.098033][T14759] EXT4-fs warning (device loop4): ext4_evict_inode:256: couldn't mark inode dirty (err -117) [ 520.117766][T14759] EXT4-fs (loop4): 1 orphan inode deleted [ 520.178095][T14700] chnl_net:caif_netlink_parms(): no params data found [ 520.187865][ T52] Bluetooth: hci1: unexpected event for opcode 0x080d [ 520.188810][ T50] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 1: comm kworker/u8:3: lblock 1 mapped to illegal pblock 1 (length 1) [ 520.263628][T14759] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 520.376384][ T50] Quota error (device loop4): remove_tree: Can't read quota data block 1 [ 520.409164][ T50] EXT4-fs error (device loop4): ext4_release_dquot:7034: comm kworker/u8:3: Failed to release dquot type 0 [ 520.506738][T14759] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 ro. [ 520.560199][T14774] EXT4-fs (loop4): warning: mounting fs with errors, running e2fsck is recommended [ 520.577838][T14774] [EXT4 FS bs=1024, gc=1, bpg=131072, ipg=32, mo=c84ce018, mo2=0000] [ 520.586133][T14774] EXT4-fs error (device loop4): ext4_map_blocks:783: inode #3: block 48: comm syz.4.2249: lblock 0 mapped to illegal pblock 48 (length 1) [ 520.601239][T14774] Quota error (device loop4): v2_read_header: Failed header read: expected=8 got=-117 [ 520.611724][T14774] EXT4-fs (loop4): re-mounted 00000000-0000-0000-0000-000000000000 r/w. [ 520.667870][T12385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 520.697633][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.249953][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.364994][ T52] Bluetooth: hci7: command tx timeout [ 521.456769][T14800] netlink: 2028 bytes leftover after parsing attributes in process `syz.2.2259'. [ 521.516549][T14800] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2259'. [ 521.875528][T14782] loop6: detected capacity change from 0 to 131072 [ 521.945124][T14782] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name [ 521.952744][T14782] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name [ 521.960403][T14782] F2FS-fs (loop6): QUOTA feature is enabled, so ignore qf_name [ 521.972644][T14700] bridge0: port 1(bridge_slave_0) entered blocking state [ 521.980313][T14782] F2FS-fs (loop6): invalid crc value [ 521.997613][T14700] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.006027][T14700] bridge_slave_0: entered allmulticast mode [ 522.015438][T14700] bridge_slave_0: entered promiscuous mode [ 522.106928][T14782] F2FS-fs (loop6): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 522.122336][T14782] F2FS-fs (loop6): Mounted with checkpoint version = 1b41e955 [ 522.188996][T14782] F2FS-fs (loop6): sanity_check_inode: inode (ino=4) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 522.207061][T14782] F2FS-fs (loop6): sanity_check_inode: inode (ino=7) has corrupted i_inline_xattr_size: 0, min: 6, max: 903 [ 522.243826][T14700] bridge0: port 2(bridge_slave_1) entered blocking state [ 522.285579][T14700] bridge0: port 2(bridge_slave_1) entered disabled state [ 522.302922][T14700] bridge_slave_1: entered allmulticast mode [ 522.377345][T14700] bridge_slave_1: entered promiscuous mode [ 522.791318][T14700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 522.899295][T14700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 522.927648][T14830] fuse: Bad value for 'fd' [ 522.962374][T14831] loop6: detected capacity change from 0 to 512 [ 523.009546][T14831] ext4: Bad value for 'barrier' [ 523.132955][ T1102] bridge_slave_1: left allmulticast mode [ 523.147017][ T1102] bridge_slave_1: left promiscuous mode [ 523.164306][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 523.247896][ T1102] bridge_slave_0: left allmulticast mode [ 523.263101][ T1102] bridge_slave_0: left promiscuous mode [ 523.302168][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 523.405049][ T52] Bluetooth: hci7: command tx timeout [ 523.512283][T14842] fuse: Bad value for 'fd' [ 523.753037][T14850] fuse: Bad value for 'fd' [ 524.207181][ T52] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 524.218501][ T52] Bluetooth: hci1: Injecting HCI hardware error event [ 524.227921][ T5839] Bluetooth: hci1: hardware error 0x00 [ 524.534751][T14862] sd 0:0:1:0: PR command failed: 1026 [ 524.577411][T14862] sd 0:0:1:0: Sense Key : Illegal Request [current] [ 524.629503][T14862] sd 0:0:1:0: Add. Sense: Invalid command operation code [ 524.990460][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 525.025661][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 525.050755][ T1102] bond0 (unregistering): Released all slaves [ 525.081648][T14700] team0: Port device team_slave_0 added [ 525.107555][T14700] team0: Port device team_slave_1 added [ 525.191804][T14855] syz_tun (unregistering): left allmulticast mode [ 525.491157][ T52] Bluetooth: hci7: command tx timeout [ 525.937935][ T5912] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 526.221352][ T5912] usb 7-1: Using ep0 maxpacket: 8 [ 526.231910][ T5912] usb 7-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2e.04 [ 526.241179][ T5912] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.365662][ T5839] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 526.460389][T14700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 526.470987][ T5912] usb 7-1: Product: syz [ 526.475254][ T5912] usb 7-1: Manufacturer: syz [ 526.484548][ T5912] usb 7-1: SerialNumber: syz [ 526.485108][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 526.537028][ T5912] usb 7-1: config 0 descriptor?? [ 526.776578][T14700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 526.799727][ T5912] usb 7-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 526.837030][T14700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 527.246427][T14700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 527.300039][T14700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 527.841352][ T1102] hsr_slave_0: left promiscuous mode [ 527.848333][ T1102] hsr_slave_1: left promiscuous mode [ 527.873112][ T5912] dvb_usb_rtl28xxu 7-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 527.884323][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 527.909363][ T5912] usb 7-1: USB disconnect, device number 4 [ 527.948447][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 527.976749][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 527.988533][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.063382][ T1102] veth1_macvtap: left promiscuous mode [ 528.151173][ T1102] veth0_macvtap: left promiscuous mode [ 528.166138][ T1102] veth1_vlan: left promiscuous mode [ 528.177550][ T1102] veth0_vlan: left promiscuous mode [ 528.451329][ T52] Bluetooth: hci5: command 0x0406 tx timeout [ 529.397915][T14928] input: syz1 as /devices/virtual/input/input14 [ 529.577214][T14930] netlink: 'syz.9.2296': attribute type 1 has an invalid length. [ 530.429669][T14935] binder: 14934:14935 ioctl c0306201 200000000100 returned -14 [ 530.877575][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 530.887693][T14947] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2301'. [ 532.000729][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 532.217087][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 533.942550][ T5831] kernel read not supported for file inotify (pid: 5831 comm: kworker/0:3) [ 534.234239][T14930] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 534.272429][T14700] hsr_slave_0: entered promiscuous mode [ 534.391273][T14700] hsr_slave_1: entered promiscuous mode [ 534.421512][T14700] debugfs: 'hsr0' already exists in 'hsr' [ 534.445771][T14700] Cannot create hsr debugfs directory [ 534.474241][T14988] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2314'. [ 535.078465][T15018] loop4: detected capacity change from 0 to 512 [ 535.199414][T15018] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 535.225653][T15018] ext4 filesystem being mounted at /96/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 535.624152][T12385] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 536.231025][T15028] loop9: detected capacity change from 0 to 256 [ 536.333674][T14700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.389496][T14700] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 536.831726][T14700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.874648][T14700] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.193389][T14700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.215134][T14700] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.512406][T15079] input: syz1 as /devices/virtual/input/input15 [ 537.626787][T14700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.688760][T14700] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.768095][T15094] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2345'. [ 537.959261][T15098] batadv_slave_0: entered promiscuous mode [ 538.010420][T15098] macsec1: entered promiscuous mode [ 538.063616][T15098] batadv_slave_0: left promiscuous mode [ 538.736134][ T31] audit: type=1326 audit(1770872305.310:88): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15120 comm="syz.2.2349" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1465b9bf79 code=0x0 [ 538.825784][T14700] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 538.856291][T14700] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 538.924705][T14700] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 538.956469][T14700] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 539.225426][T14700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 539.415430][T14700] 8021q: adding VLAN 0 to HW filter on device team0 [ 539.464197][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.471502][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 539.538882][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 539.546195][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 541.309112][T14700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 541.470385][T14700] veth0_vlan: entered promiscuous mode [ 541.487390][ T31] audit: type=1800 audit(1770872308.060:89): pid=15189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2365" name="file2" dev="overlay" ino=129 res=0 errno=0 [ 541.520634][T14700] veth1_vlan: entered promiscuous mode [ 541.755327][T14700] veth0_macvtap: entered promiscuous mode [ 541.791043][T14700] veth1_macvtap: entered promiscuous mode [ 541.926287][T14700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 542.028446][T14700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 542.723334][ T3570] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.801405][ T3570] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.882392][ T3570] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 542.974650][ T3570] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 543.274223][T15224] loop6: detected capacity change from 0 to 512 [ 543.394860][T15224] EXT4-fs error (device loop6): ext4_quota_enable:7185: comm syz.6.2376: Bad quota inum: 1, type: 2 [ 543.455525][T15224] loop6: lost filesystem error report for type 5 error -117 [ 543.463735][T15224] EXT4-fs warning (device loop6): ext4_enable_quotas:7233: Failed to enable quota tracking (type=2, err=-117, ino=1). Please run e2fsck to fix. [ 543.539369][ T1102] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.551732][T15224] EXT4-fs (loop6): mount failed [ 543.567977][ T1102] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 543.668409][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 543.711826][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 544.271586][T15260] binder: 15256:15260 ioctl c0306201 200000000280 returned -14 [ 544.726013][T15272] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 545.172721][T15272] nbd: socks must be embedded in a SOCK_ITEM attr [ 545.401275][T15280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2389'. [ 545.683652][T15280] nbd: nbd64 already in use [ 545.690997][T15283] xt_hashlimit: size too large, truncated to 1048576 [ 546.476132][ T6947] udevd[6947]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 549.266330][ T5488] lec:lec_start_xmit: lec0:No lecd attached [ 551.748134][T15377] loop6: detected capacity change from 0 to 512 [ 551.855510][T15377] EXT4-fs: Ignoring removed i_version option [ 551.923575][T15377] EXT4-fs: Ignoring removed bh option [ 552.157549][T15377] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 552.294756][T15377] ext4 filesystem being mounted at /28/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 552.815127][T14490] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 553.046216][T15404] loop3: detected capacity change from 0 to 4096 [ 553.137778][T15404] EXT4-fs (loop3): Test dummy encryption mode enabled [ 553.238075][T15404] EXT4-fs (loop3): stripe (97) is not aligned with cluster size (16), stripe is disabled [ 553.666843][T15404] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c01c, mo2=0002] [ 553.675474][T15404] System zones: 0-5 [ 553.683982][T15404] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 554.188615][T14700] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 554.524390][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5260 ms [ 554.533125][ C1] lec:lec_tx_timeout: lec0 [ 554.543826][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 556.099131][T15453] loop9: detected capacity change from 0 to 512 [ 556.232102][T15453] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 556.245133][ T1141] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.358927][T15453] ext4 filesystem being mounted at /178/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 556.406080][ T1141] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.204087][ T1141] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 557.228449][T10776] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 557.729401][ T1141] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 558.175866][ T31] audit: type=1326 audit(1770872324.740:90): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15474 comm="syz.2.2439" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1465b9bf79 code=0x0 [ 558.313761][ T52] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 558.327853][ T52] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 558.342786][ T52] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 558.351075][ T52] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 558.357856][ T1141] bridge_slave_1: left allmulticast mode [ 558.363975][ T1141] bridge_slave_1: left promiscuous mode [ 558.372634][ T52] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 558.446233][ T1141] bridge0: port 2(bridge_slave_1) entered disabled state [ 558.447678][T15484] loop6: detected capacity change from 0 to 512 [ 558.462898][T15484] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 558.548766][ T1141] bridge_slave_0: left allmulticast mode [ 558.570479][T15484] EXT4-fs (loop6): 1 truncate cleaned up [ 558.576404][ T1141] bridge_slave_0: left promiscuous mode [ 558.582338][ T1141] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.586609][T15484] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 559.294879][T14490] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 560.294394][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5750 ms [ 560.302501][ C1] lec:lec_tx_timeout: lec0 [ 560.314395][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 560.452164][ T52] Bluetooth: hci0: command tx timeout [ 560.785003][T15526] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2449'. [ 561.796827][T15552] overlayfs: failed to clone upperpath [ 562.532350][ T52] Bluetooth: hci0: command tx timeout [ 562.930289][ T1141] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 562.977273][ T1141] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 563.026149][ T1141] bond0 (unregistering): Released all slaves [ 563.536512][T15568] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2456'. [ 564.624793][ T52] Bluetooth: hci0: command tx timeout [ 564.770818][T15591] overlayfs: failed to clone lowerpath [ 564.801266][T15591] overlayfs: failed to clone upperpath [ 564.888524][T15582] team0 (unregistering): Failed to send port change of device team_slave_0 via netlink (err -105) [ 564.914161][T15582] team0 (unregistering): Port device team_slave_0 removed [ 564.984994][T15582] team0 (unregistering): Failed to send options change via netlink (err -105) [ 565.009530][T15582] team0 (unregistering): Failed to send port change of device team_slave_1 via netlink (err -105) [ 565.041708][T15582] team0 (unregistering): Port device team_slave_1 removed [ 565.324440][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 565.332509][ C1] lec:lec_tx_timeout: lec0 [ 565.337071][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 565.969993][T15601] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 566.031015][ T1141] hsr_slave_0: left promiscuous mode [ 566.099292][ T1141] hsr_slave_1: left promiscuous mode [ 566.125444][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 566.132862][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 566.219853][ T1141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 566.248366][ T1141] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.684940][ T52] Bluetooth: hci0: command tx timeout [ 566.702290][ T1141] veth1_macvtap: left promiscuous mode [ 566.720566][ T1141] veth0_macvtap: left promiscuous mode [ 566.741108][ T1141] veth1_vlan: left promiscuous mode [ 566.764633][ T1141] veth0_vlan: left promiscuous mode [ 567.345553][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 570.267284][ T1141] team0 (unregistering): Port device team_slave_1 removed [ 570.354419][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 570.362464][ C1] lec:lec_tx_timeout: lec0 [ 570.367330][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 570.420955][ T1141] team0 (unregistering): Port device team_slave_0 removed [ 571.563847][T15601] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.609451][T15659] team0: Port device syz_tun added [ 571.671863][T15601] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 571.718986][T15660] team0: Port device syz_tun removed [ 571.728564][T15660] bond0: (slave team0): Releasing backup interface [ 571.780259][T15660] bridge_slave_0: left allmulticast mode [ 571.791500][T15660] bridge_slave_0: left promiscuous mode [ 571.800309][T15660] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.820170][T15660] bridge_slave_1: left allmulticast mode [ 571.826279][T15660] bridge_slave_1: left promiscuous mode [ 571.832294][T15660] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.855508][T15660] bond0: (slave bond_slave_0): Releasing backup interface [ 571.868396][T15660] bond0: (slave bond_slave_1): Releasing backup interface [ 571.880465][T15660] team0: Port device team_slave_0 removed [ 571.889810][T15660] team0: Port device team_slave_1 removed [ 571.933156][T15660] bond0: (slave wlan1): Releasing backup interface [ 572.248022][T15601] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 572.324079][T15480] chnl_net:caif_netlink_parms(): no params data found [ 572.655876][ T7516] netdevsim netdevsim9 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.705058][ T7516] netdevsim netdevsim9 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.721309][ T7516] netdevsim netdevsim9 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 572.768183][T10413] netdevsim netdevsim9 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 573.165643][T15480] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.172977][T15480] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.383506][T15693] loop9: detected capacity change from 0 to 32768 [ 573.405006][T15480] bridge_slave_0: entered allmulticast mode [ 573.426213][T15480] bridge_slave_0: entered promiscuous mode [ 573.457772][T15480] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.474502][T15480] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.482092][T15693] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2491 (15693) [ 573.502838][T15693] BTRFS info (device loop9): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 573.513542][T15693] BTRFS info (device loop9): using blake2b checksum algorithm [ 573.556817][T15480] bridge_slave_1: entered allmulticast mode [ 573.608238][T15480] bridge_slave_1: entered promiscuous mode [ 573.805388][T15693] BTRFS info (device loop9): enabling ssd optimizations [ 573.812369][T15693] BTRFS info (device loop9): turning on async discard [ 573.819415][T15693] BTRFS info (device loop9): enabling free space tree [ 573.826272][T15693] BTRFS info (device loop9): use zstd compression, level 3 [ 574.073675][T15480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.214614][T15480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 574.296328][T10776] BTRFS info (device loop9): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 574.543374][T15734] loop4: detected capacity change from 0 to 128 [ 574.574280][T15480] team0: Port device team_slave_0 added [ 574.786702][T15734] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 574.811231][T15480] team0: Port device team_slave_1 added [ 574.845244][T15734] ext4 filesystem being mounted at /130/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 575.093810][T15734] fscrypt: AES-128-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 575.297038][T15734] fscrypt: loop4: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 575.322814][ T31] audit: type=1326 audit(1770872341.880:91): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15742 comm="syz.9.2498" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ffa63f9bf79 code=0x0 [ 575.414602][T15480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.427935][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.487093][T12385] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 575.537536][T15480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.597024][T15480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.604088][T15480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 575.688309][T15759] overlayfs: failed to resolve './file0': -2 [ 575.723163][T15480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 576.009891][T15480] hsr_slave_0: entered promiscuous mode [ 576.029809][T15480] hsr_slave_1: entered promiscuous mode [ 576.047599][T15480] debugfs: 'hsr0' already exists in 'hsr' [ 576.055114][T15480] Cannot create hsr debugfs directory [ 576.193235][T15778] overlayfs: failed to clone upperpath [ 576.284389][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5920 ms [ 576.293033][ C1] lec:lec_tx_timeout: lec0 [ 576.298407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 577.026725][T15802] loop4: detected capacity change from 0 to 1024 [ 579.492880][T15835] overlayfs: failed to get inode (-116) [ 579.516451][T15835] overlayfs: failed to look up (file0) for ino (-116) [ 579.932297][T15480] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 580.028085][T15480] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 580.099138][T15480] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 580.198571][T15480] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 580.675618][T15480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 580.808661][T15480] 8021q: adding VLAN 0 to HW filter on device team0 [ 580.885128][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 580.892313][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 580.988207][T10413] bridge0: port 2(bridge_slave_1) entered blocking state [ 580.995446][T10413] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.178432][T15873] overlayfs: failed to clone upperpath [ 581.314757][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 581.322843][ C1] lec:lec_tx_timeout: lec0 [ 581.327678][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 582.024870][T15480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.362791][T15923] overlayfs: failed to clone upperpath [ 584.587538][T15920] vhci_hcd vhci_hcd.0: pdev(9) rhport(0) sockfd(5) [ 584.594086][T15920] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 585.451921][T15920] vhci_hcd vhci_hcd.0: Device attached [ 585.462091][T15929] vhci_hcd: connection closed [ 585.508551][T15936] fuse: Bad value for 'fd' [ 585.510959][T15480] veth0_vlan: entered promiscuous mode [ 585.553098][ T3570] vhci_hcd vhci_hcd.9: stop threads [ 585.591720][T15480] veth1_vlan: entered promiscuous mode [ 585.600567][ T3570] vhci_hcd vhci_hcd.9: release socket [ 585.608683][ T3570] vhci_hcd vhci_hcd.9: disconnect device [ 585.691744][T15480] veth0_macvtap: entered promiscuous mode [ 585.733103][T15480] veth1_macvtap: entered promiscuous mode [ 585.801160][T15480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 585.858420][T15480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 585.885110][T15940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 585.903849][ T3570] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 585.970952][ T3570] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.033653][ T3570] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.087308][ T3570] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 586.334594][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 586.342768][ C1] lec:lec_tx_timeout: lec0 [ 586.347499][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 586.540820][ T1141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 586.612842][ T1141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 586.987821][ T1141] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 587.001333][ T1141] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 589.448257][T16010] netlink: 'syz.6.2561': attribute type 1 has an invalid length. [ 589.746180][T16010] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2561'. [ 589.791741][T15984] loop8: detected capacity change from 0 to 32768 [ 589.896589][T16015] 8021q: adding VLAN 0 to HW filter on device bond2 [ 589.919036][T15984] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop8 (7:8) scanned by syz.8.2435 (15984) [ 589.943189][T16015] bond1: (slave bond2): making interface the new active one [ 589.982655][T15984] BTRFS info (device loop8): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 590.015334][T16015] bond1: (slave bond2): Enslaving as an active interface with an up link [ 590.023903][T15984] BTRFS info (device loop8): using blake2b checksum algorithm [ 590.213194][T16016] bond1: (slave gretap1): Enslaving as a backup interface with an up link [ 590.391390][T16010] 8021q: adding VLAN 0 to HW filter on device bond1 [ 590.505354][T15984] BTRFS info (device loop8): setting nodatasum [ 590.535719][T15984] BTRFS info (device loop8): enabling ssd optimizations [ 590.571610][T15984] BTRFS info (device loop8): turning on async discard [ 590.624807][T15984] BTRFS info (device loop8): enabling free space tree [ 591.040458][T15480] BTRFS info (device loop8): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 591.105926][T16050] overlayfs: failed to clone upperpath [ 592.124379][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5780 ms [ 592.132438][ C1] lec:lec_tx_timeout: lec0 [ 592.137402][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 592.736723][T16071] netlink: 156 bytes leftover after parsing attributes in process `syz.8.2569'. [ 592.831938][T16077] netlink: 28 bytes leftover after parsing attributes in process `syz.9.2574'. [ 594.574797][T16110] syz_tun: entered allmulticast mode [ 594.645114][T16108] syz_tun: left allmulticast mode [ 595.863809][T16122] bridge0: port 2(bridge_slave_1) entered disabled state [ 595.871460][T16122] bridge0: port 1(bridge_slave_0) entered disabled state [ 596.112299][T16139] fuse: Bad value for 'fd' [ 596.411046][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 596.538951][T16122] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 597.164445][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5030 ms [ 597.172579][ C1] lec:lec_tx_timeout: lec0 [ 597.177228][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 597.466057][T16163] loop9: detected capacity change from 0 to 128 [ 597.567143][T16136] syz_tun: entered allmulticast mode [ 597.582998][ T1102] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.619539][ T1102] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.619803][ T31] audit: type=1804 audit(1770872365.191:92): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2599" name="/newroot/204/file0/bus" dev="loop9" ino=1048713 res=1 errno=0 [ 597.714025][ T1102] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.740165][ T31] audit: type=1804 audit(1770872365.231:93): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.9.2599" name="/newroot/204/file0/bus" dev="loop9" ino=1048713 res=1 errno=0 [ 597.789252][ T1102] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 597.863149][ T31] audit: type=1804 audit(1770872365.231:94): pid=16163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.9.2599" name="/newroot/204/file0/bus" dev="loop9" ino=1048713 res=1 errno=0 [ 600.950285][T16189] loop8: detected capacity change from 0 to 8192 [ 600.969521][T16196] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2606'. [ 601.042504][T16189] FAT-fs (loop8): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 601.175119][ T31] audit: type=1800 audit(1770872368.751:95): pid=16189 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.8.2604" name="file2" dev="loop8" ino=1048714 res=0 errno=0 [ 601.235924][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.294463][T16189] FAT-fs (loop8): Filesystem has been set read-only [ 601.306233][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.355716][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.424453][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.574448][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.617562][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.696175][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.804288][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.865986][T16189] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 601.978450][T16200] FAT-fs (loop8): error, fat_get_cluster: invalid cluster chain (i_pos 1046) [ 602.184402][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 602.192430][ C1] lec:lec_tx_timeout: lec0 [ 602.197185][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 604.393613][ T3570] bridge_slave_0: left allmulticast mode [ 604.426790][ T3570] bridge_slave_0: left promiscuous mode [ 604.464031][ T3570] bridge0: port 1(bridge_slave_0) entered disabled state [ 605.176961][T16241] loop4: detected capacity change from 0 to 16 [ 605.905057][T16241] erofs (device loop4): mounted with root inode @ nid 36. [ 606.097006][T16241] overlayfs: failed to clone lowerpath [ 606.614996][T16265] sctp: [Deprecated]: syz.6.2622 (pid 16265) Use of struct sctp_assoc_value in delayed_ack socket option. [ 606.614996][T16265] Use struct sctp_sack_info instead [ 606.910196][T16272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2625'. [ 607.205085][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 607.213103][ C1] lec:lec_tx_timeout: lec0 [ 607.217818][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 608.188745][T16293] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2630'. [ 608.783281][ T3570] dvmrp0 (unregistering): left allmulticast mode [ 610.657568][T16323] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2639'. [ 611.090212][T16326] fuse: Bad value for 'fd' [ 611.432779][ T3570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.541187][ T3570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.638440][ T3570] bond0 (unregistering): Released all slaves [ 611.697451][T16272] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 611.752076][T16322] vlan2: entered promiscuous mode [ 611.814057][T16322] vlan2: entered allmulticast mode [ 611.868421][T16322] hsr_slave_1: entered allmulticast mode [ 612.224440][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 612.232613][ C1] lec:lec_tx_timeout: lec0 [ 612.237358][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 616.196515][ T3570] hsr_slave_0: left promiscuous mode [ 616.280276][ T3570] hsr_slave_1: left promiscuous mode [ 616.340973][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 616.405335][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.460937][ T3570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 616.488531][T16387] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2659'. [ 617.245409][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 617.253411][ C1] lec:lec_tx_timeout: lec0 [ 617.264362][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 617.405037][ T3570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 617.734501][ T3570] veth1_macvtap: left promiscuous mode [ 617.746277][ T3570] veth0_macvtap: left promiscuous mode [ 617.776216][ T3570] veth1_vlan: left promiscuous mode [ 617.781509][ T3570] veth0_vlan: left promiscuous mode [ 619.229399][ T52] Bluetooth: hci2: unexpected event for opcode 0x0c47 [ 619.335992][T16418] loop9: detected capacity change from 0 to 8192 [ 619.522813][ T6947] loop9: p2 < > p3 p4 < > [ 619.636339][ T6947] loop9: partition table partially beyond EOD, truncated [ 619.901263][ T6947] loop9: p2 start 328960 is beyond EOD, truncated [ 619.923362][ T6947] loop9: p3 start 33572980 is beyond EOD, truncated [ 620.058896][T16418] loop9: p2 < > p3 p4 < > [ 620.098670][T16418] loop9: partition table partially beyond EOD, truncated [ 620.100648][T16438] overlayfs: failed to clone upperpath [ 620.140201][T16418] loop9: p2 start 328960 is beyond EOD, truncated [ 620.172294][T16418] loop9: p3 start 33572980 is beyond EOD, truncated [ 621.998097][ T6947] udevd[6947]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 622.116643][ T6947] udevd[6947]: inotify_add_watch(7, /dev/loop9p4, 10) failed: No such file or directory [ 622.274374][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 622.282439][ C1] lec:lec_tx_timeout: lec0 [ 622.287407][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 623.305478][ T52] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 623.329960][ T52] Bluetooth: hci2: Injecting HCI hardware error event [ 623.340569][ T52] Bluetooth: hci2: hardware error 0x00 [ 623.914595][ T3570] team0 (unregistering): Port device team_slave_1 removed [ 625.395284][T16486] loop4: detected capacity change from 0 to 16 [ 625.430571][T16486] erofs (device loop4): bogus i_mode (0) @ nid 3072 [ 625.485704][ T52] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 627.294504][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 627.302674][ C1] lec:lec_tx_timeout: lec0 [ 627.307304][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 627.485382][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880293a9000: rx timeout, send abort [ 627.493940][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880293a9000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 628.596941][T16525] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2699'. [ 628.772896][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.907535][T16525] 8021q: adding VLAN 0 to HW filter on device bond3 [ 628.991358][T16530] macvlan2: entered promiscuous mode [ 629.034442][T16530] macvlan2: entered allmulticast mode [ 629.065020][T16530] bond3: entered promiscuous mode [ 629.098282][T16530] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 629.184911][T16530] bond3: left promiscuous mode [ 629.338901][T16547] netlink: 1335 bytes leftover after parsing attributes in process `syz.2.2706'. [ 630.844578][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 631.161144][T16600] sctp: [Deprecated]: syz.0.2723 (pid 16600) Use of struct sctp_assoc_value in delayed_ack socket option. [ 631.161144][T16600] Use struct sctp_sack_info instead [ 632.324421][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5020 ms [ 632.332495][ C1] lec:lec_tx_timeout: lec0 [ 632.337082][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 633.621110][T16638] loop4: detected capacity change from 0 to 256 [ 633.717857][T16638] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xbc8dc3cd, utbl_chksum : 0xe619d30d) [ 635.078158][T16671] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2742'. [ 636.444600][ T32] INFO: task syz-executor:12523 blocked for more than 143 seconds. [ 636.994518][ T32] Tainted: G L syzkaller #0 [ 637.039409][ T32] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 637.081513][ T32] task:syz-executor state:D stack:22040 pid:12523 tgid:12523 ppid:1 task_flags:0x400140 flags:0x00080002 [ 637.115602][ T32] Call Trace: [ 637.135154][ T32] [ 637.141569][ T32] __schedule+0x1568/0x5290 [ 637.154450][ T32] ? __lock_acquire+0x146e/0x2cf0 [ 637.170508][ T32] ? __pfx___schedule+0x10/0x10 [ 637.192737][ T32] ? schedule+0x90/0x360 [ 637.211759][ T32] schedule+0x164/0x360 [ 637.222843][ T32] io_schedule+0x7f/0xd0 [ 637.233938][ T32] folio_wait_bit_common+0x6d8/0xbc0 [ 637.276688][ T32] ? __pfx_folio_wait_bit_common+0x10/0x10 [ 637.309701][ T32] ? __pfx_wake_page_function+0x10/0x10 [ 637.334848][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.344386][ C1] lec0: NETDEV WATCHDOG: CPU: 1: transmit queue 0 timed out 5010 ms [ 637.352428][ C1] lec:lec_tx_timeout: lec0 [ 637.357118][ C1] lec:lec_start_xmit: lec0:No lecd attached [ 637.364893][ T32] ? __filemap_get_folio_mpol+0x81/0xb00 [ 637.394904][ T32] __filemap_get_folio_mpol+0x13e/0xb00 [ 637.446466][ T32] truncate_inode_pages_range+0x48b/0xe30 [ 637.471182][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.496525][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.517993][ T32] ? stack_depot_save_flags+0x33/0x810 [ 637.538277][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.554475][ T32] ? __pfx_truncate_inode_pages_range+0x10/0x10 [ 637.575418][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.590110][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.606833][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.630420][ T32] ? lockdep_hardirqs_on+0x7a/0x110 [ 637.644549][ T32] evict+0x631/0xb10 [ 637.660831][ T32] ? __pfx_evict+0x10/0x10 [ 637.679008][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.702944][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 637.729870][ T32] evict_inodes+0x75a/0x7f0 [ 637.758968][ T32] ? __pfx_evict_inodes+0x10/0x10 [ 637.828026][ T32] generic_shutdown_super+0xa2/0x2d0 [ 637.851899][ T32] kill_block_super+0x44/0x90 [ 637.884858][ T32] deactivate_locked_super+0xbc/0x130 [ 637.910306][ T32] cleanup_mnt+0x437/0x4d0 [ 637.935229][ T32] ? _raw_spin_unlock_irq+0x23/0x50 [ 637.965699][ T32] task_work_run+0x1d9/0x270 [ 637.980690][ T32] ? __pfx_task_work_run+0x10/0x10 [ 638.009773][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.022159][ T32] exit_to_user_mode_loop+0xed/0x480 [ 638.057209][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.076695][ T32] ? rcu_is_watching+0x15/0xb0 [ 638.097262][ T32] do_syscall_64+0x32d/0xf80 [ 638.115399][ T32] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.140211][ T32] ? trace_irq_disable+0x37/0x100 [ 638.157811][ T32] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.173795][ T32] RIP: 0033:0x7f178619d1d7 [ 638.183987][ T32] RSP: 002b:00007ffea7d6c028 EFLAGS: 00000246 ORIG_RAX: 00000000000000a6 [ 638.212203][ T32] RAX: 0000000000000000 RBX: 00007f1786231c3b RCX: 00007f178619d1d7 [ 638.231535][ T32] RDX: 0000000000000000 RSI: 0000000000000009 RDI: 00007ffea7d6c0e0 [ 638.242716][ T32] RBP: 00007ffea7d6c0e0 R08: 00007ffea7d6d0e0 R09: 00000000ffffffff [ 638.264630][ T32] R10: 0000000000000000 R11: 0000000000000246 R12: 00007ffea7d6d170 [ 638.308344][ T32] R13: 00007f1786231c3b R14: 0000000000077e8b R15: 00007ffea7d6d1b0 [ 638.349225][ T32] [ 638.359162][ T32] [ 638.359162][ T32] Showing all locks held in the system: [ 638.462199][ T32] 1 lock held by khungtaskd/32: [ 638.482531][ T32] #0: ffffffff8e75e0a0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 638.505572][ T32] 2 locks held by kworker/u8:5/1102: [ 638.511672][ T32] #0: ffff88801cbf5148 ((wq_completion)iou_exit){+.+.}-{0:0}, at: process_scheduled_works+0x9d4/0x17a0 [ 638.548647][ T32] #1: ffff8880b8624588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 638.574548][ T32] 2 locks held by getty/12379: [ 638.582762][ T32] #0: ffff8880369300a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 638.604519][ T32] #1: ffffc9001e6ad2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13c0 [ 638.633129][ T32] 1 lock held by syz-executor/12523: [ 638.640045][ T32] #0: ffff88802b25a0e0 (&type->s_umount_key#71){+.+.}-{4:4}, at: deactivate_super+0xa9/0xe0 [ 638.651846][ T32] 2 locks held by dhcpcd-run-hook/16699: [ 638.658919][ T32] #0: ffff8880b863abe0 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0xb6/0x150 [ 638.669386][ T32] #1: ffff8880b8724588 (psi_seq){-.-.}-{0:0}, at: psi_task_switch+0x53/0x880 [ 638.678957][ T32] 1 lock held by sed/16706: [ 638.683577][ T32] [ 638.690173][ T32] ============================================= [ 638.690173][ T32] [ 638.698881][ T32] NMI backtrace for cpu 0 [ 638.698903][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 638.698937][ T32] Tainted: [L]=SOFTLOCKUP [ 638.698947][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 638.698963][ T32] Call Trace: [ 638.698972][ T32] [ 638.698982][ T32] dump_stack_lvl+0xe8/0x150 [ 638.699021][ T32] nmi_cpu_backtrace+0x274/0x2d0 [ 638.699061][ T32] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 638.699094][ T32] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 638.699130][ T32] sys_info+0x135/0x170 [ 638.699156][ T32] watchdog+0xf90/0xfe0 [ 638.699195][ T32] ? watchdog+0x209/0xfe0 [ 638.699237][ T32] kthread+0x388/0x470 [ 638.699275][ T32] ? __pfx_watchdog+0x10/0x10 [ 638.699305][ T32] ? __pfx_kthread+0x10/0x10 [ 638.699344][ T32] ret_from_fork+0x51e/0xb90 [ 638.699378][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 638.699406][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.699436][ T32] ? __switch_to+0xc7d/0x1400 [ 638.699466][ T32] ? __pfx_kthread+0x10/0x10 [ 638.699504][ T32] ret_from_fork_asm+0x1a/0x30 [ 638.699560][ T32] [ 638.699569][ T32] Sending NMI from CPU 0 to CPUs 1: [ 638.828499][ C1] NMI backtrace for cpu 1 [ 638.828520][ C1] CPU: 1 UID: 0 PID: 16709 Comm: sed Tainted: G L syzkaller #0 PREEMPT(full) [ 638.828550][ C1] Tainted: [L]=SOFTLOCKUP [ 638.828558][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 638.828572][ C1] RIP: 0010:kasan_check_range+0x7/0x2c0 [ 638.828610][ C1] Code: c6 95 c1 14 8e e8 69 aa fa fe 90 0f 0b cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 0f 1f 40 d6 55 41 57 <41> 56 41 55 41 54 53 b0 01 48 85 f6 0f 84 ae 01 00 00 4c 8d 04 37 [ 638.828630][ C1] RSP: 0018:ffffc900153776e0 EFLAGS: 00000246 [ 638.828649][ C1] RAX: ffffc90015377c20 RBX: 0000000000000010 RCX: ffffffff8175c07e [ 638.828665][ C1] RDX: 0000000000000001 RSI: 0000000000000010 RDI: ffffc90015377838 [ 638.828684][ C1] RBP: 0000000000000000 R08: 0000000000000012 R09: ffffffff8e75e0a0 [ 638.828698][ C1] R10: dffffc0000000000 R11: ffffffff81af97d0 R12: ffffc90015377838 [ 638.828715][ C1] R13: 1ffff92002a6eeff R14: ffffc90015377838 R15: ffffc90015377830 [ 638.828734][ C1] FS: 00007f6dcfaffc80(0000) GS:ffff8881255bc000(0000) knlGS:0000000000000000 [ 638.828753][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 638.828776][ C1] CR2: 0000558d864ec008 CR3: 0000000046b83000 CR4: 0000000000350ef0 [ 638.828794][ C1] Call Trace: [ 638.828802][ C1] [ 638.828811][ C1] __asan_memset+0x22/0x50 [ 638.828839][ C1] unwind_next_frame+0xeae/0x23c0 [ 638.828876][ C1] ? unwind_next_frame+0xa5/0x23c0 [ 638.828906][ C1] ? single_release+0x86/0xa0 [ 638.828943][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 638.828978][ C1] arch_stack_walk+0x11b/0x150 [ 638.829013][ C1] ? close_pdeo+0x212/0x3f0 [ 638.829049][ C1] stack_trace_save+0xa9/0x100 [ 638.829083][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 638.829114][ C1] ? kasan_save_track+0x4f/0x80 [ 638.829144][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.829172][ C1] ? stack_depot_save_flags+0x33/0x810 [ 638.829208][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.829234][ C1] ? __lock_acquire+0x6b5/0x2cf0 [ 638.829263][ C1] kasan_save_track+0x3e/0x80 [ 638.829291][ C1] ? kasan_save_track+0x3e/0x80 [ 638.829321][ C1] ? kasan_save_free_info+0x46/0x50 [ 638.829343][ C1] ? __kasan_slab_free+0x5c/0x80 [ 638.829372][ C1] ? kmem_cache_free+0x180/0x610 [ 638.829402][ C1] ? single_release+0x86/0xa0 [ 638.829465][ C1] ? kasan_quarantine_put+0xbb/0x1f0 [ 638.829493][ C1] ? single_release+0x86/0xa0 [ 638.829525][ C1] kasan_save_free_info+0x46/0x50 [ 638.829548][ C1] __kasan_slab_free+0x5c/0x80 [ 638.829580][ C1] kmem_cache_free+0x180/0x610 [ 638.829610][ C1] ? single_release+0x77/0xa0 [ 638.829646][ C1] single_release+0x86/0xa0 [ 638.829678][ C1] ? __pfx_single_release+0x10/0x10 [ 638.829710][ C1] close_pdeo+0x212/0x3f0 [ 638.829745][ C1] ? __pfx_close_pdeo+0x10/0x10 [ 638.829788][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.829814][ C1] ? do_raw_spin_lock+0x12b/0x2f0 [ 638.829850][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 638.829881][ C1] ? locks_remove_posix+0x14f/0x690 [ 638.829920][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.829948][ C1] ? __pfx_proc_reg_release+0x10/0x10 [ 638.829985][ C1] proc_reg_release+0x14e/0x190 [ 638.830023][ C1] ? __pfx_proc_reg_release+0x10/0x10 [ 638.830058][ C1] __fput+0x44f/0xa70 [ 638.830087][ C1] fput_close_sync+0x11f/0x240 [ 638.830110][ C1] ? __pfx_fput_close_sync+0x10/0x10 [ 638.830134][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.830163][ C1] ? srso_alias_return_thunk+0x5/0xfbef5 [ 638.830193][ C1] __x64_sys_close+0x7e/0x110 [ 638.830218][ C1] do_syscall_64+0x14d/0xf80 [ 638.830254][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.830276][ C1] ? trace_irq_disable+0x37/0x100 [ 638.830308][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 638.830330][ C1] RIP: 0033:0x7f6dcfcbda67 [ 638.830349][ C1] Code: 44 00 00 48 83 ec 10 48 63 ff 45 31 c9 45 31 c0 6a 01 31 c9 e8 ca 19 f9 ff 48 83 c4 18 c3 0f 1f 44 00 00 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 01 c3 48 8b 15 61 b3 0d 00 f7 d8 64 89 02 b8 [ 638.830368][ C1] RSP: 002b:00007fff2ce15438 EFLAGS: 00000297 ORIG_RAX: 0000000000000003 [ 638.830389][ C1] RAX: ffffffffffffffda RBX: 0000558d864ec2a0 RCX: 00007f6dcfcbda67 [ 638.830405][ C1] RDX: 00007f6dcfd97ea0 RSI: 0000000000000000 RDI: 0000000000000003 [ 638.830419][ C1] RBP: 00007f6dcfd97ff0 R08: 0000000000000080 R09: 0000000000000000 [ 638.830433][ C1] R10: 0000000000000000 R11: 0000000000000297 R12: 0000000000000000 [ 638.830447][ C1] R13: 00007fff2ce15490 R14: 00007f6dcfb942f4 R15: 0000000000000000 [ 638.830474][ C1] [ 639.299237][ T32] Kernel panic - not syncing: hung_task: blocked tasks [ 639.306102][ T32] CPU: 0 UID: 0 PID: 32 Comm: khungtaskd Tainted: G L syzkaller #0 PREEMPT(full) [ 639.316791][ T32] Tainted: [L]=SOFTLOCKUP [ 639.321204][ T32] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/24/2026 [ 639.331261][ T32] Call Trace: [ 639.334543][ T32] [ 639.337477][ T32] vpanic+0x1e0/0x670 [ 639.341485][ T32] panic+0xc5/0xd0 [ 639.345232][ T32] ? __pfx_panic+0x10/0x10 [ 639.349666][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.355308][ T32] ? preempt_schedule_thunk+0x16/0x30 [ 639.360694][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.366341][ T32] ? nmi_trigger_cpumask_backtrace+0x2bb/0x300 [ 639.372520][ T32] watchdog+0xfda/0xfe0 [ 639.376700][ T32] ? watchdog+0x209/0xfe0 [ 639.381056][ T32] kthread+0x388/0x470 [ 639.385144][ T32] ? __pfx_watchdog+0x10/0x10 [ 639.389840][ T32] ? __pfx_kthread+0x10/0x10 [ 639.394453][ T32] ret_from_fork+0x51e/0xb90 [ 639.399064][ T32] ? __pfx_ret_from_fork+0x10/0x10 [ 639.404183][ T32] ? srso_alias_return_thunk+0x5/0xfbef5 [ 639.409828][ T32] ? __switch_to+0xc7d/0x1400 [ 639.414516][ T32] ? __pfx_kthread+0x10/0x10 [ 639.419110][ T32] ret_from_fork_asm+0x1a/0x30 [ 639.423897][ T32] [ 639.427187][ T32] Kernel Offset: disabled [ 639.431511][ T32] Rebooting in 86400 seconds..