last executing test programs: 14m4.431830024s ago: executing program 2 (id=686): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, 0x0) userfaultfd(0x80001) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) r2 = openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) read$dsp(r2, &(0x7f00000002c0)=""/4096, 0x1000) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) pselect6(0x40, &(0x7f0000000240)={0x0, 0x0, 0x1ff, 0x7d, 0x0, 0x8000, 0x4, 0x1}, 0x0, &(0x7f00000002c0)={0x3ff, 0x6, 0xffffffffffffffff, 0x9, 0x0, 0xf, 0x80000006}, 0x0, 0x0) openat$sysfs(0xffffff9c, &(0x7f0000000040)='/sys/kernel/address_bits', 0x482000, 0x0) setsockopt$MRT_ADD_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd2, &(0x7f0000000000)={@remote, @multicast1, 0x4, "d30f388c52647612d91de4353d68b0fa00", 0x0, 0x0, 0x4000000, 0xc}, 0x3c) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) 14m3.15337314s ago: executing program 2 (id=688): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c4159b364a4fd7013f34db173a4fdacf15229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be867a28f09c5877fc2355ecdc9c30dcb2d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff3a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb357b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50265a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000001040), &(0x7f00000010c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x6000003, 0x42031, 0xffffffffffffffff, 0x0) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x600, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r3, 0x40045532, &(0x7f0000000040)=0x7) openat$audio(0xffffffffffffff9c, &(0x7f0000000140), 0x40000000040301, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f00000001c0), 0x0, 0xa2c65) ioctl$SNDRV_PCM_IOCTL_CHANNEL_INFO(r4, 0x80184132, &(0x7f0000000080)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYBLOB="0000000002000000b705000008000000850000000600000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x1002, &(0x7f00000014c0)=""/4098, 0x41000}, 0x94) r5 = syz_open_dev$tty1(0xc, 0x4, 0x3) r6 = dup(r5) write$UHID_INPUT(r6, &(0x7f0000000000)={0xc, {"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", 0x1000}}, 0x1006) mremap(&(0x7f0000000000/0x9000)=nil, 0x600000, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 14m1.514856004s ago: executing program 2 (id=691): openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) msgrcv(0x0, 0x0, 0x0, 0x0, 0xa1e3a9fe3eb9c551) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) ioctl$KVM_SET_USER_MEMORY_REGION(0xffffffffffffffff, 0x4020ae46, &(0x7f0000000080)={0x1fd, 0x0, 0xdddd1000, 0x1000, &(0x7f0000394000/0x1000)=nil}) r1 = openat$adsp1(0xffffffffffffff9c, &(0x7f0000000040), 0xa0301, 0x0) ioctl$SNDCTL_DSP_SETFRAGMENT(r1, 0xc004500a, &(0x7f0000001340)) ioctl$SNDCTL_DSP_CHANNELS(r1, 0xc0045006, &(0x7f0000000180)=0x6f) openat$dsp1(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$dsp(r1, &(0x7f00000012c0)="a52876830a602214f6b4e928d758f38a5a7cb4b31c4c09289e9ebb6286784ca3", 0x4000) 13m59.611903932s ago: executing program 2 (id=700): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000340)='./file1\x00', 0x210000, &(0x7f0000002f40)={[{@nodelalloc}, {@dioread_lock}, {@barrier_val={'barrier', 0x3d, 0x4}}, {@nolazytime}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x80}}, {@lazytime}, {@errors_remount}, {@stripe={'stripe', 0x3d, 0x10}}, {@bh}, {@init_itable}]}, 0xfc, 0x56f, &(0x7f0000003780)="$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") link(&(0x7f0000000200)='./file1\x00', &(0x7f0000000300)='./bus\x00') unlink(&(0x7f0000000240)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000200)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file0'}}]}) chdir(&(0x7f0000000240)='./file0\x00') rename(&(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='./file1\x00') 13m58.769864711s ago: executing program 2 (id=703): syz_mount_image$hfs(&(0x7f0000002c80), &(0x7f00000000c0)='./file1\x00', 0x4490, &(0x7f0000002cc0)=ANY=[], 0xfd, 0x297, &(0x7f0000000480)="$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") openat$fuse(0xffffffffffffff9c, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = openat(0xffffffffffffff9c, &(0x7f0000004900)='./file1\x00', 0x4042, 0xf9) writev(r3, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x64000}], 0x1) 13m57.638080149s ago: executing program 2 (id=707): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 13m56.852473901s ago: executing program 32 (id=707): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001680)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040850) sendmsg$NFT_BATCH(r1, 0x0, 0x24000840) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004f40)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_META_SREG={0x8, 0x3, 0x1, 0x0, 0x15}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x94}}, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x20004002, &(0x7f0000b63fe4)={0xa, 0x2, 0x80000000}, 0x1c) 4m18.813497528s ago: executing program 1 (id=1981): syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x2002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x6) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r3}, 0x18) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(r5, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000010c0)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x84, &(0x7f0000000180)={r6, @in={{0x2, 0x4e20, @empty}}, 0x7, 0x4002}, 0x90) syz_mount_image$minix(&(0x7f0000000540), &(0x7f0000000040)='./file2\x00', 0x1200808, &(0x7f0000000100)=ANY=[], 0x1, 0x1e6, &(0x7f0000000140)="$eJzs20tu00Acx/HfJGkSQ4HyXCCkILGADUmaikqsWs7BqmrTqsIFhNkkQsJcAM7AObgMB4AFO1YY+ZGm9aM1E9y0zfez8Xh+/dvjuu6MolgAFtamHsrIqBnuPGivfLltStU1qx4YgMoFyfZPYMOxqgJwXtR/p3uSFYA/n/EAOCs/X0jfJf349WFb9eyqPsz9SV5rZfNP0v1Gkpu2nPT64qv0eFJvrmTrG/E2zq/mHv/Jo8n5l3VN13VDK7qpW8aXifKdw/p7VmsgAAAWjVH3tLwr1QvSePLOrgqmlrT7LTurTzW1u+8OB6fka4V5K8q722/cnRPOAiBPrdTzX6wePX/9gnRJivLVZL9tO0wAFfBG45Zcd/jOG4WTfNQYv9py/6nhWFWVaZjKjpzfaKZ6go+SDns2bY8c6FiPc/T33PE6sw/exJ/SKB05ZcpryoteWgxjIxuFU8BsN8X4VuXLn5V7XbM1NlTqhzs598K60TqjP/7jjXn/ZwJQtd77g7c9bzR+un+wtTfcG74e9PvP15+tra4PetHKvnfS+h7ARTad9HXk20AAAAAAAAAAAAAAAOAiuaO74Sb92i4AAACAS+i/vTPUUOHrVvO+RgAAAAAAAAAAAAAAAAAALpu/AQAA///U5AZL") 4m12.327090386s ago: executing program 1 (id=1988): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 4m9.738888017s ago: executing program 1 (id=1992): syz_pidfd_open(0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_mount_image$iso9660(&(0x7f0000000380), &(0x7f00000000c0)='./file0\x00', 0x204818, &(0x7f0000000000)={[{@map_off}, {@check_strict}, {@cruft}, {@dmode={'dmode', 0x3d, 0x4}}, {@unhide}, {@iocharset={'iocharset', 0x3d, 'macgreek'}}, {@iocharset={'iocharset', 0x3d, 'cp950'}}, {@unhide}]}, 0xff, 0x544, &(0x7f0000001000)="$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") openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) gettid() prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x89}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() syz_mount_image$jfs(&(0x7f0000000000), &(0x7f0000000080)='./file0\x00', 0x4000, &(0x7f0000001e40)=ANY=[], 0xff, 0x5eaf, &(0x7f000000bc00)="$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") ioctl$FS_IOC_REMOVE_ENCRYPTION_KEY(0xffffffffffffffff, 0xc0185879, 0x0) syz_mount_image$ocfs2(&(0x7f0000004440), &(0x7f0000000040)='./file1\x00', 0x8c0, &(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x1, 0x442d, &(0x7f0000004480)="$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") open(&(0x7f0000000240)='./file1\x00', 0x145142, 0x141) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000002480)=[{0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, &(0x7f0000000040)}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, 0x0, 0x4444) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, &(0x7f0000000500)={0x0, 0x0}) openat(0xffffffffffffff9c, &(0x7f0000000200)='./bus\x00', 0x40942, 0x0) open(&(0x7f0000000080)='./bus\x00', 0x185102, 0x0) 4m4.826315205s ago: executing program 1 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = syz_open_dev$tty1(0xc, 0x4, 0x1) r4 = dup(r3) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x4e24, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) io_uring_setup(0x9, &(0x7f0000000040)={0x0, 0x20c8a1, 0x0, 0x8, 0x3b0, 0x0, r4}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000140)={'syztnl2\x00', &(0x7f0000000000)={'syztnl2\x00', 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x28}, @local, 0x80, 0x0, 0x0, 0x20000000}}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) r7 = syz_open_dev$usbfs(&(0x7f0000000000), 0x20000007d, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(0xffffffffffffffff, 0x0, 0x0) r8 = dup3(r6, r7, 0x0) syz_clone(0x81400, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$MON_IOCG_STATS(r8, 0xc0109207, &(0x7f00000001c0)) rt_sigqueueinfo(0x0, 0x38, &(0x7f0000000240)={0x20, 0x523}) write(r5, &(0x7f0000000300)="89ba41c97928dec7cec15a160d3dba2553b519a795020072aed129d4b5247c983455b3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba20d03474a4a4bce636ea8d2b882b2b49ef18e2a96e41f206d930eda2769c5ee6d5e3d541ce9a21c3ce5cb5fbdad9a45de0000000000000000000000000000f1d3b9821c18a6e3cdb8049d6d6f6d6bd5703a6b9027389878bc35558e24327ddff789162ead569e86246e6701d4251b8106e6ef6f52f2a2265382e5d8e02ed655e4a203362da68db5b0e884220ded5b2319fbd52ccc905fd9a6f60ac4268a1aac02d80104ba6b72b925cc1c1deaa8db25763ed5e6a80d26d124f1ea56136d9bed1ebf52a7ae435c75c4739afa46fcc6a41648be0a4c6efc", 0x112) ioctl$TIOCL_SETSEL(r4, 0x541c, 0x0) 4m0.881754969s ago: executing program 1 (id=2002): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef23d430f6296b32a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ece1ccb0cd2b6d3cffd962867a3a2f624f992daa94a0c556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff730d00000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409eaa988dbc2fee9d313d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7a36b26a4e70f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf37704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eede0068ca1457870eb30d211e23ccc8e06dddeb61799257ab5000013c86ba9affb12ec757c7234c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad0e0e2b45d14ee446b840edaa1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff75067d2a214f8c9d9b2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c50ce6a8e9f65de13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae20bf279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522f7dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87915ed063f608dddb03a95b51cb6febd5f24a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be42827dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2ddf4c4d26f1cdd8c3c9736cf5e5082de3b484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b0033f8dfe0fd9bb2a70801f763524e1d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cfcb9066668627820d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67736ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e942e35c4baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000c3d51d9a161446b4373e06a9e07f8a000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b5b1dfa9fd31df213c88b4047979379dc15c9056fd3baa8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221f05e6ca8c705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6a"], 0x0}, 0x94) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000040)={r6, r5}) write$binfmt_script(r4, &(0x7f0000000500)={'#! ', './file0'}, 0xb) 3m59.091211087s ago: executing program 1 (id=2004): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x22020600) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 3m41.303325249s ago: executing program 33 (id=2004): openat$uinput(0xffffffffffffff9c, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x3, 0x80000000101008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) r0 = syz_open_dev$MSR(&(0x7f0000000200), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) unshare(0x22020600) syz_clone3(&(0x7f00000005c0)={0x8000000, 0x0, 0x0, 0x0, {0x1e}, 0x0, 0x0, 0x0, &(0x7f0000000580)=[0x0], 0x1}, 0x58) 3m24.62766249s ago: executing program 0 (id=2047): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e22}, 0x1c) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = shmget$private(0x0, 0x8000, 0x10, &(0x7f0000ff5000/0x8000)=nil) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, 0x0, &(0x7f0000000080)) shmctl$IPC_SET(r2, 0x1, &(0x7f00000000c0)={{0x2, 0x0, 0xee01, 0xee01, 0x0, 0x6a, 0x5}, 0x860, 0x5, 0x9, 0x3, 0x0, 0xffffffffffffffff, 0x8001}) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendfile(0xffffffffffffffff, r5, 0x0, 0x3a) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) ioctl$int_in(r6, 0x5452, &(0x7f0000000040)=0x7fff) sendto$inet6(r6, &(0x7f00000000c0)="e9", 0x1, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) shutdown(r6, 0x1) 3m24.149814231s ago: executing program 0 (id=2050): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, 0x0, 0x0, 0x0) r2 = userfaultfd(0x80801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x54d}) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000200)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) mremap(&(0x7f00003cd000/0x4000)=nil, 0x4000, 0x2000, 0x3, &(0x7f0000c9a000/0x2000)=nil) close_range(r2, 0xffffffffffffffff, 0x0) 3m19.760397601s ago: executing program 0 (id=2055): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="68000000100001002fbd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB], 0x68}, 0x1, 0x0, 0x0, 0x20008080}, 0x24040800) 3m17.863930484s ago: executing program 0 (id=2058): pipe2(&(0x7f00000000c0), 0x80000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) syz_open_dev$usbfs(0x0, 0x76, 0x101301) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r3}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000580)) openat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x101142, 0x56633bd1cf1d94b2) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) syz_mount_image$fuse(0x0, &(0x7f0000001040)='./file2\x00', 0x0, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000000), 0x0, &(0x7f00000000c0)={[{@workdir={'workdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@upperdir={'upperdir', 0x3d, './file2'}}], [], 0x2c}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000004280)='./file0\x00', 0x0, 0x0) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x8800, 0x8) syz_mount_image$fuse(0x0, &(0x7f0000000580)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, 0x0, 0x0, 0x0, 0x0) renameat2(r4, &(0x7f0000000380)='./file1aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', r5, &(0x7f0000000040)='./file1\x00', 0x2) 3m15.363634003s ago: executing program 0 (id=2061): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000300), 0x20502, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000000c0), 0x4) r5 = socket$kcm(0x29, 0x2, 0x0) r6 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r6, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) sendmsg$inet(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{0x0}], 0x1}, 0x20000000) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000040)={r6}) 3m13.804071022s ago: executing program 0 (id=2063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r2, &(0x7f0000000000)="2000000012005f0214f9f4070000fbe40a0723e8f000000000002ba55ab3d9a4", 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0, 0x0, 0x803}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000001480)="76bfec8a4de7a2b2", 0x8}], 0x2}}], 0x1, 0x20004804) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) preadv(r8, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) tkill(r7, 0xb) close_range(r3, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xcc, 0x10, 0x509, 0x0, 0x0, "", [@generic, @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2828290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f9"}]}]}, 0xcc}], 0x1}, 0x40040) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) 2m57.898613284s ago: executing program 34 (id=2063): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xc, &(0x7f0000000080), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x20000845, &(0x7f0000000100)={0xa, 0x4001, 0xfffe, @loopback, 0x4}, 0x1c) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0xffe}, 0x10) write(r2, &(0x7f0000000000)="2000000012005f0214f9f4070000fbe40a0723e8f000000000002ba55ab3d9a4", 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={0x0, r0, 0x0, 0x803}, 0x18) madvise(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x19) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$inet_icmp(0x2, 0x2, 0x1) sendmmsg$inet(r5, &(0x7f0000000c40)=[{{0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f0000001480)="76bfec8a4de7a2b2", 0x8}], 0x2}}], 0x1, 0x20004804) sendmsg$IEEE802154_LLSEC_LIST_KEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)={0x14, r4, 0x200, 0x70bd27, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x10014}, 0x4008008) r6 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r7 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r6, 0x6, 0x0, 0x0, 0x0) r8 = openat$comedi(0xffffffffffffff9c, &(0x7f0000000080)='/dev/comedi4\x00', 0x400, 0x0) ioctl$COMEDI_DEVCONFIG(r8, 0x40946400, 0x0) preadv(r8, &(0x7f0000001cc0)=[{&(0x7f0000000200)=""/126, 0x7e}], 0x1, 0x0, 0xa3) tkill(r7, 0xb) close_range(r3, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) r9 = socket$inet6(0xa, 0x80001, 0x0) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f00000005c0)={0xcc, 0x10, 0x509, 0x0, 0x0, "", [@generic, @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce28715f2828290a9423debbb86f292c4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x10, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @binary="c606f93f6b8199f9"}]}]}, 0xcc}], 0x1}, 0x40040) setsockopt$inet6_MCAST_JOIN_GROUP(r9, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r9, 0x29, 0x30, &(0x7f00000005c0)={0x1, {{0xa, 0x4e20, 0x0, @mcast1}}, 0x1}, 0x90) 6.65142395s ago: executing program 5 (id=2559): r0 = getpgid(0x0) r1 = syz_pidfd_open(r0, 0x0) pidfd_getfd(r1, r1, 0x0) sched_setscheduler(0x0, 0x2, 0x0) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1c, 0x4, 0x8, 0x7ff}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1, 0x4000000, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x0, 0x10000000, 0x0, 0x4}, 0x3, r6}}]}, {0x4, 0xa}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}}, 0x0) 3.986510311s ago: executing program 6 (id=2571): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000340)={0x1, 0x1, 0x3, "556b46b605f24761c18dbdeb2be58dd92c12c54e822c4df4b4f12efe7128267c", 0x2036315a}) 3.83999574s ago: executing program 6 (id=2573): openat$vmci(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, &(0x7f0000000940)={0x24, 0x0, 0x0, &(0x7f0000000040)=ANY=[], 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r2 = syz_open_dev$vim2m(&(0x7f0000000000), 0x80000000, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x27, 0x2, 0x3, "1bd9b8c535b560c5b0fedaffb7d7e75f9637fa1e632e18f548df557c7d646dc5", 0x36355d63}) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, 0x0, &(0x7f0000000240), 0xfff}, 0x38) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000280)={'team_slave_1\x00', &(0x7f0000000040)=@ethtool_cmd={0x2, 0x6, 0x10, 0x3, 0xe8, 0x3, 0x0, 0x6, 0x1, 0x2, 0xfffffffd, 0x0, 0x200, 0xb, 0x47, 0x3, [0x100, 0xfffffff9]}}) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x88) write$cgroup_subtree(0xffffffffffffffff, &(0x7f00000000c0)={[{0x811e5d1cdd106d0d, 'net_prio'}]}, 0xa) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'lo\x00'}) 3.127286021s ago: executing program 3 (id=2578): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x0, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2350, 0xb8fa, 0xd7, 0x1, 0xffff, 0x7}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 2.980067869s ago: executing program 5 (id=2579): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xaf1}, 0x8) bind$inet6(r0, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x2}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet6(r0, &(0x7f0000003e40)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000440)="736b01", 0x3}], 0x1, &(0x7f0000000b80)=[@dstopts_2292={{0x30, 0x29, 0x4, {0x2b, 0x2, '\x00', [@ra={0x5, 0x2, 0x40}, @hao={0xc9, 0x10, @mcast2}]}}}], 0x30}}], 0x1, 0x10) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r0, 0x84, 0x78, &(0x7f0000000240), 0x4) 2.979803069s ago: executing program 4 (id=2580): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x1}, 0x1c) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r1, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r2, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r3, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f00000000c0)={0xa, 0x4e20, 0x0, @mcast1, 0x5}, 0x1c) r5 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r5, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0xe20, 0x0, @empty}, 0x1c) r7 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r7, 0x1, 0xf, &(0x7f0000000080)=0x5, 0x4) bind$inet6(r7, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) bind$inet6(0xffffffffffffffff, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast2, 0x2}, 0x1c) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r9, 0x1, 0xf, &(0x7f0000f59ffc)=0x4, 0x4) bind$inet6(r9, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1, 0x2}, 0x1c) r10 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @empty, 0x5}, 0x1c) 2.932312566s ago: executing program 3 (id=2581): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r5) sendmsg$TIPC_CMD_ENABLE_BEARER(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 2.828450779s ago: executing program 4 (id=2582): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, 0x0, 0x20040000) 2.651988341s ago: executing program 4 (id=2583): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x4, &(0x7f0000000380)=@framed={{0x18, 0x2, 0x0, 0x0, 0x8}, [@call={0x85, 0x0, 0x0, 0x28}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x3, &(0x7f0000000800)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffe}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) pwritev(r0, &(0x7f0000000240)=[{&(0x7f00000002c0)="2ddcd4005ee46c5d5c445320e9f8980059e7158a9bf89930c280bbbc47438c1358c5afec3852711ea1594af0dde1774282eb56ea081d71017f275dc8ed58397e58e32dad6a0f8efbd7557f17382d6309a831f5fdc6aa3bacbca02c36a3d8923d0b620160c47599c3e3cd003495b952ec", 0x70}], 0x1, 0x7, 0x3) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000000)=0x3) ioctl$PPPIOCGFLAGS1(r2, 0x8004745a, &(0x7f0000000200)) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x200000c, 0x3032, 0xffffffffffffffff, 0x0) r3 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f0000000340), 0x3) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r7, 0x0, 0x10, &(0x7f00000000c0)="170000000200020000ffbe8c5ee17688a2003c00010100000077fc5ad90200fb6a880000d6c9db0000db15d088bd8b7000000000d9ce9bc7e28db3000200ff01800a0000ebfc0607bdff59100ac45761547a681f009ceeff5acba400001fb700674f00c8e365d00b5033bf79ac2dfc061f15003901dee2000000000062068f5ee50c08af9b1c568302ffff02ff03310800ab0840024f02d8e9e90539062a80e605007f71174ab498ff0b3e5a1b47b6df7b23de8caa000000", 0x10c) preadv(r3, &(0x7f0000000040)=[{&(0x7f0000002780)=""/4096, 0x1000}], 0x1, 0x5b3d2934, 0xfffffff8) ioctl$IOCTL_GET_NCIDEV_IDX(r3, 0x0, &(0x7f00000000c0)=0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="0000000000000009000000800b0001006272696467650000100002800c0021000000eaa10004"], 0x40}, 0x1, 0x0, 0x0, 0x34041043}, 0x0) sendmsg$nl_route(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) sendmsg$NFC_CMD_DEV_UP(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r5, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 2.602621938s ago: executing program 3 (id=2584): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 2.401962773s ago: executing program 3 (id=2585): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x1b, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x229}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @map_fd={0x18, 0x1, 0x1, 0x0, r0}, @call={0x85, 0x0, 0x0, 0x6d}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 2.203978369s ago: executing program 3 (id=2586): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000002a80)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000002ac0)={0x30, 0x13, 0x1, 0x70bd2b, 0x25dfdbfb, "", [@typed={0x8, 0x33, 0x0, 0x0, @uid}, @nested={0x18, 0x125, 0x0, 0x1, [@nested={0xc, 0x2e, 0x0, 0x1, [@typed={0x8, 0x92, 0x0, 0x0, @u32=0x8d4}]}, @nested={0x8, 0x13, 0x0, 0x1, [@nested={0x4, 0x10a}]}]}]}, 0x30}], 0x1, 0x0, 0x0, 0x8000}, 0x8880) 2.175473672s ago: executing program 3 (id=2587): r0 = getpid() sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x4814) socket$l2tp(0x2, 0x2, 0x73) r1 = socket$phonet(0x23, 0x2, 0x1) recvmsg(r1, &(0x7f00000015c0)={0x0, 0x0, 0x0}, 0x40) socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000100081046881f782db44b904021d080b01000000e8fe55a11800150006001400030000120800040043000000a80016000a00014020000d00036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bbace80177ccbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d0080000000000000b57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd6c769ad809d52a9ecbee", 0xd8}], 0x1}, 0x0) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x0, 0xfffffffe, 0x0, 0x100}, 0x1c) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', 0x20, 0x1) ioctl$EXT4_IOC_PRECACHE_EXTENTS(r2, 0x6612) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000002000)=""/102400, 0x19000) ioctl$sock_inet_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f0000000400)={'dvmrp1\x00', {0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000006c0000006c000000020000000f0000000000000b000000000400000006040004090000000100690004000000ffffff7f0a00000000000002020000001100000000000000090000000800000004000000090000000f00000003000000ffff00000d00000002000000000000800f0000000000001010000000000031db12abd788151434210475aeb6b700989498a3642ce404c768cf98efba994b60f80c453c0ac3d7cb5b8032b4f0dc6cf7674205f8c160eaf92d92aced1d5a4ef99276c08b5668c2b1f3a15e1a53a164e2f45779cc3f387049ef3dfbeb83c17d704b2b3dbeab91664c32d50c"], &(0x7f0000000000)=""/115, 0x86, 0x73, 0x1, 0x9}, 0x28) listen(r5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[], 0x48) 2.002638964s ago: executing program 5 (id=2588): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./bus\x00', &(0x7f0000000000), 0x40, &(0x7f0000000180)={[{@nfs_export_on}, {@verity_require}, {@verity_require}], [{@smackfshat={'smackfshat', 0x3d, 'ns\x00'}}]}) openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x4000200a}) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='ns\x00') r4 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r4, 0xc008561c, &(0x7f0000000040)={0xf0f016, 0x4}) renameat2(r3, &(0x7f0000000080)='./file0\x00', r0, &(0x7f0000000200)='./bus/file0\x00', 0x8) r5 = syz_open_dev$MSR(&(0x7f0000000400), 0x80, 0x0) ioctl$F2FS_IOC_SEC_TRIM_FILE(r5, 0x4018f514, &(0x7f0000000440)={0x80, 0x8000000000000, 0x3}) getdents(0xffffffffffffffff, &(0x7f0000000300)=""/104, 0x68) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000500)={{{@in, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@loopback}}, &(0x7f0000000280)=0xfffffd04) quotactl$Q_GETINFO(0xffffffff80000500, &(0x7f00000001c0)=@filename='./bus\x00', r6, 0x0) 1.903998657s ago: executing program 6 (id=2589): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r1, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x70, 0x24, 0xf0b, 0x70bd2e, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}, {0x2}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x5, 0x9, 0x0, 0x9, 0x1, 0xffffffff, 0x2}}, {0x4}}]}, @qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x2350, 0xb8fa, 0xd7, 0x1, 0xffff, 0x7}}}}]}, 0x70}, 0x1, 0x0, 0x0, 0x8004001}, 0x0) 1.780537582s ago: executing program 5 (id=2590): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0500000001000000ff0f"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0x47, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000010000b70400000000000085000000c300000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x40f00, 0x24, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r2, 0x2000002, 0xe, 0x20, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.702471213s ago: executing program 6 (id=2591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8800}, 0x20040000) 1.557984181s ago: executing program 6 (id=2592): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x102, 0x0) close(r1) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000026c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0x2}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x0, '\x00', 0x1, 0x7, 0x100, 0x8}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70b925, 0x80000, {0x0, 0x0, 0x0, r4, {}, {0xffe0, 0xb}, {0x1, 0xb}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_LIMIT={0x8, 0x2, 0x7}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 1.557296131s ago: executing program 4 (id=2593): bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x20000376, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x12, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r0, 0x0, 0x0}, 0x10) 1.396053722s ago: executing program 5 (id=2594): socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x4008800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180200000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7000001000000008500000006000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.395884032s ago: executing program 4 (id=2595): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$kcm(0xa, 0x922000000003, 0x11) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000000380)="48000000150081fb0259ae08040204000aff0f110000000401d174a4ffa4d8643aec0caa94bd9a5f5901546fabca1b4e7d06a6bd7c493872f750375ed08a562af5740700b8c11941", 0x48}], 0x1}, 0x0) 291.728103ms ago: executing program 4 (id=2596): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) socket$inet(0xa, 0x801, 0x84) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) ppoll(&(0x7f0000000500)=[{r4}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f0000000240)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) accept(r2, &(0x7f00000000c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x0) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r2, 0x2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x2, 0x5c, &(0x7f00000002c0)=ANY=[@ANYBLOB="a9000000000800000100004000000000310dee6710b7c30030246f4b87595042b4a02d5bb1db718b3eb14c03c22cb435f0e179cb5ad476155f63ac7da8227fe43adc65377c811dbdd197dbd62f9afaa172ade411e9c0ade4225cc3ab21869bdc"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2a}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8e5af3a2eb153b3b}, 0x48010) sendmsg$netlink(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0xedc623580215bdcd, 0x12, r0, 0x0) 283.666024ms ago: executing program 5 (id=2597): r0 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=@newtfilter={0x90, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r1, {0x0, 0x10}, {}, {0x8, 0x6}}, [@filter_kind_options=@f_flow={{0x9}, {0x58, 0x2, [@TCA_FLOW_ACT={0x54, 0x9, 0x0, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x4000000, 0x20000001, 0x4, 0x2}, 0x1, r1}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}, @TCA_RATE={0x6, 0x5, {0xff, 0xf8}}]}, 0x90}, 0x1, 0x4000000}, 0x0) 0s ago: executing program 6 (id=2598): r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r0, &(0x7f00000001c0)={{0x3, @default}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @bcast, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) kernel console output (not intermixed with test programs): e loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 405.278516][ T8434] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 406.951985][ T8456] Bluetooth: hci0: invalid length 0, exp 2 for type 0 [ 409.296841][ T8467] loop4: detected capacity change from 0 to 2048 [ 409.626491][ T8467] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 409.683409][ T8467] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 410.113541][ T8488] netlink: 52 bytes leftover after parsing attributes in process `syz.0.797'. [ 418.495990][ T8565] overlayfs: missing 'workdir' [ 421.264522][ T8580] loop4: detected capacity change from 0 to 2048 [ 421.371499][ T8580] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 421.587791][ T8580] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 425.314959][ T5768] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 429.070102][ T8643] usb usb8: usbfs: process 8643 (syz.4.850) did not claim interface 4 before use [ 429.763239][ T8646] loop1: detected capacity change from 0 to 2048 [ 429.806359][ T8646] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 429.941868][ T8646] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 432.434974][ T5809] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 432.447539][ T8661] netlink: 52 bytes leftover after parsing attributes in process `syz.3.852'. [ 432.624953][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 432.662471][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 432.684070][ T5809] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 432.715050][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 432.723146][ T5809] usb 2-1: Product: syz [ 432.733889][ T5809] usb 2-1: Manufacturer: syz [ 432.739412][ T5809] usb 2-1: SerialNumber: syz [ 432.757664][ T5809] usb 2-1: config 0 descriptor?? [ 432.765903][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.776287][ T8659] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 432.800885][ T5809] option 2-1:0.0: GSM modem (1-port) converter detected [ 432.973409][ T5809] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 433.352939][ T5855] usb 2-1: USB disconnect, device number 7 [ 433.413021][ T5855] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 433.458819][ T5855] option 2-1:0.0: device disconnected [ 434.846461][ T8682] loop1: detected capacity change from 0 to 2048 [ 434.886163][ T8682] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 434.920218][ T8682] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 440.556070][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.570751][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.970295][ T8739] block device autoloading is deprecated and will be removed. [ 442.003957][ T8738] md: md2 stopped. [ 442.114996][ T5757] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 442.512217][ T5757] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 442.528547][ T5757] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 443.430516][ T5757] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 443.451965][ T5757] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 443.469909][ T5757] usb 2-1: Product: syz [ 443.474207][ T5757] usb 2-1: Manufacturer: syz [ 443.479374][ T5757] usb 2-1: SerialNumber: syz [ 443.489492][ T5757] usb 2-1: config 0 descriptor?? [ 443.498535][ T8737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 443.509994][ T8737] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 443.536195][ T5757] option 2-1:0.0: GSM modem (1-port) converter detected [ 443.553634][ T5757] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 443.755066][ T9] usb 2-1: USB disconnect, device number 8 [ 443.777805][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 443.796650][ T9] option 2-1:0.0: device disconnected [ 443.805249][ T8759] loop4: detected capacity change from 0 to 2048 [ 443.821553][ T8759] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 443.839060][ T8759] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 447.297128][ T8] usb 2-1: new high-speed USB device number 9 using dummy_hcd [ 447.526654][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 447.537089][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 447.564228][ T8] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 447.577216][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 447.594903][ T8] usb 2-1: Product: syz [ 447.605161][ T8] usb 2-1: Manufacturer: syz [ 447.614942][ T8] usb 2-1: SerialNumber: syz [ 447.675161][ T8] usb 2-1: config 0 descriptor?? [ 447.697064][ T8791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 447.725318][ T8791] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 447.740947][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 447.799151][ T8] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 448.009941][ T8] usb 2-1: USB disconnect, device number 9 [ 448.021354][ T8] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 448.040869][ T8] option 2-1:0.0: device disconnected [ 448.330556][ T8810] netlink: 4 bytes leftover after parsing attributes in process `syz.3.909'. [ 451.150391][ T8] usb 2-1: new high-speed USB device number 10 using dummy_hcd [ 452.364043][ T8839] loop4: detected capacity change from 0 to 2048 [ 452.448193][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 452.466822][ T8839] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 452.481460][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 452.535291][ T8839] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 452.554618][ T8] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 452.584525][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.607308][ T8847] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 452.616690][ T8] usb 2-1: Product: syz [ 452.627858][ T8] usb 2-1: Manufacturer: syz [ 452.632522][ T8] usb 2-1: SerialNumber: syz [ 452.672970][ T8] usb 2-1: config 0 descriptor?? [ 452.705775][ T8836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 452.733587][ T8836] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 452.755692][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 452.788535][ T8] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 453.003816][ T5757] usb 2-1: USB disconnect, device number 10 [ 453.042019][ T5757] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 453.072746][ T5757] option 2-1:0.0: device disconnected [ 454.873432][ T8875] block device autoloading is deprecated and will be removed. [ 454.909076][ T8878] netlink: 4 bytes leftover after parsing attributes in process `syz.3.931'. [ 455.195082][ T8884] loop4: detected capacity change from 0 to 2048 [ 455.245710][ T8884] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 455.277781][ T8884] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.475624][ T8914] netlink: 4 bytes leftover after parsing attributes in process `syz.3.943'. [ 457.821494][ T8922] loop1: detected capacity change from 0 to 2048 [ 457.855512][ T8922] UDF-fs: error (device loop1): udf_process_sequence: Primary Volume Descriptor not found! [ 457.910442][ T8922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 457.955093][ T7351] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 458.418828][ T7351] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 458.445095][ T7351] usb 5-1: config 0 has no interfaces? [ 458.457559][ T7351] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 458.474994][ T7351] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 458.483113][ T7351] usb 5-1: Product: syz [ 458.494828][ T7351] usb 5-1: Manufacturer: syz [ 458.499533][ T7351] usb 5-1: SerialNumber: syz [ 458.516541][ T7351] usb 5-1: config 0 descriptor?? [ 458.836980][ T5768] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 458.847974][ T5757] usb 5-1: USB disconnect, device number 2 [ 459.900939][ T8951] netlink: 4 bytes leftover after parsing attributes in process `syz.4.956'. [ 462.513543][ T5768] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 470.868562][ T9021] loop4: detected capacity change from 0 to 128 [ 470.888272][ T9021] UDF-fs: error (device loop4): udf_read_tagged: read failed, block=256, location=256 [ 470.919484][ T9021] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 471.292922][ T9024] loop4: detected capacity change from 0 to 2048 [ 471.323612][ T9024] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 471.367878][ T9024] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 472.610136][ T9036] 9pnet_fd: Insufficient options for proto=fd [ 474.189984][ T5768] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 474.686879][ T5809] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 475.397544][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 475.420432][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 475.437765][ T5809] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 475.454030][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 475.485009][ T5809] usb 5-1: Product: syz [ 475.508915][ T5809] usb 5-1: Manufacturer: syz [ 475.524679][ T5809] usb 5-1: SerialNumber: syz [ 475.553721][ T5809] usb 5-1: config 0 descriptor?? [ 475.590177][ T9048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.605850][ T9070] netlink: 4 bytes leftover after parsing attributes in process `syz.3.999'. [ 475.631562][ T9048] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 475.673055][ T5809] option 5-1:0.0: GSM modem (1-port) converter detected [ 476.850701][ T5809] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 477.037268][ T5809] usb 5-1: USB disconnect, device number 3 [ 477.081357][ T5809] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 477.118862][ T5809] option 5-1:0.0: device disconnected [ 478.257324][ T9089] loop4: detected capacity change from 0 to 2048 [ 478.307625][ T9089] UDF-fs: error (device loop4): udf_process_sequence: Primary Volume Descriptor not found! [ 478.362292][ T9089] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 480.147717][ T8] usb 2-1: new high-speed USB device number 11 using dummy_hcd [ 480.365554][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 480.368490][ T9108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1010'. [ 480.380367][ T8] usb 2-1: no configurations [ 480.400845][ T8] usb 2-1: can't read configurations, error -22 [ 480.565157][ T8] usb 2-1: new high-speed USB device number 12 using dummy_hcd [ 481.040083][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 481.055139][ T8] usb 2-1: no configurations [ 481.059805][ T8] usb 2-1: can't read configurations, error -22 [ 481.066515][ T8] usb usb2-port1: attempt power cycle [ 481.715099][ T8] usb 2-1: new high-speed USB device number 13 using dummy_hcd [ 482.460637][ T8] usb 2-1: device descriptor read/8, error -71 [ 485.396979][ T9163] loop4: detected capacity change from 0 to 1024 [ 485.833312][ T1032] hfsplus: b-tree write err: -5, ino 4 [ 486.315264][ T8] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 486.736919][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 486.747090][ T8] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 486.762209][ T8] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 486.774978][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 486.783997][ T8] usb 5-1: Product: syz [ 486.788334][ T8] usb 5-1: Manufacturer: syz [ 486.793054][ T8] usb 5-1: SerialNumber: syz [ 486.803406][ T8] usb 5-1: config 0 descriptor?? [ 486.811395][ T9171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 486.887074][ T9171] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 487.105857][ T8] option 5-1:0.0: GSM modem (1-port) converter detected [ 487.246252][ T8] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 488.496766][ T5809] usb 5-1: USB disconnect, device number 4 [ 488.539907][ T5809] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 488.588367][ T5809] option 5-1:0.0: device disconnected [ 490.686559][ T9216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1043'. [ 493.364096][ T9] usb 2-1: new high-speed USB device number 15 using dummy_hcd [ 493.975731][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 493.994968][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 494.018157][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 494.035644][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 494.061080][ T9] usb 2-1: Product: syz [ 494.072147][ T9] usb 2-1: Manufacturer: syz [ 494.095420][ T9] usb 2-1: SerialNumber: syz [ 494.286669][ T9] usb 2-1: config 0 descriptor?? [ 494.292626][ T9237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 494.301097][ T9237] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 494.311223][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 494.323716][ T9] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 494.549316][ T5809] usb 2-1: USB disconnect, device number 15 [ 494.572313][ T5809] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 494.586211][ T5809] option 2-1:0.0: device disconnected [ 494.609000][ T9251] loop4: detected capacity change from 0 to 64 [ 495.080707][ T27] audit: type=1800 audit(1768262862.386:21): pid=9254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1054" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 499.661702][ T9288] loop4: detected capacity change from 0 to 64 [ 499.977444][ T27] audit: type=1800 audit(1768262867.426:22): pid=9291 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1066" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 501.731042][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.839426][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.775440][ T5854] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 503.107267][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 503.134237][ T5854] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 503.160014][ T5854] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 503.175799][ T5854] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 503.183976][ T5854] usb 2-1: Product: syz [ 503.188410][ T5854] usb 2-1: Manufacturer: syz [ 503.198400][ T5854] usb 2-1: SerialNumber: syz [ 503.211282][ T5854] usb 2-1: config 0 descriptor?? [ 503.228375][ T9311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 503.315983][ T9311] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 503.370694][ T5854] option 2-1:0.0: GSM modem (1-port) converter detected [ 503.537901][ T5854] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 503.618870][ T28] usb 2-1: USB disconnect, device number 16 [ 503.686594][ T28] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 503.723064][ T28] option 2-1:0.0: device disconnected [ 503.904973][ T5768] Bluetooth: hci0: command 0x0406 tx timeout [ 508.040987][ T9370] loop1: detected capacity change from 0 to 64 [ 508.381167][ T27] audit: type=1800 audit(1768262875.836:23): pid=9375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1092" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 508.485943][ T5757] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 508.686874][ T5757] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 508.710262][ T5757] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 508.737676][ T5757] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 508.755198][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.763257][ T5757] usb 5-1: Product: syz [ 508.784830][ T5757] usb 5-1: Manufacturer: syz [ 508.789511][ T5757] usb 5-1: SerialNumber: syz [ 508.807501][ T5757] usb 5-1: config 0 descriptor?? [ 508.815713][ T9372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 508.823051][ T9372] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 508.855785][ T5757] option 5-1:0.0: GSM modem (1-port) converter detected [ 509.065305][ T5757] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 509.145438][ T5757] usb 5-1: USB disconnect, device number 5 [ 509.457353][ T5757] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 509.704559][ T5757] option 5-1:0.0: device disconnected [ 512.244644][ T9407] loop1: detected capacity change from 0 to 64 [ 512.541715][ T27] audit: type=1800 audit(1768262879.996:24): pid=9408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1103" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 513.873219][ T9420] 9pnet_fd: Insufficient options for proto=fd [ 514.058082][ T9426] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1106'. [ 514.868931][ T9438] capability: warning: `syz.1.1111' uses 32-bit capabilities (legacy support in use) [ 514.918655][ T9438] program syz.1.1111 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 516.541131][ T9460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1119'. [ 521.121807][ T9501] workqueue: Failed to create a rescuer kthread for wq "ceph-completion": -EINTR [ 521.196076][ T9510] loop1: detected capacity change from 0 to 64 [ 522.198164][ T27] audit: type=1800 audit(1768262888.976:25): pid=9514 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1135" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 522.654873][ T8] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 522.857040][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 522.884977][ T8] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 522.904909][ T8] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 522.914018][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.940065][ T8] usb 2-1: Product: syz [ 522.944311][ T8] usb 2-1: Manufacturer: syz [ 522.964800][ T8] usb 2-1: SerialNumber: syz [ 522.986008][ T8] usb 2-1: config 0 descriptor?? [ 522.991899][ T9521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.005863][ T9521] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 523.028319][ T8] option 2-1:0.0: GSM modem (1-port) converter detected [ 523.060434][ T8] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 523.271596][ T5881] usb 2-1: USB disconnect, device number 17 [ 523.301606][ T5881] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 523.324068][ T5881] option 2-1:0.0: device disconnected [ 524.511067][ T9539] loop1: detected capacity change from 0 to 64 [ 525.045248][ T27] audit: type=1800 audit(1768262892.386:26): pid=9542 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1146" name="file1" dev="loop1" ino=21 res=0 errno=0 [ 525.774008][ T9548] program syz.1.1148 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 525.848028][ T9552] 9pnet_virtio: no channels available for device syz [ 526.517804][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 526.673964][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 526.874707][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 526.883665][ T9572] loop4: detected capacity change from 0 to 64 [ 526.895538][ T9559] ceph: No mds server is up or the cluster is laggy [ 526.919366][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 528.135845][ T9576] ceph: No mds server is up or the cluster is laggy [ 528.143015][ T8] libceph: connect (1)[c::]:6789 error -101 [ 528.172432][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 528.203169][ T9590] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1162'. [ 531.126037][ T9620] overlayfs: failed to clone upperpath [ 532.057597][ T9629] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1174'. [ 532.895840][ T9640] loop4: detected capacity change from 0 to 64 [ 532.916497][ T28] libceph: connect (1)[c::]:6789 error -101 [ 532.922617][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 533.220816][ T28] libceph: connect (1)[c::]:6789 error -101 [ 533.234338][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 533.882293][ T28] libceph: connect (1)[c::]:6789 error -101 [ 533.889461][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 533.915649][ T9634] ceph: No mds server is up or the cluster is laggy [ 535.296367][ T9660] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1187'. [ 535.997285][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 536.019713][ T9663] ceph: No mds server is up or the cluster is laggy [ 536.027857][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 536.086962][ T9676] loop4: detected capacity change from 0 to 64 [ 536.461016][ T27] audit: type=1800 audit(1768262903.886:27): pid=9678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1191" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 537.242437][ T9686] loop4: detected capacity change from 0 to 128 [ 537.265460][ T9687] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 537.297339][ T9686] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 537.332736][ T9686] hpfs: filesystem error: improperly stopped [ 537.349986][ T9686] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 537.366206][ T9689] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1198'. [ 537.371183][ T9686] hpfs: You really don't want any checks? You are crazy... [ 537.395908][ T9686] hpfs: hpfs_map_sector(): read error [ 537.414847][ T9686] hpfs: code page support is disabled [ 537.445917][ T9686] hpfs: hpfs_map_4sectors(): unaligned read [ 537.459742][ T9686] hpfs: hpfs_map_4sectors(): unaligned read [ 537.478978][ T9686] hpfs: filesystem error: unable to find root dir [ 537.591772][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1200'. [ 537.612202][ T9686] bpq0: entered promiscuous mode [ 537.645060][ T9686] bpq0: left promiscuous mode [ 537.855875][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 537.862182][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 537.884982][ T9699] ceph: No mds server is up or the cluster is laggy [ 538.136084][ T8] libceph: connect (1)[c::]:6789 error -101 [ 538.144575][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 539.332819][ T9721] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1208'. [ 540.415819][ T9733] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1210'. [ 540.883439][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 540.902749][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 540.920431][ T9737] ceph: No mds server is up or the cluster is laggy [ 542.057708][ T9753] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1217'. [ 544.617640][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1223'. [ 546.247502][ T9790] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1227'. [ 546.444896][ T5855] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 546.548049][ T5084] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 546.757688][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 546.837781][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 546.863869][ T5855] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 546.888951][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.914838][ T5855] usb 5-1: Product: syz [ 546.919088][ T5855] usb 5-1: Manufacturer: syz [ 546.923722][ T5855] usb 5-1: SerialNumber: syz [ 546.930173][ T9800] loop1: detected capacity change from 0 to 128 [ 546.950751][ T9800] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 546.963401][ T5855] usb 5-1: config 0 descriptor?? [ 546.983386][ T9800] hpfs: filesystem error: improperly stopped [ 546.990736][ T9783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.004987][ T9783] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 547.013683][ T9800] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 547.030707][ T9800] hpfs: You really don't want any checks? You are crazy... [ 547.042508][ T9800] hpfs: hpfs_map_sector(): read error [ 547.046431][ T5855] option 5-1:0.0: GSM modem (1-port) converter detected [ 547.054910][ T9800] hpfs: code page support is disabled [ 547.055501][ T9800] hpfs: hpfs_map_4sectors(): unaligned read [ 547.077663][ T9800] hpfs: hpfs_map_4sectors(): unaligned read [ 547.083638][ T9800] hpfs: filesystem error: unable to find root dir [ 547.086435][ T5855] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 547.129470][ T9800] bpq0: entered promiscuous mode [ 547.155776][ T9800] bpq0: left promiscuous mode [ 547.309812][ T5881] usb 5-1: USB disconnect, device number 6 [ 547.331620][ T5881] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 547.372683][ T5881] option 5-1:0.0: device disconnected [ 547.413031][ T9808] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1233'. [ 547.625793][ T9813] random: crng reseeded on system resumption [ 548.855537][ T9817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1237'. [ 548.876436][ T5757] libceph: connect (1)[c::]:6789 error -101 [ 548.900312][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 548.926515][ T9815] ceph: No mds server is up or the cluster is laggy [ 549.201344][ T5757] libceph: connect (1)[c::]:6789 error -101 [ 549.292056][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 549.815254][ T9825] binder: 9824:9825 ioctl c0306201 0 returned -14 [ 550.504855][ T5757] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 550.795593][ T5757] usb 5-1: no configurations [ 550.800305][ T5757] usb 5-1: can't read configurations, error -22 [ 550.813528][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1246'. [ 551.128971][ T5757] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 551.300768][ T9853] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1248'. [ 551.340668][ T5757] usb 5-1: no configurations [ 551.352053][ T5757] usb 5-1: can't read configurations, error -22 [ 551.373001][ T5757] usb usb5-port1: attempt power cycle [ 551.824959][ T5757] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 553.200726][ T5757] usb 5-1: device descriptor read/all, error -71 [ 553.299313][ T9] libceph: connect (1)[c::]:6789 error -101 [ 553.307832][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 553.331183][ T9868] ceph: No mds server is up or the cluster is laggy [ 553.430344][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 553.453166][ T9871] ceph: No mds server is up or the cluster is laggy [ 553.455148][ T9875] program syz.4.1255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 553.469710][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 553.608623][ T9885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1256'. [ 553.635164][ T9887] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1257'. [ 554.350265][ T9] libceph: connect (1)[c::]:6789 error -101 [ 554.362141][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 554.388049][ T9894] ceph: No mds server is up or the cluster is laggy [ 555.031166][ T9] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 555.215673][ T9] usb 2-1: no configurations [ 555.220371][ T9] usb 2-1: can't read configurations, error -22 [ 555.345659][ T9917] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1267'. [ 555.385306][ T9] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 555.608654][ T9] usb 2-1: no configurations [ 555.613355][ T9] usb 2-1: can't read configurations, error -22 [ 555.660629][ T9] usb usb2-port1: attempt power cycle [ 556.104928][ T9] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 556.117054][ T9921] loop4: detected capacity change from 0 to 32768 [ 556.127024][ T9921] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.1269 (9921) [ 556.145192][ T9921] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 556.155471][ T9921] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 556.164230][ T9921] BTRFS info (device loop4): setting nodatacow, compression disabled [ 556.172428][ T9921] BTRFS info (device loop4): setting datasum, datacow enabled [ 556.179739][ T9] usb 2-1: no configurations [ 556.180242][ T9921] BTRFS info (device loop4): setting nodatasum [ 556.190844][ T9921] BTRFS info (device loop4): disabling tree log [ 556.197351][ T9] usb 2-1: can't read configurations, error -22 [ 556.197435][ T9921] BTRFS info (device loop4): max_inline at 0 [ 556.210832][ T9921] BTRFS info (device loop4): using free space tree [ 556.355643][ T9942] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1270'. [ 556.396149][ T9] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 556.457114][ T9] usb 2-1: no configurations [ 556.468057][ T9] usb 2-1: can't read configurations, error -22 [ 556.495392][ T9] usb usb2-port1: unable to enumerate USB device [ 556.623944][ T8219] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 557.361577][ T9957] loop4: detected capacity change from 0 to 64 [ 557.999890][ T27] audit: type=1800 audit(1768262925.176:28): pid=9959 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.1275" name="file1" dev="loop4" ino=21 res=0 errno=0 [ 558.358979][ T9961] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1276'. [ 559.020734][ T9977] overlayfs: missing 'lowerdir' [ 559.158145][ T9975] loop1: detected capacity change from 0 to 32768 [ 559.167003][ T9975] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop1 scanned by syz.1.1281 (9975) [ 559.235351][ T9975] BTRFS info (device loop1): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 559.245794][ T9975] BTRFS info (device loop1): using crc32c (crc32c-intel) checksum algorithm [ 559.254549][ T9975] BTRFS info (device loop1): setting nodatacow, compression disabled [ 559.262849][ T9975] BTRFS info (device loop1): setting datasum, datacow enabled [ 559.270436][ T9975] BTRFS info (device loop1): setting nodatasum [ 559.277751][ T9975] BTRFS info (device loop1): disabling tree log [ 559.284103][ T9975] BTRFS info (device loop1): max_inline at 0 [ 559.290191][ T9975] BTRFS info (device loop1): using free space tree [ 559.840253][ T5776] BTRFS info (device loop1): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 560.500306][ T9025] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 10 /dev/loop1 scanned by udevd (9025) [ 560.526976][ T5881] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 560.691634][T10009] overlayfs: failed to clone upperpath [ 560.709441][T10009] overlayfs: missing 'lowerdir' [ 560.798553][ T5881] usb 2-1: no configurations [ 560.819843][ T5881] usb 2-1: can't read configurations, error -22 [ 561.185752][ T5881] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 561.431019][ T5881] usb 2-1: no configurations [ 561.445026][ T5881] usb 2-1: can't read configurations, error -22 [ 561.471933][ T5881] usb usb2-port1: attempt power cycle [ 561.499951][T10013] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1289'. [ 561.895175][ T5881] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 562.063988][ T5881] usb 2-1: no configurations [ 562.123191][ T5881] usb 2-1: can't read configurations, error -22 [ 562.561478][ T5881] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 562.604041][ T5881] usb 2-1: no configurations [ 562.619528][ T5881] usb 2-1: can't read configurations, error -22 [ 562.659756][ T5881] usb usb2-port1: unable to enumerate USB device [ 563.177050][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.199746][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.063491][ T9] libceph: connect (1)[c::]:6789 error -101 [ 564.849844][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 564.892482][T10036] ceph: No mds server is up or the cluster is laggy [ 565.005246][T10043] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1298'. [ 566.952535][ T9] libceph: connect (1)[c::]:6789 error -101 [ 566.968004][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 567.011550][T10057] ceph: No mds server is up or the cluster is laggy [ 567.050414][T10065] random: crng reseeded on system resumption [ 567.245076][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 567.324804][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 567.475089][T10070] tipc: Enabling of bearer rejected, failed to enable media [ 567.907961][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 567.952349][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 569.195878][T10083] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1307'. [ 570.577111][T10093] overlayfs: missing 'lowerdir' [ 570.639296][T10099] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1309'. [ 571.728377][T10110] overlayfs: failed to clone upperpath [ 571.781922][T10109] overlayfs: missing 'lowerdir' [ 572.297320][T10115] ceph: No mds server is up or the cluster is laggy [ 572.306425][ T9] libceph: connect (1)[c::]:6789 error -101 [ 572.312460][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 572.395288][T10122] overlayfs: failed to clone upperpath [ 572.450475][T10123] overlayfs: missing 'lowerdir' [ 573.146377][T10126] random: crng reseeded on system resumption [ 573.487330][T10137] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1318'. [ 573.670657][T10140] overlayfs: failed to clone upperpath [ 573.686914][T10140] overlayfs: missing 'lowerdir' [ 574.577665][T10153] tipc: Enabling of bearer rejected, failed to enable media [ 576.344356][T10166] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1332'. [ 577.513845][T10173] random: crng reseeded on system resumption [ 577.721208][T10174] ceph: No mds server is up or the cluster is laggy [ 577.721981][ T5881] libceph: connect (1)[c::]:6789 error -101 [ 577.734399][ T5881] libceph: mon0 (1)[c::]:6789 connect error [ 578.369198][T10192] program syz.4.1333 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 579.541316][T10199] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1337'. [ 580.112587][T10211] overlayfs: failed to clone upperpath [ 580.383840][T10213] overlayfs: missing 'lowerdir' [ 585.466959][T10250] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1349'. [ 586.623392][T10261] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1353'. [ 591.577050][T10289] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1360'. [ 593.716411][T10308] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1364'. [ 594.600157][T10312] autofs4:pid:10312:autofs_fill_super: called with bogus options [ 596.114602][T10336] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1371'. [ 596.377195][T10343] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1375'. [ 596.516355][T10346] autofs4:pid:10346:autofs_fill_super: called with bogus options [ 600.766848][T10378] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1386'. [ 603.418448][ T8] libceph: connect (1)[c::]:6789 error -101 [ 603.434094][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 603.448862][T10391] ceph: No mds server is up or the cluster is laggy [ 603.525938][T10399] random: crng reseeded on system resumption [ 603.733878][ T8] libceph: connect (1)[c::]:6789 error -101 [ 603.809586][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 606.026301][T10410] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1396'. [ 609.357485][T10441] overlayfs: failed to clone upperpath [ 609.383910][T10438] overlayfs: failed to clone upperpath [ 610.727373][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1404'. [ 613.205903][T10471] overlayfs: failed to clone upperpath [ 613.261476][T10472] overlayfs: missing 'lowerdir' [ 615.979442][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 615.994992][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 616.021055][T10480] ceph: No mds server is up or the cluster is laggy [ 617.347779][T10500] autofs4:pid:10500:autofs_fill_super: called with bogus options [ 621.207099][T10523] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1425'. [ 623.461017][T10532] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1428'. [ 623.735386][T10539] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1429'. [ 624.839081][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.886096][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 627.924991][T10561] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1434'. [ 628.235814][T10570] random: crng reseeded on system resumption [ 629.242308][T10573] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1440'. [ 629.270892][T10573] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 631.653275][ T28] libceph: connect (1)[c::]:6789 error -101 [ 631.665106][ T28] libceph: mon0 (1)[c::]:6789 connect error [ 631.687794][T10587] ceph: No mds server is up or the cluster is laggy [ 631.758308][T10593] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1446'. [ 634.868343][T10616] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1453'. [ 640.065284][T10658] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1463'. [ 640.125874][T10658] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 642.125076][T10672] tipc: Started in network mode [ 642.130165][T10672] tipc: Node identity de802fe7f11c, cluster identity 4711 [ 642.139389][T10672] tipc: Enabled bearer , priority 0 [ 642.159948][T10675] loop1: detected capacity change from 0 to 128 [ 642.234656][T10675] hpfs: filesystem error: invalid number of hotfixes: 2066844986, used: 2066844985; already mounted read-only [ 642.273596][T10675] hpfs: filesystem error: improperly stopped [ 642.310204][T10675] hpfs: filesystem error: warning: spare dnodes used, try chkdsk [ 642.319823][T10675] hpfs: You really don't want any checks? You are crazy... [ 642.352130][T10671] tipc: Disabling bearer [ 642.358772][T10675] hpfs: hpfs_map_sector(): read error [ 642.365949][T10675] hpfs: code page support is disabled [ 642.371851][T10675] hpfs: hpfs_map_4sectors(): unaligned read [ 642.378129][T10675] hpfs: hpfs_map_4sectors(): unaligned read [ 642.384169][T10675] hpfs: filesystem error: unable to find root dir [ 642.917537][T10474] libceph: connect (1)[c::]:6789 error -101 [ 642.923663][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 643.295014][T10681] ceph: No mds server is up or the cluster is laggy [ 645.264805][ T5809] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 645.619084][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 645.632497][ T5809] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 645.662030][ T5809] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 645.734959][ T5809] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 645.743048][ T5809] usb 5-1: Product: syz [ 645.840090][ T5809] usb 5-1: Manufacturer: syz [ 645.845106][ T5809] usb 5-1: SerialNumber: syz [ 645.862176][ T5809] usb 5-1: config 0 descriptor?? [ 645.869059][T10692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.897471][T10692] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 645.946814][ T5809] option 5-1:0.0: GSM modem (1-port) converter detected [ 645.985414][ T5809] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 646.014922][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 646.232380][T10474] usb 5-1: USB disconnect, device number 11 [ 646.276938][T10474] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 646.318398][T10474] option 5-1:0.0: device disconnected [ 648.070253][T10728] overlayfs: failed to clone upperpath [ 648.125385][T10729] overlayfs: missing 'lowerdir' [ 649.676439][ T28] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 650.006878][ T28] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 650.020207][ T28] usb 2-1: config 0 has no interfaces? [ 650.030043][ T28] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 650.704778][ T28] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.712845][ T28] usb 2-1: Product: syz [ 650.724968][ T28] usb 2-1: Manufacturer: syz [ 650.729626][ T28] usb 2-1: SerialNumber: syz [ 650.756448][ T28] usb 2-1: config 0 descriptor?? [ 650.963454][T10748] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1491'. [ 650.983388][ T5084] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 650.990676][ T5757] usb 2-1: USB disconnect, device number 26 [ 654.155384][ T9] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 655.436949][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 655.465316][ T9] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 655.493908][ T9] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 655.516758][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 655.547548][ T9] usb 2-1: Product: syz [ 655.562462][ T9] usb 2-1: Manufacturer: syz [ 655.573019][ T9] usb 2-1: SerialNumber: syz [ 655.579731][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 655.602511][ T9] usb 2-1: config 0 descriptor?? [ 655.615443][T10779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 655.623893][T10779] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 655.642369][ T9] option 2-1:0.0: GSM modem (1-port) converter detected [ 655.664378][ T9] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 655.859743][ T9] usb 2-1: USB disconnect, device number 27 [ 655.889235][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 655.920999][ T9] option 2-1:0.0: device disconnected [ 657.122309][ T5757] IPVS: starting estimator thread 0... [ 657.464195][T10811] overlayfs: failed to clone upperpath [ 657.776807][T10810] overlayfs: missing 'lowerdir' [ 657.794829][T10815] overlayfs: missing 'lowerdir' [ 657.847439][T10808] IPVS: using max 16 ests per chain, 38400 per kthread [ 660.146324][T10833] overlayfs: missing 'lowerdir' [ 660.335342][T10474] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 660.831249][T10474] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 660.841608][T10474] usb 5-1: config 0 has no interfaces? [ 661.017650][T10474] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 661.037773][T10474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.055919][T10474] usb 5-1: Product: syz [ 661.175050][T10474] usb 5-1: Manufacturer: syz [ 661.179885][T10474] usb 5-1: SerialNumber: syz [ 661.199912][T10474] usb 5-1: config 0 descriptor?? [ 661.745134][ T5816] usb 5-1: USB disconnect, device number 12 [ 662.723955][T10856] program syz.4.1521 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 662.830846][T10857] overlayfs: failed to clone upperpath [ 662.886411][T10858] overlayfs: missing 'lowerdir' [ 665.534907][ T5816] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 665.656765][T10880] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1526'. [ 665.839880][ T5816] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 665.923685][ T5816] usb 2-1: config 0 has no interfaces? [ 666.008955][ T5816] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 666.020626][ T5816] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 666.029186][ T5816] usb 2-1: Product: syz [ 666.033723][ T5816] usb 2-1: Manufacturer: syz [ 666.038640][ T5816] usb 2-1: SerialNumber: syz [ 666.070799][ T5816] usb 2-1: config 0 descriptor?? [ 666.551756][ T5816] usb 2-1: USB disconnect, device number 28 [ 666.585302][ T5084] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 667.422028][T10887] program syz.1.1531 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 670.085002][T10915] syzkaller0: entered promiscuous mode [ 670.090812][T10915] syzkaller0: entered allmulticast mode [ 670.110104][T10915] tipc: Enabled bearer , priority 0 [ 670.120052][T10914] tipc: Resetting bearer [ 670.160591][T10914] tipc: Disabling bearer [ 670.414519][T10918] overlayfs: failed to clone upperpath [ 670.470253][T10919] overlayfs: missing 'lowerdir' [ 671.477373][T10927] overlayfs: missing 'lowerdir' [ 675.312656][T10950] overlayfs: failed to clone upperpath [ 675.568090][T10947] overlayfs: missing 'lowerdir' [ 675.629854][T10953] overlayfs: missing 'lowerdir' [ 686.524925][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.531337][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 695.342196][T11042] tipc: Enabling of bearer rejected, failed to enable media [ 695.795186][T11048] overlayfs: failed to clone upperpath [ 695.809986][T11048] overlayfs: missing 'lowerdir' [ 699.951478][T11074] random: crng reseeded on system resumption [ 704.866965][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 704.902132][T11103] ceph: No mds server is up or the cluster is laggy [ 704.913541][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 705.289254][T11109] random: crng reseeded on system resumption [ 706.242488][T11111] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1593'. [ 707.753273][T11124] random: crng reseeded on system resumption [ 709.035227][T11126] overlayfs: failed to clone upperpath [ 711.254041][T11148] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1603'. [ 713.395153][ T5855] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 713.460662][T11168] random: crng reseeded on system resumption [ 713.760462][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 713.826392][ T5855] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 714.052255][ T5855] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 714.128465][ T5855] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.179140][ T5855] usb 5-1: Product: syz [ 714.217088][ T5855] usb 5-1: Manufacturer: syz [ 714.240670][ T5855] usb 5-1: SerialNumber: syz [ 714.524250][T11172] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1610'. [ 714.558410][ T5855] usb 5-1: config 0 descriptor?? [ 714.782580][T11155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.827399][T11155] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 714.846930][ T5855] option 5-1:0.0: GSM modem (1-port) converter detected [ 714.861605][ T5855] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 715.073986][T10474] usb 5-1: USB disconnect, device number 13 [ 715.091967][T10474] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 715.120176][T10474] option 5-1:0.0: device disconnected [ 726.400048][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 726.408344][T11237] ceph: No mds server is up or the cluster is laggy [ 726.421540][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 726.782593][T11249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1636'. [ 732.639200][T11284] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1647'. [ 738.916972][T11330] tipc: Enabling of bearer rejected, failed to enable media [ 739.090890][T11334] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1660'. [ 740.913984][T11345] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1664'. [ 747.404504][T11365] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1671'. [ 747.489604][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.502391][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 754.935152][T11404] tipc: Enabling of bearer rejected, failed to enable media [ 765.402166][T11456] ptm ptm0: ldisc open failed (-12), clearing slot 0 [ 773.854411][T11504] random: crng reseeded on system resumption [ 777.216216][T11517] random: crng reseeded on system resumption [ 777.312598][ T5757] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 779.324341][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 779.344774][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 779.417923][T11523] ceph: No mds server is up or the cluster is laggy [ 789.945170][T10474] libceph: connect (1)[c::]:6789 error -101 [ 789.952164][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 790.231823][T10474] libceph: connect (1)[c::]:6789 error -101 [ 790.262401][T11579] ceph: No mds server is up or the cluster is laggy [ 790.270066][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 798.420882][T11632] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1742'. [ 799.949851][T11644] netlink: 72 bytes leftover after parsing attributes in process `syz.3.1738'. [ 800.311449][T11652] random: crng reseeded on system resumption [ 802.769832][T11659] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1745'. [ 806.069489][T10474] libceph: connect (1)[c::]:6789 error -101 [ 806.097313][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 806.114457][T11668] ceph: No mds server is up or the cluster is laggy [ 807.675470][T10474] libceph: connect (1)[c::]:6789 error -101 [ 807.979716][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 809.565251][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 809.571633][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.204130][T11703] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1756'. [ 810.650469][T11704] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1749'. [ 811.372257][T11711] overlayfs: failed to clone upperpath [ 811.427461][T11712] overlayfs: missing 'lowerdir' [ 818.311795][T11742] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1767'. [ 821.412795][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 821.422906][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 821.487610][T11765] ceph: No mds server is up or the cluster is laggy [ 822.709262][ T5757] libceph: connect (1)[c::]:6789 error -101 [ 822.726187][ T5757] libceph: mon0 (1)[c::]:6789 connect error [ 823.030719][T11781] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1777'. [ 824.064990][T11786] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1778'. [ 827.530468][T11814] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1783'. [ 829.827297][T11826] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1787'. [ 830.268878][T11830] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1788'. [ 833.311227][T11852] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1796'. [ 834.388821][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 837.409214][T11876] Bluetooth: MGMT ver 1.22 [ 837.732305][T11884] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1806'. [ 839.279839][T11893] overlayfs: failed to clone upperpath [ 839.335891][T11894] overlayfs: missing 'lowerdir' [ 839.484792][ T5084] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 839.503367][ T5084] Bluetooth: hci2: command 0x0406 tx timeout [ 840.073551][T11901] tipc: Enabling of bearer rejected, failed to enable media [ 840.114856][ T5809] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 840.306928][ T5809] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 840.317618][ T5809] usb 2-1: config 0 has no interfaces? [ 840.325577][ T5809] usb 2-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 840.334980][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.343041][ T5809] usb 2-1: Product: syz [ 840.348019][ T5809] usb 2-1: Manufacturer: syz [ 840.352697][ T5809] usb 2-1: SerialNumber: syz [ 840.360544][ T5809] usb 2-1: config 0 descriptor?? [ 840.583539][ T5084] Bluetooth: hci3: unexpected event 0x03 length: 1 < 11 [ 840.594262][ T9] usb 2-1: USB disconnect, device number 30 [ 841.241225][T11920] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1815'. [ 844.071100][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 844.079584][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 844.109794][T11936] ceph: No mds server is up or the cluster is laggy [ 847.325371][ T5084] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 848.251937][T11957] overlayfs: failed to clone upperpath [ 848.307423][T11958] overlayfs: missing 'lowerdir' [ 850.154097][T11969] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1824'. [ 851.653836][T11980] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 853.142382][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 854.966329][T12000] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1837'. [ 856.285613][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 856.291746][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 856.314925][T12009] ceph: No mds server is up or the cluster is laggy [ 858.765474][T12031] overlayfs: missing 'lowerdir' [ 859.575527][ T8] libceph: connect (1)[c::]:6789 error -101 [ 859.581649][ T8] libceph: mon0 (1)[c::]:6789 connect error [ 859.597411][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 859.606017][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1847'. [ 859.626917][T12035] ceph: No mds server is up or the cluster is laggy [ 860.101214][T12050] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1849'. [ 861.794999][ T5809] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 862.006986][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 862.027640][ T5809] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 862.066902][ T5809] usb 2-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 862.088121][ T5809] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 862.108366][ T5809] usb 2-1: Product: syz [ 862.117473][ T5809] usb 2-1: Manufacturer: syz [ 862.132378][ T5809] usb 2-1: SerialNumber: syz [ 862.143737][ T5809] usb 2-1: config 0 descriptor?? [ 862.160706][T12056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.170137][T12056] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 862.406747][ T5809] option 2-1:0.0: GSM modem (1-port) converter detected [ 862.465997][T12067] tipc: Enabling of bearer rejected, failed to enable media [ 862.476913][ T5809] usb 2-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 862.641758][ T5854] usb 2-1: USB disconnect, device number 31 [ 862.670858][ T5854] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 862.693189][ T5854] option 2-1:0.0: device disconnected [ 865.564931][T12085] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1857'. [ 867.207591][T12094] overlayfs: failed to clone upperpath [ 867.372286][T12095] overlayfs: missing 'lowerdir' [ 867.944293][T12100] random: crng reseeded on system resumption [ 869.426189][T12104] overlayfs: missing 'lowerdir' [ 870.249047][T12109] random: crng reseeded on system resumption [ 870.370450][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.377000][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.297913][T12115] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1866'. [ 871.555251][T10474] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 871.818181][T10474] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x6 has invalid maxpacket 1023 [ 871.931607][T10474] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 872.054229][T10474] usb 5-1: New USB device found, idVendor=2c7c, idProduct=030e, bcdDevice=81.28 [ 872.144009][T10474] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.210975][T10474] usb 5-1: Product: syz [ 872.263037][T10474] usb 5-1: Manufacturer: syz [ 872.323737][T10474] usb 5-1: SerialNumber: syz [ 872.353316][T10474] usb 5-1: config 0 descriptor?? [ 872.360042][T12112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.368694][T12112] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 872.438100][T10474] option 5-1:0.0: GSM modem (1-port) converter detected [ 872.482276][T10474] usb 5-1: GSM modem (1-port) converter now attached to ttyUSB0 [ 874.501405][ T9] usb 5-1: USB disconnect, device number 14 [ 875.765754][ T9] option1 ttyUSB0: GSM modem (1-port) converter now disconnected from ttyUSB0 [ 875.782985][ T9] option 5-1:0.0: device disconnected [ 875.869447][T12137] random: crng reseeded on system resumption [ 876.535600][T12139] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1873'. [ 878.516557][T12145] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1875'. [ 878.934960][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 878.937371][T12147] ceph: No mds server is up or the cluster is laggy [ 878.941309][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 881.078949][T12170] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1880'. [ 881.093092][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 881.100006][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 881.235034][T12172] ceph: No mds server is up or the cluster is laggy [ 881.365201][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 881.371369][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 882.068435][ T5809] IPVS: starting estimator thread 0... [ 882.184791][T12179] IPVS: using max 17 ests per chain, 40800 per kthread [ 882.572813][T12184] overlayfs: failed to clone upperpath [ 883.029180][T12185] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1885'. [ 887.868692][T12216] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1895'. [ 893.374175][T12244] overlayfs: failed to clone upperpath [ 913.444778][T12343] overlayfs: failed to clone upperpath [ 914.309421][ T9] libceph: connect (1)[c::]:6789 error -101 [ 914.318311][ T9] libceph: mon0 (1)[c::]:6789 connect error [ 914.357478][T12347] ceph: No mds server is up or the cluster is laggy [ 919.164997][T12377] overlayfs: failed to clone upperpath [ 921.884160][T12392] syzkaller0: entered promiscuous mode [ 921.894747][T12392] syzkaller0: entered allmulticast mode [ 924.475157][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 924.481356][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 924.511486][T12402] ceph: No mds server is up or the cluster is laggy [ 924.782327][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 924.789783][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 927.005209][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 927.011314][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 927.025899][T12415] ceph: No mds server is up or the cluster is laggy [ 927.219081][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 927.228923][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 927.262710][T12420] ceph: No mds server is up or the cluster is laggy [ 927.447433][T12429] overlayfs: failed to clone upperpath [ 927.510560][T10474] libceph: connect (1)[c::]:6789 error -101 [ 927.649703][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 935.636603][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 935.644141][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 941.602525][T12477] overlayfs: failed to clone upperpath [ 947.497173][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 947.525258][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 947.536710][T12500] ceph: No mds server is up or the cluster is laggy [ 949.476760][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 949.933691][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 949.959099][T12516] ceph: No mds server is up or the cluster is laggy [ 949.966389][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 949.982779][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 950.241163][T12526] loop4: detected capacity change from 0 to 164 [ 958.916991][T12568] loop4: detected capacity change from 0 to 64 [ 960.562895][T12567] Trying to free block not in datazone [ 960.569147][T12567] Trying to free block not in datazone [ 960.574729][T12567] Trying to free block not in datazone [ 960.580220][T12567] Trying to free block not in datazone [ 960.586698][T12567] minix_free_block (loop4:6): bit already cleared [ 960.593685][T12567] Trying to free block not in datazone [ 960.599269][T12567] Trying to free block not in datazone [ 963.055043][T12577] loop1: detected capacity change from 0 to 64 [ 968.445948][T11094] libceph: connect (1)[c::]:6789 error -101 [ 968.452069][T11094] libceph: mon0 (1)[c::]:6789 connect error [ 968.460701][T12610] loop1: detected capacity change from 0 to 164 [ 968.479646][T12601] ceph: No mds server is up or the cluster is laggy [ 968.487367][T11094] libceph: connect (1)[c::]:6789 error -101 [ 968.493572][T11094] libceph: mon0 (1)[c::]:6789 connect error [ 968.535129][T12612] ceph: No mds server is up or the cluster is laggy [ 968.937872][T11094] libceph: connect (1)[c::]:6789 error -101 [ 968.943962][T11094] libceph: mon0 (1)[c::]:6789 connect error [ 968.965085][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 968.971102][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 969.531183][T11094] libceph: connect (1)[c::]:6789 error -101 [ 969.539143][T11094] libceph: mon0 (1)[c::]:6789 connect error [ 969.552120][ T5816] libceph: connect (1)[c::]:6789 error -101 [ 969.559704][ T5816] libceph: mon0 (1)[c::]:6789 connect error [ 970.709897][T12620] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 971.549346][T12627] overlayfs: failed to clone upperpath [ 971.662712][T12628] overlayfs: missing 'lowerdir' [ 977.998885][T12652] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2001'. [ 984.229765][T12673] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2009'. [ 986.362264][T12686] netlink: 72 bytes leftover after parsing attributes in process `syz.4.2014'. [ 990.164912][T12704] syzkaller0: entered promiscuous mode [ 990.172766][T12704] syzkaller0: entered allmulticast mode [ 993.809568][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 993.818636][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 996.072147][T12731] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2025'. [ 997.319557][T11878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 997.330728][T11878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 997.340591][T11878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 997.349907][T11878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 997.359432][T11878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 997.367000][T11878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 999.610671][T12756] syzkaller0: entered promiscuous mode [ 999.631785][T12756] syzkaller0: entered allmulticast mode [ 1001.674705][T11878] Bluetooth: hci4: command tx timeout [ 1003.960217][T11878] Bluetooth: hci4: command tx timeout [ 1006.066828][T11878] Bluetooth: hci4: command tx timeout [ 1006.547588][ T6290] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1006.590952][T11094] libceph: connect (1)[c::]:6789 error -101 [ 1006.630030][T11094] libceph: mon0 (1)[c::]:6789 connect error [ 1006.797060][T12783] ceph: No mds server is up or the cluster is laggy [ 1007.663074][ T6290] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1007.882951][ T6290] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.124813][T11878] Bluetooth: hci4: command tx timeout [ 1008.518715][ T6290] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.568698][T12746] chnl_net:caif_netlink_parms(): no params data found [ 1009.882041][T12746] bridge0: port 1(bridge_slave_0) entered blocking state [ 1009.916368][T12746] bridge0: port 1(bridge_slave_0) entered disabled state [ 1011.015546][T12746] bridge_slave_0: entered allmulticast mode [ 1011.045570][T12746] bridge_slave_0: entered promiscuous mode [ 1011.067914][T12746] bridge0: port 2(bridge_slave_1) entered blocking state [ 1011.084035][T12746] bridge0: port 2(bridge_slave_1) entered disabled state [ 1011.109209][T12746] bridge_slave_1: entered allmulticast mode [ 1011.137243][T12746] bridge_slave_1: entered promiscuous mode [ 1011.467769][T12746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1011.530731][T12818] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2036'. [ 1011.549859][T12746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1012.667719][T12746] team0: Port device team_slave_0 added [ 1012.945588][T12746] team0: Port device team_slave_1 added [ 1013.468212][T12838] loop4: detected capacity change from 0 to 164 [ 1014.265958][T12746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1014.272998][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1014.886467][T12746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1016.806744][T12852] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1016.815929][T12746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1016.853788][T12746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1017.194748][T12746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1018.923330][T12858] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2055'. [ 1019.150154][T12746] hsr_slave_0: entered promiscuous mode [ 1019.180443][T12746] hsr_slave_1: entered promiscuous mode [ 1019.201675][T12746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1019.234750][T12746] Cannot create hsr debugfs directory [ 1019.551574][T12876] random: crng reseeded on system resumption [ 1021.162784][T12881] overlayfs: failed to resolve './file2': -2 [ 1024.706712][T12898] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2060'. [ 1027.487946][T12913] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2065'. [ 1029.759756][T12746] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1029.995383][ T6290] hsr_slave_0: left promiscuous mode [ 1030.274686][ T6290] hsr_slave_1: left promiscuous mode [ 1030.308268][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1030.381329][T12936] loop4: detected capacity change from 0 to 64 [ 1030.500654][T12936] Trying to free block not in datazone [ 1030.506537][T12936] Trying to free block not in datazone [ 1030.512097][T12936] Trying to free block not in datazone [ 1030.517699][T12936] Trying to free block not in datazone [ 1030.524174][T12936] minix_free_block (loop4:6): bit already cleared [ 1030.531482][T12936] Trying to free block not in datazone [ 1030.537130][T12936] Trying to free block not in datazone [ 1030.797877][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1031.237718][ T6290] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1031.266627][ T6290] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1031.324785][ T6290] bridge_slave_1: left allmulticast mode [ 1031.334640][ T6290] bridge_slave_1: left promiscuous mode [ 1031.364013][ T6290] bridge0: port 2(bridge_slave_1) entered disabled state [ 1031.408509][ T6290] bridge_slave_0: left allmulticast mode [ 1031.414338][ T6290] bridge_slave_0: left promiscuous mode [ 1031.425392][ T6290] bridge0: port 1(bridge_slave_0) entered disabled state [ 1031.502186][ T6290] veth1_macvtap: left promiscuous mode [ 1031.516686][ T6290] veth0_macvtap: left promiscuous mode [ 1031.527898][ T6290] veth1_vlan: left promiscuous mode [ 1031.538499][ T6290] veth0_vlan: left promiscuous mode [ 1033.980913][ T6290] bond1 (unregistering): Released all slaves [ 1034.073593][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 1034.079863][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 1034.125250][T12952] ceph: No mds server is up or the cluster is laggy [ 1036.646595][ T6290] team0 (unregistering): Port device team_slave_1 removed [ 1036.729515][ T6290] team0 (unregistering): Port device team_slave_0 removed [ 1036.801046][ T6290] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1036.891764][ T6290] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1038.315021][ T6290] bond0 (unregistering): Released all slaves [ 1038.957089][T12746] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1039.162558][T12746] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1039.606011][T12942] tipc: Enabling of bearer rejected, failed to enable media [ 1039.618643][T12746] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1039.882162][T12986] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2082'. [ 1041.528062][ T5084] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1041.540263][ T5084] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1041.555290][ T5084] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1041.603281][T12994] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2076'. [ 1041.621947][ T5084] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1041.644217][ T5084] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 1041.653316][ T5084] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1042.417909][T12746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1042.515390][T12746] 8021q: adding VLAN 0 to HW filter on device team0 [ 1042.668552][ T2931] bridge0: port 1(bridge_slave_0) entered blocking state [ 1042.675818][ T2931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1044.024689][ T5084] Bluetooth: hci1: command tx timeout [ 1044.067730][ T2931] bridge0: port 2(bridge_slave_1) entered blocking state [ 1044.074972][ T2931] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1045.995686][ T1013] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.045503][T11878] Bluetooth: hci1: command tx timeout [ 1047.947371][ T1013] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.124771][T11878] Bluetooth: hci1: command tx timeout [ 1048.307042][ T1013] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1048.466121][T13041] overlayfs: failed to clone upperpath [ 1049.117183][T13000] chnl_net:caif_netlink_parms(): no params data found [ 1049.361201][ T1013] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1050.538320][T11878] Bluetooth: hci1: command tx timeout [ 1051.201455][T13000] bridge0: port 1(bridge_slave_0) entered blocking state [ 1051.264738][T13000] bridge0: port 1(bridge_slave_0) entered disabled state [ 1051.272135][T13000] bridge_slave_0: entered allmulticast mode [ 1051.327487][T13000] bridge_slave_0: entered promiscuous mode [ 1051.376345][T13000] bridge0: port 2(bridge_slave_1) entered blocking state [ 1051.383544][T13000] bridge0: port 2(bridge_slave_1) entered disabled state [ 1051.424780][T13000] bridge_slave_1: entered allmulticast mode [ 1051.432320][T13000] bridge_slave_1: entered promiscuous mode [ 1051.491215][T12746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1051.865490][T13000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1051.923804][T13000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1052.318844][T13000] team0: Port device team_slave_0 added [ 1052.368205][T13000] team0: Port device team_slave_1 added [ 1052.611203][T13000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1052.683326][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1052.784616][T13000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1052.947676][T13000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1053.013097][T13000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1053.142323][T13000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1053.216052][T13078] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2084'. [ 1055.945845][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.954706][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1055.995894][T13000] hsr_slave_0: entered promiscuous mode [ 1056.055216][T13000] hsr_slave_1: entered promiscuous mode [ 1056.105934][T13000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1056.113571][T13000] Cannot create hsr debugfs directory [ 1058.365717][ T5084] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1058.377522][ T5084] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1058.400435][ T5084] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1058.497488][ T5084] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1058.519294][ T5084] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1058.528430][ T5084] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1059.358613][T13000] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1059.381826][T13000] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1059.530630][T13000] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1060.234608][T13000] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1060.428319][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1060.479969][T13097] chnl_net:caif_netlink_parms(): no params data found [ 1062.133507][ T5084] Bluetooth: hci3: command tx timeout [ 1062.493852][ T1013] hsr_slave_0: left promiscuous mode [ 1062.515307][ T1013] hsr_slave_1: left promiscuous mode [ 1062.541981][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1062.572065][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1062.624435][ T1013] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1062.664734][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1062.691464][ T1013] bridge_slave_1: left allmulticast mode [ 1062.704938][ T1013] bridge_slave_1: left promiscuous mode [ 1062.710769][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1062.743011][ T1013] bridge_slave_0: left allmulticast mode [ 1062.754721][ T1013] bridge_slave_0: left promiscuous mode [ 1062.760722][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1062.813870][ T1013] veth1_macvtap: left promiscuous mode [ 1062.819660][ T1013] veth0_macvtap: left promiscuous mode [ 1062.851146][ T1013] veth1_vlan: left promiscuous mode [ 1062.875615][ T1013] veth0_vlan: left promiscuous mode [ 1062.904501][T13153] overlayfs: failed to clone upperpath [ 1063.938649][T13158] overlayfs: failed to clone upperpath [ 1063.952586][T13158] overlayfs: failed to clone upperpath [ 1064.211851][ T5084] Bluetooth: hci3: command tx timeout [ 1064.289311][T13164] overlayfs: failed to clone upperpath [ 1066.369223][ T5084] Bluetooth: hci3: command tx timeout [ 1066.472788][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1066.563960][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1066.653646][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1066.743225][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1067.006166][ T5084] Bluetooth: hci2: unexpected event 0x03 length: 1 < 11 [ 1067.413227][ T1013] bond0 (unregistering): Released all slaves [ 1067.647670][T13097] bridge0: port 1(bridge_slave_0) entered blocking state [ 1067.658459][T13097] bridge0: port 1(bridge_slave_0) entered disabled state [ 1067.666478][T13097] bridge_slave_0: entered allmulticast mode [ 1067.674016][T13097] bridge_slave_0: entered promiscuous mode [ 1067.684125][T13097] bridge0: port 2(bridge_slave_1) entered blocking state [ 1067.692646][T13097] bridge0: port 2(bridge_slave_1) entered disabled state [ 1067.700006][T13097] bridge_slave_1: entered allmulticast mode [ 1067.709232][T13097] bridge_slave_1: entered promiscuous mode [ 1067.801700][T13180] random: crng reseeded on system resumption [ 1067.862117][T13181] autofs4:pid:13181:autofs_fill_super: called with bogus options [ 1068.471661][ T5084] Bluetooth: hci3: command tx timeout [ 1068.521773][T13097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1069.960810][T13097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1070.076902][T13000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1070.127623][T13097] team0: Port device team_slave_0 added [ 1070.216665][T13097] team0: Port device team_slave_1 added [ 1070.469437][T13000] 8021q: adding VLAN 0 to HW filter on device team0 [ 1070.525268][T13097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1070.532310][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.594561][T13097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1070.624719][T13097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1070.631743][T13097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1070.695024][T13097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1070.830348][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1070.837641][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1070.906772][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1070.913973][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1071.535830][ T1013] IPVS: stop unused estimator thread 0... [ 1071.841779][T13097] hsr_slave_0: entered promiscuous mode [ 1071.875341][T13097] hsr_slave_1: entered promiscuous mode [ 1071.916833][T13000] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1073.057267][T13205] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2110'. [ 1074.014964][ T9] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 1074.377432][T13000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1075.546397][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1075.584720][ T9] usb 5-1: config 0 has no interfaces? [ 1075.597685][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1075.611998][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1075.622423][ T9] usb 5-1: Product: syz [ 1075.635079][ T9] usb 5-1: Manufacturer: syz [ 1075.639815][ T9] usb 5-1: SerialNumber: syz [ 1075.650700][ T9] usb 5-1: config 0 descriptor?? [ 1075.925249][ T5084] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1075.969659][ T5854] usb 5-1: USB disconnect, device number 15 [ 1079.048285][T13000] veth0_vlan: entered promiscuous mode [ 1079.255536][T13000] veth1_vlan: entered promiscuous mode [ 1079.277554][T13255] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2117'. [ 1079.642140][T13000] veth0_macvtap: entered promiscuous mode [ 1079.771207][T13000] veth1_macvtap: entered promiscuous mode [ 1079.892574][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.916004][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.935620][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1079.957358][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1079.984567][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1080.001381][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.023613][T13000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1080.152934][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.174145][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.197795][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.224237][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.240322][T13000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1080.254140][T13000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1080.446458][T13000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1081.192310][T13274] overlayfs: failed to clone upperpath [ 1081.267051][T13275] overlayfs: missing 'workdir' [ 1081.424709][ T1013] hsr_slave_0: left promiscuous mode [ 1081.441141][ T1013] hsr_slave_1: left promiscuous mode [ 1081.453570][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1081.475015][ T1013] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1081.492451][ T1013] bridge_slave_1: left allmulticast mode [ 1081.498891][ T1013] bridge_slave_1: left promiscuous mode [ 1081.505035][ T1013] bridge0: port 2(bridge_slave_1) entered disabled state [ 1081.518575][ T1013] bridge_slave_0: left allmulticast mode [ 1081.524278][ T1013] bridge_slave_0: left promiscuous mode [ 1081.531658][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 1081.801632][ T5757] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 1082.665311][ T5757] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1082.675873][ T5757] usb 5-1: config 0 has no interfaces? [ 1082.704860][ T5757] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1082.714163][ T5757] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1082.733730][ T5757] usb 5-1: Product: syz [ 1082.738299][ T5757] usb 5-1: Manufacturer: syz [ 1082.742950][ T5757] usb 5-1: SerialNumber: syz [ 1082.781326][ T5757] usb 5-1: config 0 descriptor?? [ 1082.958095][ T1013] team0 (unregistering): Port device team_slave_1 removed [ 1083.042277][ T5084] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1083.052405][T10474] usb 5-1: USB disconnect, device number 16 [ 1083.108550][ T1013] team0 (unregistering): Port device team_slave_0 removed [ 1083.161711][ T1013] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1083.230756][ T1013] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1083.940330][ T1013] bond0 (unregistering): Released all slaves [ 1084.358133][T13000] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.422858][T13000] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.504597][T13000] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.521396][T13000] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1084.572356][T13097] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1084.591692][T13097] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1084.613206][T13097] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1084.632199][T13097] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1084.714131][T13302] tipc: Enabling of bearer rejected, failed to enable media [ 1084.915778][T13322] overlayfs: failed to clone upperpath [ 1085.005468][T13319] netlink: 44 bytes leftover after parsing attributes in process `syz.4.2124'. [ 1087.100200][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.122587][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.229049][T10474] libceph: connect (1)[c::]:6789 error -101 [ 1087.233459][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1087.243492][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1087.253523][T10474] libceph: mon0 (1)[c::]:6789 connect error [ 1087.347358][T13097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1087.428796][T13097] 8021q: adding VLAN 0 to HW filter on device team0 [ 1087.461642][ T32] bridge0: port 1(bridge_slave_0) entered blocking state [ 1087.468903][ T32] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1087.520536][ T32] bridge0: port 2(bridge_slave_1) entered blocking state [ 1087.527804][ T32] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1089.120992][T13329] ceph: No mds server is up or the cluster is laggy [ 1089.122344][ T5854] libceph: connect (1)[c::]:6789 error -101 [ 1089.133757][ T5854] libceph: mon0 (1)[c::]:6789 connect error [ 1090.684125][T13097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1092.335801][T13373] loop4: detected capacity change from 0 to 64 [ 1093.614440][T13371] Trying to free block not in datazone [ 1093.620053][T13371] Trying to free block not in datazone [ 1093.625662][T13371] Trying to free block not in datazone [ 1093.631159][T13371] Trying to free block not in datazone [ 1093.636739][T13371] minix_free_block (loop4:6): bit already cleared [ 1093.643199][T13371] Trying to free block not in datazone [ 1093.649068][T13371] Trying to free block not in datazone [ 1094.207765][T13097] veth0_vlan: entered promiscuous mode [ 1094.229417][T13097] veth1_vlan: entered promiscuous mode [ 1094.271648][T13097] veth0_macvtap: entered promiscuous mode [ 1094.283210][T13097] veth1_macvtap: entered promiscuous mode [ 1094.402811][ T8] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 1094.501301][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.512118][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.522853][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.544478][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.557525][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.568899][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.578831][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1094.589417][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1094.608292][T13097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1094.688628][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1094.909677][ T8] usb 7-1: config 0 has no interfaces? [ 1095.173106][ T8] usb 7-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1095.184383][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.239085][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.255288][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.288264][ T8] usb 7-1: Product: syz [ 1095.292509][ T8] usb 7-1: Manufacturer: syz [ 1095.314865][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.337132][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.347951][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.358503][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.369670][T13097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1095.373758][ T8] usb 7-1: SerialNumber: syz [ 1095.380590][T13097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1095.399550][T13097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1095.418906][T13097] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.432077][ T8] usb 7-1: config 0 descriptor?? [ 1095.454635][T13097] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.463743][T13097] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.484844][T13097] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.513956][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 1095.527168][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 1095.542238][T13399] ceph: No mds server is up or the cluster is laggy [ 1095.855022][ T5855] libceph: connect (1)[c::]:6789 error -101 [ 1095.861162][ T5855] libceph: mon0 (1)[c::]:6789 connect error [ 1096.359759][ T5084] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 1096.373698][ T2931] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.423402][ T5855] usb 7-1: USB disconnect, device number 2 [ 1096.445747][ T2931] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.581943][ T2913] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1096.608906][ T2913] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1096.821919][T13377] libceph: connect (1)[c::]:6789 error -101 [ 1096.828841][T13377] libceph: mon0 (1)[c::]:6789 connect error [ 1097.380232][T13377] libceph: connect (1)[c::]:6789 error -101 [ 1097.392327][T13408] ceph: No mds server is up or the cluster is laggy [ 1097.534824][T13377] libceph: mon0 (1)[c::]:6789 connect error [ 1100.740965][T13443] random: crng reseeded on system resumption [ 1100.811863][T13444] autofs4:pid:13444:autofs_fill_super: called with bogus options [ 1101.931369][T13449] autofs4:pid:13449:autofs_fill_super: called with bogus options [ 1102.978791][T11878] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1102.989953][T11878] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1102.998775][T11878] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1103.064256][T11878] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1103.085179][T11878] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1103.094004][T11878] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1103.281936][T13464] random: crng reseeded on system resumption [ 1103.347461][T13465] autofs4:pid:13465:autofs_fill_super: called with bogus options [ 1103.629133][ T9] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 1104.268829][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1104.288500][ T9] usb 5-1: config 0 has no interfaces? [ 1104.320597][ T9] usb 5-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 1104.330348][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1104.347346][ T9] usb 5-1: Product: syz [ 1104.352546][ T9] usb 5-1: Manufacturer: syz [ 1104.378662][ T9] usb 5-1: SerialNumber: syz [ 1104.403484][ T9] usb 5-1: config 0 descriptor?? [ 1104.507368][ T2913] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1105.216406][ T5084] Bluetooth: hci4: command tx timeout [ 1105.407048][ T5084] Bluetooth: hci0: unexpected event 0x03 length: 1 < 11 [ 1105.450566][ T8] usb 5-1: USB disconnect, device number 17 [ 1105.621572][T13484] random: crng reseeded on system resumption [ 1105.666853][ T5809] libceph: connect (1)[c::]:6789 error -101 [ 1105.673258][ T5809] libceph: mon0 (1)[c::]:6789 connect error [ 1105.693780][T13480] ceph: No mds server is up or the cluster is laggy [ 1105.796256][ T2913] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1106.507916][T13484] autofs4:pid:13484:autofs_fill_super: called with bogus options [ 1106.898497][ T2913] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1107.246242][ T5084] Bluetooth: hci4: command tx timeout [ 1107.983685][ T2913] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1108.079150][T13501] random: crng reseeded on system resumption [ 1108.993723][T13501] autofs4:pid:13501:autofs_fill_super: called with bogus options [ 1109.324803][ T5084] Bluetooth: hci4: command tx timeout [ 1109.496876][T13509] random: crng reseeded on system resumption [ 1109.647770][T13510] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 1110.470198][T13509] autofs4:pid:13509:autofs_fill_super: called with bogus options [ 1110.998716][T13510] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2161'. [ 1111.042600][T13519] autofs4:pid:13519:autofs_fill_super: called with bogus options [ 1111.068079][T13510] dummy0: entered promiscuous mode [ 1111.074045][T13510] macvtap1: entered promiscuous mode [ 1111.107217][T13510] macvtap1: entered allmulticast mode [ 1111.115273][T13510] dummy0: entered allmulticast mode [ 1111.138924][T13458] chnl_net:caif_netlink_parms(): no params data found [ 1111.404798][ T5084] Bluetooth: hci4: command tx timeout [ 1112.580937][T13522] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2156'. [ 1112.635918][T13522] team_slave_0: entered promiscuous mode [ 1112.641990][T13522] team_slave_1: entered promiscuous mode [ 1112.662989][T13522] macvtap1: entered promiscuous mode [ 1112.668792][T13522] team0: entered promiscuous mode [ 1112.675315][T13522] macvtap1: entered allmulticast mode [ 1112.680833][T13522] team0: entered allmulticast mode [ 1112.686210][T13522] team_slave_0: entered allmulticast mode [ 1112.691993][T13522] team_slave_1: entered allmulticast mode [ 1112.701701][T13522] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 1112.722248][T13528] team0: left allmulticast mode [ 1112.729013][T13528] team_slave_0: left allmulticast mode [ 1112.734623][T13528] team_slave_1: left allmulticast mode [ 1112.740145][T13528] team0: left promiscuous mode [ 1112.745878][T13528] team_slave_0: left promiscuous mode [ 1112.751339][T13528] team_slave_1: left promiscuous mode [ 1112.972074][T13543] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2160'. [ 1112.982030][T13543] wg1: entered promiscuous mode [ 1112.989036][T13543] wg1: entered allmulticast mode [ 1113.028574][T13546] syzkaller0: entered promiscuous mode [ 1113.034132][T13546] syzkaller0: entered allmulticast mode [ 1113.163703][T13458] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.181562][T13458] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.193262][T13458] bridge_slave_0: entered allmulticast mode [ 1113.203750][T13458] bridge_slave_0: entered promiscuous mode [ 1113.299202][T13560] random: crng reseeded on system resumption [ 1114.970621][T13560] autofs4:pid:13560:autofs_fill_super: called with bogus options [ 1115.282107][T13458] bridge0: port 2(bridge_slave_1) entered blocking state [ 1115.324790][T13458] bridge0: port 2(bridge_slave_1) entered disabled state [ 1115.333064][T13564] autofs4:pid:13564:autofs_fill_super: called with bogus options [ 1115.346025][T13458] bridge_slave_1: entered allmulticast mode [ 1115.397268][T13458] bridge_slave_1: entered promiscuous mode [ 1115.610986][T13568] autofs4:pid:13568:autofs_fill_super: called with bogus options [ 1116.937464][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.943893][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1117.048532][T13578] random: crng reseeded on system resumption [ 1117.890202][T13578] autofs4:pid:13578:autofs_fill_super: called with bogus options [ 1118.168620][T13458] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1118.210804][T13458] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1118.471294][T13458] team0: Port device team_slave_0 added [ 1118.560642][T12450] libceph: connect (1)[c::]:6789 error -101 [ 1118.575455][T12450] libceph: mon0 (1)[c::]:6789 connect error [ 1118.588031][T13587] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2170'. [ 1118.613070][T13590] ceph: No mds server is up or the cluster is laggy [ 1118.620553][T13587] hsr0: entered promiscuous mode [ 1118.637637][T13587] hsr0: entered allmulticast mode [ 1118.677112][T13587] hsr_slave_0: entered allmulticast mode [ 1118.687677][T13587] hsr_slave_1: entered allmulticast mode [ 1118.707748][T13458] team0: Port device team_slave_1 added [ 1119.030810][T13458] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1119.044790][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1119.093877][T13458] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1119.189471][T13603] random: crng reseeded on system resumption [ 1119.863321][T13458] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1119.945498][T13458] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1120.085618][T13603] autofs4:pid:13603:autofs_fill_super: called with bogus options [ 1120.220608][T13458] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1122.838478][T13620] random: crng reseeded on system resumption [ 1123.567131][T13620] autofs4:pid:13620:autofs_fill_super: called with bogus options [ 1124.000828][T13624] loop4: detected capacity change from 0 to 32768 [ 1124.397451][ T27] audit: type=1800 audit(1768263491.856:29): pid=13624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2178" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1126.425065][ T2913] hsr_slave_0: left promiscuous mode [ 1126.463284][ T2913] hsr_slave_1: left promiscuous mode [ 1126.497389][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1126.514684][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1126.540163][ T2913] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1126.559740][ T2913] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1126.585353][ T2913] bridge_slave_1: left allmulticast mode [ 1126.604939][ T2913] bridge_slave_1: left promiscuous mode [ 1126.610801][ T2913] bridge0: port 2(bridge_slave_1) entered disabled state [ 1126.705690][ T2913] bridge_slave_0: left allmulticast mode [ 1126.711424][ T2913] bridge_slave_0: left promiscuous mode [ 1126.751456][ T2913] bridge0: port 1(bridge_slave_0) entered disabled state [ 1126.880540][T13639] random: crng reseeded on system resumption [ 1126.916865][T12450] libceph: connect (1)[c::]:6789 error -101 [ 1126.976965][T12450] libceph: mon0 (1)[c::]:6789 connect error [ 1127.075255][T13636] ceph: No mds server is up or the cluster is laggy [ 1127.095966][T12450] libceph: connect (1)[c::]:6789 error -101 [ 1127.161249][T12450] libceph: mon0 (1)[c::]:6789 connect error [ 1127.191135][ T2913] veth1_macvtap: left promiscuous mode [ 1127.257568][ T2913] veth0_macvtap: left promiscuous mode [ 1127.332040][ T2913] veth1_vlan: left promiscuous mode [ 1127.409971][ T2913] veth0_vlan: left promiscuous mode [ 1127.537192][T12450] libceph: connect (1)[c::]:6789 error -101 [ 1127.607082][T12450] libceph: mon0 (1)[c::]:6789 connect error [ 1127.847325][T13639] autofs4:pid:13639:autofs_fill_super: called with bogus options [ 1130.473877][T13377] libceph: connect (1)[c::]:6789 error -101 [ 1130.491618][T13377] libceph: mon0 (1)[c::]:6789 connect error [ 1130.529334][T13647] ceph: No mds server is up or the cluster is laggy [ 1131.238535][ T2913] team0 (unregistering): Port device team_slave_1 removed [ 1132.077424][ T2913] team0 (unregistering): Port device team_slave_0 removed [ 1132.274053][ T2913] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1132.908368][ T2913] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1135.688900][T13665] random: crng reseeded on system resumption [ 1135.731877][ T2913] bond0 (unregistering): Released all slaves [ 1135.747930][T13666] autofs4:pid:13666:autofs_fill_super: called with bogus options [ 1136.519440][T13458] hsr_slave_0: entered promiscuous mode [ 1136.538947][T13458] hsr_slave_1: entered promiscuous mode [ 1136.574717][T13458] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1136.595017][T13458] Cannot create hsr debugfs directory [ 1137.927991][T13673] loop5: detected capacity change from 0 to 164 [ 1139.945110][T13673] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1140.824283][T13697] overlayfs: missing 'lowerdir' [ 1141.660563][ T2913] IPVS: stop unused estimator thread 0... [ 1144.018394][T13458] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1144.076408][T13458] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1144.097506][T13725] loop5: detected capacity change from 0 to 164 [ 1144.136504][T13458] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1144.789189][T13728] loop4: detected capacity change from 0 to 32768 [ 1144.820705][T13458] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1145.588027][ T27] audit: type=1800 audit(1768263513.036:30): pid=13728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.2202" name="file1" dev="loop4" ino=4 res=0 errno=0 [ 1146.339427][T13725] iso9660: Corrupted directory entry in block 2 of inode 1920 [ 1146.569847][T13458] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1146.629956][T13458] 8021q: adding VLAN 0 to HW filter on device team0 [ 1146.736301][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 1146.743572][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1146.786617][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 1146.793828][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1148.304274][T13766] overlayfs: missing 'lowerdir' [ 1151.026497][T13458] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1151.110681][T13458] veth0_vlan: entered promiscuous mode [ 1151.123075][T13458] veth1_vlan: entered promiscuous mode [ 1151.156270][T13458] veth0_macvtap: entered promiscuous mode [ 1151.166772][T13458] veth1_macvtap: entered promiscuous mode [ 1151.187297][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.203072][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.218296][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.229214][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.244824][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.258880][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.269173][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1151.280107][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.304832][T13458] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1151.345779][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.373580][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.572928][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.584673][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.595085][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.605895][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.617364][T13458] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1151.629948][T13458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1151.651998][T13458] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1151.708431][T13787] overlayfs: missing 'lowerdir' [ 1152.378600][T13458] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.424542][T13458] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.433325][T13458] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.464561][T13458] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1152.745145][ T1316] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.753029][ T1316] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1152.873090][ T2931] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1152.902149][ T2931] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1153.144740][T13802] netlink: 'syz.6.2217': attribute type 2 has an invalid length. [ 1153.153123][T13802] netlink: 'syz.6.2217': attribute type 1 has an invalid length. [ 1155.500121][T13818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2140'. [ 1157.286156][T13845] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2229'. [ 1158.627409][T13896] netlink: 'syz.6.2246': attribute type 46 has an invalid length. [ 1160.203620][T13945] netlink: 'syz.5.2261': attribute type 1 has an invalid length. [ 1160.358665][T13943] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2260'. [ 1160.575649][T13950] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 1160.656306][T13950] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 1161.773252][T13994] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1162.787966][T14025] tipc: Failed to remove unknown binding: 66,1,1/0:2077477249/2077477251 [ 1162.885115][T14029] netlink: 64 bytes leftover after parsing attributes in process `syz.5.2287'. [ 1163.886832][T14058] netlink: 108 bytes leftover after parsing attributes in process `syz.4.2292'. [ 1163.907653][T14058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2292'. [ 1164.284812][T14008] Bluetooth: hci1: command 0x0406 tx timeout [ 1164.792616][T14086] netlink: 1208 bytes leftover after parsing attributes in process `syz.5.2301'. [ 1167.471563][T14165] tipc: Started in network mode [ 1167.493728][T14165] tipc: Node identity 6a9135fa2161, cluster identity 4711 [ 1167.502872][T14165] tipc: Enabled bearer , priority 0 [ 1167.519011][T14165] syzkaller0: entered promiscuous mode [ 1167.528034][T14165] syzkaller0: entered allmulticast mode [ 1167.546783][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2330'. [ 1167.593524][T14169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2330'. [ 1167.645373][T14165] tipc: Resetting bearer [ 1167.683968][T14164] tipc: Resetting bearer [ 1167.763988][T14164] tipc: Disabling bearer [ 1168.060369][T14178] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 1168.070103][ T5854] IPVS: starting estimator thread 0... [ 1168.178393][T14182] IPVS: using max 16 ests per chain, 38400 per kthread [ 1168.417415][T14193] netlink: 'syz.3.2340': attribute type 21 has an invalid length. [ 1168.438144][T14193] netlink: 128 bytes leftover after parsing attributes in process `syz.3.2340'. [ 1168.456455][T14193] netlink: 'syz.3.2340': attribute type 5 has an invalid length. [ 1168.464257][T14193] netlink: 'syz.3.2340': attribute type 6 has an invalid length. [ 1168.497815][T14193] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2340'. [ 1168.881774][T14210] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2345'. [ 1169.213410][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1169.260478][T14220] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 1169.499509][T14229] netlink: 36 bytes leftover after parsing attributes in process `syz.5.2352'. [ 1169.744527][T14239] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2357'. [ 1169.853767][T14242] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2358'. [ 1170.453543][T14261] netlink: 64 bytes leftover after parsing attributes in process `syz.3.2363'. [ 1171.499846][T14283] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2372'. [ 1171.961245][T14293] bridge0: port 1(bridge_slave_0) entered disabled state [ 1173.244070][T14347] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1176.938195][T14393] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 1177.184324][T14403] netem: change failed [ 1177.276875][T14380] __nla_validate_parse: 2 callbacks suppressed [ 1177.276893][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 1177.301233][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 1177.317880][T14380] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.327684][T14380] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.336549][T14380] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.345414][T14380] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1177.392866][T14380] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 1177.428310][T14380] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2397'. [ 1177.576934][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.583348][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 1177.831436][T14422] netlink: 200 bytes leftover after parsing attributes in process `syz.6.2408'. [ 1177.848276][T14422] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2408'. [ 1179.035849][T14460] netlink: 'syz.3.2417': attribute type 12 has an invalid length. [ 1179.068589][T14460] netlink: 248 bytes leftover after parsing attributes in process `syz.3.2417'. [ 1179.619017][T14474] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2420'. [ 1180.580967][T14499] syzkaller0: entered promiscuous mode [ 1180.600729][T14499] syzkaller0: entered allmulticast mode [ 1180.631295][T14499] tipc: Started in network mode [ 1180.648285][T14499] tipc: Node identity 4a48b0509133, cluster identity 4711 [ 1180.675180][T14499] tipc: Enabled bearer , priority 0 [ 1180.763012][T14498] tipc: Resetting bearer [ 1180.854356][T14513] netlink: 'syz.4.2429': attribute type 4 has an invalid length. [ 1180.866894][T14498] tipc: Disabling bearer [ 1181.196402][T14520] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2430'. [ 1181.624209][T14538] tipc: Started in network mode [ 1181.641259][T14538] tipc: Node identity ae11735f967a, cluster identity 4711 [ 1181.666596][T14538] tipc: Enabled bearer , priority 0 [ 1181.700272][T14541] syzkaller0: entered promiscuous mode [ 1181.711643][T14541] syzkaller0: entered allmulticast mode [ 1181.853783][T14538] tipc: Resetting bearer [ 1181.923456][T14537] tipc: Resetting bearer [ 1182.016396][T14537] tipc: Disabling bearer [ 1182.513042][T14561] netlink: 'syz.5.2437': attribute type 4 has an invalid length. [ 1183.026681][T14569] vlan2: entered promiscuous mode [ 1183.031804][T14569] bridge0: entered promiscuous mode [ 1184.192309][ T27] audit: type=1326 audit(1768263551.636:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.294673][ T27] audit: type=1326 audit(1768263551.646:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.414889][ T27] audit: type=1326 audit(1768263551.646:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.514900][ T27] audit: type=1326 audit(1768263551.656:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=245 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.634607][ T27] audit: type=1326 audit(1768263551.656:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.712468][T14602] tipc: Enabled bearer , priority 0 [ 1184.724579][ T27] audit: type=1326 audit(1768263551.656:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.766153][T14602] syzkaller0: entered promiscuous mode [ 1184.770341][T14008] Bluetooth: hci3: command 0x0406 tx timeout [ 1184.782384][T14602] syzkaller0: entered allmulticast mode [ 1184.799384][ T27] audit: type=1326 audit(1768263551.656:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.821992][ T27] audit: type=1326 audit(1768263551.656:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.846002][ T27] audit: type=1326 audit(1768263551.656:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=14593 comm="syz.3.2443" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f3f8058f749 code=0x7ffc0000 [ 1184.915270][T14603] tipc: Resetting bearer [ 1185.030504][T14601] tipc: Resetting bearer [ 1185.540498][T14601] tipc: Disabling bearer [ 1186.378398][T14633] input: syz0 as /devices/virtual/input/input6 [ 1186.476045][ T9] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 1186.664903][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 1186.699170][ T9] usb 5-1: config index 0 descriptor too short (expected 16456, got 72) [ 1186.717956][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1186.932123][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1187.789310][ T9] usb 5-1: config 0 has an invalid interface number: 125 but max is 1 [ 1187.798217][ T9] usb 5-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 1187.809263][ T9] usb 5-1: config 0 has no interface number 0 [ 1187.818014][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 1187.839609][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 1187.963363][ T9] usb 5-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 1188.013628][ T9] usb 5-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1188.088068][ T9] usb 5-1: config 0 interface 125 has no altsetting 0 [ 1188.107867][ T9] usb 5-1: config 0 interface 125 has no altsetting 2 [ 1188.138871][ T9] usb 5-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 1188.164619][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1188.183091][ T9] usb 5-1: Product: syz [ 1188.192583][ T9] usb 5-1: Manufacturer: syz [ 1188.205339][ T9] usb 5-1: SerialNumber: syz [ 1188.235405][ T9] usb 5-1: config 0 descriptor?? [ 1188.293861][ T9] usb 5-1: selecting invalid altsetting 2 [ 1188.452727][T14653] tipc: Enabled bearer , priority 0 [ 1188.462180][T14653] syzkaller0: entered promiscuous mode [ 1188.490551][T14653] syzkaller0: entered allmulticast mode [ 1188.555384][T14653] tipc: Resetting bearer [ 1188.585008][T14652] tipc: Resetting bearer [ 1188.668013][T14652] tipc: Disabling bearer [ 1189.104704][ T9] parport0: fix this legacy no-device port driver! [ 1189.252022][T14667] netlink: 'syz.5.2463': attribute type 46 has an invalid length. [ 1189.278222][T14667] netlink: 'syz.5.2463': attribute type 19 has an invalid length. [ 1191.209124][T11094] usb 5-1: USB disconnect, device number 18 [ 1192.927013][T14715] netlink: 'syz.4.2474': attribute type 46 has an invalid length. [ 1192.974615][T14715] netlink: 'syz.4.2474': attribute type 19 has an invalid length. [ 1194.355125][T13377] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 1194.584814][T13377] usb 4-1: Using ep0 maxpacket: 32 [ 1194.965057][T13377] usb 4-1: config index 0 descriptor too short (expected 156, got 27) [ 1194.973500][T13377] usb 4-1: too many endpoints for config 0 interface 0 altsetting 191: 144, using maximum allowed: 30 [ 1195.004541][T13377] usb 4-1: config 0 interface 0 altsetting 191 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 1195.034699][T13377] usb 4-1: config 0 interface 0 altsetting 191 has 1 endpoint descriptor, different from the interface descriptor's value: 144 [ 1195.054514][T13377] usb 4-1: config 0 interface 0 has no altsetting 0 [ 1195.116795][T13377] usb 4-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1195.134543][T13377] usb 4-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1195.187715][T13377] usb 4-1: Product: syz [ 1195.192033][T13377] usb 4-1: Manufacturer: syz [ 1195.235502][T13377] usb 4-1: SerialNumber: syz [ 1195.276183][T13377] usb 4-1: config 0 descriptor?? [ 1195.305446][T13377] ldusb 4-1:0.0: Interrupt out endpoint not found (using control endpoint instead) [ 1195.374705][T13377] ldusb 4-1:0.0: LD USB Device #0 now attached to major 180 minor 0 [ 1195.838452][T13377] usb 4-1: USB disconnect, device number 3 [ 1195.879875][T13377] ldusb 4-1:0.0: LD USB Device #0 now disconnected [ 1197.620538][T14778] input: syz0 as /devices/virtual/input/input7 [ 1199.334948][T14815] netlink: 'syz.4.2502': attribute type 4 has an invalid length. [ 1199.720177][T14829] vlan2: entered promiscuous mode [ 1199.726006][T14829] bridge0: entered promiscuous mode [ 1202.828593][T14869] tipc: Enabled bearer , priority 0 [ 1202.856046][T14869] syzkaller0: entered promiscuous mode [ 1202.879120][T14869] syzkaller0: entered allmulticast mode [ 1202.905484][T14869] tipc: Resetting bearer [ 1202.961084][T14867] tipc: Resetting bearer [ 1203.101629][T14867] tipc: Disabling bearer [ 1203.419032][T14884] netlink: 'syz.5.2519': attribute type 46 has an invalid length. [ 1204.521076][T14891] serio: Serial port ptm0 [ 1204.556962][T14897] kvm_intel: L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 1205.380190][T14916] syzkaller0: entered promiscuous mode [ 1205.394935][T14916] syzkaller0: entered allmulticast mode [ 1205.651625][T14923] tipc: Enabled bearer , priority 0 [ 1205.702624][T14918] syzkaller0: entered promiscuous mode [ 1205.718262][T14918] syzkaller0: entered allmulticast mode [ 1205.867769][T14932] netlink: 'syz.5.2531': attribute type 46 has an invalid length. [ 1205.991790][T14917] tipc: Resetting bearer [ 1206.117366][T14917] tipc: Disabling bearer [ 1206.157153][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1206.174943][T14921] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2530'. [ 1207.425918][T14967] netlink: 'syz.5.2540': attribute type 46 has an invalid length. [ 1207.750832][T14973] tipc: Enabled bearer , priority 0 [ 1207.770623][T14973] syzkaller0: entered promiscuous mode [ 1207.781302][T14973] syzkaller0: entered allmulticast mode [ 1208.373916][T14973] tipc: Resetting bearer [ 1208.463249][T14972] tipc: Resetting bearer [ 1208.614094][T14972] tipc: Disabling bearer [ 1209.056324][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'. [ 1209.074878][T14988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2546'. [ 1209.325151][T15001] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2551'. [ 1212.505283][T15034] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2563'. [ 1212.695535][T15040] syzkaller0: entered promiscuous mode [ 1212.701203][T15040] syzkaller0: entered allmulticast mode [ 1212.731362][T15040] tipc: Enabled bearer , priority 0 [ 1212.745045][T15039] tipc: Resetting bearer [ 1212.808231][T15039] tipc: Disabling bearer [ 1212.898461][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 1212.935803][T15044] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2564'. [ 1213.345091][T15062] syzkaller0: entered promiscuous mode [ 1213.360926][T15062] syzkaller0: entered allmulticast mode [ 1213.815317][T15069] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2576'. [ 1214.212769][T15080] syzkaller0: entered promiscuous mode [ 1214.220955][T15080] syzkaller0: entered allmulticast mode [ 1214.241034][T15080] tipc: Enabled bearer , priority 0 [ 1214.258894][T15079] tipc: Resetting bearer [ 1214.349260][T15079] tipc: Disabling bearer [ 1214.670671][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1214.699077][T15092] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2583'. [ 1215.415572][T15101] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2587'. [ 1215.477672][T15101] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1215.626917][T15118] syzkaller0: entered promiscuous mode [ 1215.670877][T15118] syzkaller0: entered allmulticast mode [ 1217.206677][T15141] ax25_connect(): syz.6.2598 uses autobind, please contact jreuter@yaina.de [ 1217.232264][T15140] ------------[ cut here ]------------ [ 1217.238867][T15140] refcount_t: decrement hit 0; leaking memory. [ 1217.259342][T15140] WARNING: CPU: 1 PID: 15140 at lib/refcount.c:31 refcount_warn_saturate+0x147/0x1b0 [ 1217.269177][T15140] Modules linked in: [ 1217.273152][T15140] CPU: 1 PID: 15140 Comm: syz.6.2598 Not tainted syzkaller #0 [ 1217.280817][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1217.291120][T15140] RIP: 0010:refcount_warn_saturate+0x147/0x1b0 [ 1217.298574][T15140] Code: 0a 01 48 c7 c7 00 1b fc 8a e8 15 91 30 fd 0f 0b eb a8 e8 1c 2f 66 fd c6 05 20 64 15 0a 01 48 c7 c7 20 1c fc 8a e8 f9 90 30 fd <0f> 0b eb 8c e8 00 2f 66 fd c6 05 01 64 15 0a 01 48 c7 c7 00 1b fc [ 1217.318743][T15140] RSP: 0018:ffffc9000d367b48 EFLAGS: 00010246 [ 1217.325194][T15140] RAX: 507e832c2a27f900 RBX: 0000000000000004 RCX: ffff88802c565a00 [ 1217.333224][T15140] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1217.341342][T15140] RBP: ffffc9000d367ca0 R08: ffffc9000d367747 R09: 1ffff92001a6cee8 [ 1217.349550][T15140] R10: dffffc0000000000 R11: fffff52001a6cee9 R12: ffff88807ac465b8 [ 1217.357785][T15140] R13: dffffc0000000000 R14: ffff88807ac465fc R15: 0000000000000001 [ 1217.366056][T15140] FS: 0000555573de7500(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 1217.375180][T15140] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1217.381829][T15140] CR2: 0000001b2fc22ff8 CR3: 0000000045621000 CR4: 00000000003506e0 [ 1217.390069][T15140] Call Trace: [ 1217.393409][T15140] [ 1217.396442][T15140] ref_tracker_free+0x698/0x7d0 [ 1217.402474][T15140] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1217.408659][T15140] ? refcount_inc+0x70/0x70 [ 1217.413226][T15140] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1217.419259][T15140] ? _raw_spin_unlock+0x40/0x40 [ 1217.424173][T15140] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1217.429738][T15140] ? skb_dequeue+0x10e/0x140 [ 1217.434388][T15140] ? ax25_destroy_socket+0x541/0x5b0 [ 1217.439823][T15140] ax25_release+0x356/0x930 [ 1217.444401][T15140] sock_close+0xbd/0x230 [ 1217.448801][T15140] ? sock_mmap+0xa0/0xa0 [ 1217.453102][T15140] __fput+0x234/0x970 [ 1217.457235][T15140] task_work_run+0x1ce/0x250 [ 1217.461900][T15140] ? task_work_cancel+0x240/0x240 [ 1217.467092][T15140] ? exit_to_user_mode_loop+0x3b/0x110 [ 1217.472624][T15140] exit_to_user_mode_loop+0xe6/0x110 [ 1217.478035][T15140] exit_to_user_mode_prepare+0xf6/0x180 [ 1217.483663][T15140] syscall_exit_to_user_mode+0x1a/0x50 [ 1217.489275][T15140] do_syscall_64+0x61/0xb0 [ 1217.493753][T15140] ? clear_bhb_loop+0x40/0x90 [ 1217.498579][T15140] ? clear_bhb_loop+0x40/0x90 [ 1217.504394][T15140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.510600][T15140] RIP: 0033:0x7fd9b7f8f749 [ 1217.515155][T15140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.534885][T15140] RSP: 002b:00007ffc034664e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1217.543361][T15140] RAX: 0000000000000000 RBX: 000000000012927c RCX: 00007fd9b7f8f749 [ 1217.551463][T15140] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1217.559567][T15140] RBP: 00007fd9b81e7da0 R08: 0000000000000001 R09: 00000002034667df [ 1217.567751][T15140] R10: 0000001b2ec20000 R11: 0000000000000246 R12: 00007fd9b81e5fac [ 1217.575831][T15140] R13: 00007fd9b81e5fa0 R14: ffffffffffffffff R15: 00007ffc03466600 [ 1217.583889][T15140] [ 1217.586994][T15140] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1217.594309][T15140] CPU: 1 PID: 15140 Comm: syz.6.2598 Not tainted syzkaller #0 [ 1217.601829][T15140] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1217.611923][T15140] Call Trace: [ 1217.615242][T15140] [ 1217.618203][T15140] dump_stack_lvl+0x16c/0x230 [ 1217.622916][T15140] ? show_regs_print_info+0x20/0x20 [ 1217.628147][T15140] ? load_image+0x3b0/0x3b0 [ 1217.632700][T15140] panic+0x2c0/0x710 [ 1217.636646][T15140] ? bpf_jit_dump+0xd0/0xd0 [ 1217.641197][T15140] __warn+0x2e0/0x470 [ 1217.645220][T15140] ? refcount_warn_saturate+0x147/0x1b0 [ 1217.650812][T15140] ? refcount_warn_saturate+0x147/0x1b0 [ 1217.656401][T15140] report_bug+0x2be/0x4f0 [ 1217.660759][T15140] ? refcount_warn_saturate+0x147/0x1b0 [ 1217.666337][T15140] ? refcount_warn_saturate+0x147/0x1b0 [ 1217.671905][T15140] ? refcount_warn_saturate+0x149/0x1b0 [ 1217.677477][T15140] handle_bug+0xcf/0x120 [ 1217.681746][T15140] exc_invalid_op+0x1a/0x50 [ 1217.686271][T15140] asm_exc_invalid_op+0x1a/0x20 [ 1217.691146][T15140] RIP: 0010:refcount_warn_saturate+0x147/0x1b0 [ 1217.697328][T15140] Code: 0a 01 48 c7 c7 00 1b fc 8a e8 15 91 30 fd 0f 0b eb a8 e8 1c 2f 66 fd c6 05 20 64 15 0a 01 48 c7 c7 20 1c fc 8a e8 f9 90 30 fd <0f> 0b eb 8c e8 00 2f 66 fd c6 05 01 64 15 0a 01 48 c7 c7 00 1b fc [ 1217.716963][T15140] RSP: 0018:ffffc9000d367b48 EFLAGS: 00010246 [ 1217.723053][T15140] RAX: 507e832c2a27f900 RBX: 0000000000000004 RCX: ffff88802c565a00 [ 1217.731049][T15140] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000002 [ 1217.739142][T15140] RBP: ffffc9000d367ca0 R08: ffffc9000d367747 R09: 1ffff92001a6cee8 [ 1217.747188][T15140] R10: dffffc0000000000 R11: fffff52001a6cee9 R12: ffff88807ac465b8 [ 1217.755187][T15140] R13: dffffc0000000000 R14: ffff88807ac465fc R15: 0000000000000001 [ 1217.763204][T15140] ? refcount_warn_saturate+0x147/0x1b0 [ 1217.768837][T15140] ref_tracker_free+0x698/0x7d0 [ 1217.773721][T15140] ? _raw_spin_unlock_irqrestore+0x86/0x110 [ 1217.779647][T15140] ? refcount_inc+0x70/0x70 [ 1217.784180][T15140] ? _raw_spin_unlock_irqrestore+0xae/0x110 [ 1217.790095][T15140] ? _raw_spin_unlock+0x40/0x40 [ 1217.794970][T15140] ? skb_queue_purge_reason+0x6c/0x1c0 [ 1217.800457][T15140] ? skb_dequeue+0x10e/0x140 [ 1217.805082][T15140] ? ax25_destroy_socket+0x541/0x5b0 [ 1217.810411][T15140] ax25_release+0x356/0x930 [ 1217.814981][T15140] sock_close+0xbd/0x230 [ 1217.819258][T15140] ? sock_mmap+0xa0/0xa0 [ 1217.823532][T15140] __fput+0x234/0x970 [ 1217.827561][T15140] task_work_run+0x1ce/0x250 [ 1217.832193][T15140] ? task_work_cancel+0x240/0x240 [ 1217.837261][T15140] ? exit_to_user_mode_loop+0x3b/0x110 [ 1217.842766][T15140] exit_to_user_mode_loop+0xe6/0x110 [ 1217.848084][T15140] exit_to_user_mode_prepare+0xf6/0x180 [ 1217.853663][T15140] syscall_exit_to_user_mode+0x1a/0x50 [ 1217.859173][T15140] do_syscall_64+0x61/0xb0 [ 1217.863631][T15140] ? clear_bhb_loop+0x40/0x90 [ 1217.868363][T15140] ? clear_bhb_loop+0x40/0x90 [ 1217.873070][T15140] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1217.878985][T15140] RIP: 0033:0x7fd9b7f8f749 [ 1217.883419][T15140] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1217.903074][T15140] RSP: 002b:00007ffc034664e8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 1217.911519][T15140] RAX: 0000000000000000 RBX: 000000000012927c RCX: 00007fd9b7f8f749 [ 1217.919527][T15140] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 1217.927551][T15140] RBP: 00007fd9b81e7da0 R08: 0000000000000001 R09: 00000002034667df [ 1217.935557][T15140] R10: 0000001b2ec20000 R11: 0000000000000246 R12: 00007fd9b81e5fac [ 1217.943556][T15140] R13: 00007fd9b81e5fa0 R14: ffffffffffffffff R15: 00007ffc03466600 [ 1217.951578][T15140] [ 1217.955195][T15140] Kernel Offset: disabled [ 1217.959632][T15140] Rebooting in 86400 seconds..