last executing test programs: 15m15.830664875s ago: executing program 32 (id=26): syz_mount_image$vfat(&(0x7f0000003880), &(0x7f0000000600)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="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"], 0xfd, 0x2a8, &(0x7f0000000240)="$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") r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002100)=@mangle={'mangle\x00', 0x64, 0x6, 0x590, 0x300, 0xd0, 0xd0, 0xd0, 0xd0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x4c0, 0x6, 0x0, {[{{@ipv6={@remote, @private1, [0xff], [0xffffff00, 0x0, 0xffffff00], 'gre0\x00', 'syzkaller1\x00', {0xff}, {}, 0x0, 0x0, 0x7}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x9}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x590}}, {{@uncond, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x29, 0xfc, 0x6, 0xfb, 0x3, @remote, @empty, @loopback, [0xffffffff, 0xff000000, 0x0, 0xff], [0x0, 0x0, 0x0, 0xffffffff], [0xffffff00, 0xff, 0xff000000], 0x82}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x3f0}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x20, 0x8, 0x6}}}, {{@ipv6={@local, @private1={0xfc, 0x1, '\x00', 0x1}, [0x0, 0xff000000, 0xff000000], [0xff000000, 0x0, 0xff], 'tunl0\x00', 'veth0_to_bond\x00', {}, {0xf7d589580f149d60}, 0x0, 0x5, 0x7, 0x18}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x8}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x5f0) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000043c0)=ANY=[@ANYBLOB="0a00000002000000040000000400000000000000", @ANYRES32, @ANYBLOB="00a400"/20, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./dev\x00', 0x1ff) keyctl$set_reqkey_keyring(0xe, 0xfffffffffffffff8) get_robust_list(0x0, &(0x7f0000000100)=0x0, &(0x7f0000000140)) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x40, 0x9, 0x7ffc1fff}]}) syz_mount_image$vfat(&(0x7f0000000100), &(0x7f00000000c0)='./file0\x00', 0x204858, &(0x7f00000002c0)=ANY=[@ANYBLOB="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", @ANYRES32, @ANYRES32, @ANYRES8, @ANYRES32], 0x1, 0x347, &(0x7f0000001840)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0xe, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000040)=0x7) r2 = accept4$unix(0xffffffffffffffff, &(0x7f0000000480), &(0x7f0000000500)=0x6e, 0x80800) connect$unix(r2, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cpuacct.usage_percpu\x00', 0x275a, 0x0) openat(0xffffffffffffff9c, &(0x7f0000004280)='.\x00', 0x0, 0x0) unshare(0x22020600) r5 = socket$inet_udp(0x2, 0x2, 0x0) sendmmsg(r5, 0x0, 0x0, 0x1c) 13m50.368105286s ago: executing program 33 (id=302): socket$netlink(0x10, 0x3, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r1, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_opts(r3, 0x0, 0x4, &(0x7f0000000080)="441f0803", 0x1f) 12m49.146466657s ago: executing program 34 (id=484): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000010000000000000000000000950000000000000046682d562c31aa909594c57a164463536e83a7f6ac12a8b52f0d70aa97a91fa46cdcefe7534fda04cace652409e818c0b1da96d9c9fa8e9523840100cbac3c07c3db6bc11fa42d9ca632c33ca9a00987000000002cd50db1486b80ee61ff6ddaa4bf0609a8ef7fd07f4c556489cf61cf8e63e826fff67d3299ca9f9b85cdcd75b85bb1775f4ff03b75aa7b6aa1a7e9a2b91d103d541bce370d9e6810dec2fe8300dc5edf3f6aa43810579aedb7e19fbacb5bd5e5337b507559ca6acc6471ecad2746ab01526ace07000000c1ea01c13a2406007d0efb7e91a9dbde2353f035347270d076c93f1b1a810cb2c7d72ee9ce76e6da15600893bc36f6502f00"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000a80)={0x2020}, 0x2020) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000080), 0x1, 0x592, &(0x7f00000004c0)="$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") bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 10m20.263631329s ago: executing program 35 (id=1225): syz_emit_ethernet(0x3e, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x6, 0x0, 0x0) setpriority(0x0, 0x0, 0x200002a14b56) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2}, &(0x7f0000000300)=0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x9) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)) syz_io_uring_setup(0x315b, 0x0, &(0x7f0000000100), 0x0, &(0x7f0000000000)) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) r1 = memfd_create(&(0x7f0000000640)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\'5\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\x05\x00\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r4 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x1}, 0x10) write(r4, &(0x7f0000000280)="1c0000001a009b8a14e5f4070009042402000000ff02000300000000", 0x1e5) 7m3.642239662s ago: executing program 2 (id=2090): r0 = fsopen(&(0x7f0000000700)='befs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000400)='source', &(0x7f0000000240)='//\xf2/\x06\b\xa30\\\\\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b\\/\\\xf9\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas\x9d\x14\xe3\v\xa3!\xfb\x93\xd7R\xab2\x1eW\xe9h\x9b\xf7Gl\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8D\xb1\xdep\x01\xcc:\xa6\xc5n\xeb\xab\xf70\x99\xef\x8b0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) open(0x0, 0x80242, 0x10) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000040), 0xc) r4 = socket(0x10, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f0000000100)={'syz_tun\x00', &(0x7f0000000040)=@ethtool_pauseparam={0x50, 0x0, 0x7ff}}) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f0000000000)={0x20000000}) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000000080)={'veth1_virt_wifi\x00', @multicast}) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x44, &(0x7f0000000000)={0x0, 0x0}, 0x10) 7m1.797251205s ago: executing program 2 (id=2096): syz_mount_image$hfs(&(0x7f0000001600), &(0x7f0000000080)='./file1\x00', 0x2000000, &(0x7f0000000140)={[{@file_umask={'file_umask', 0x3d, 0x80004}}, {@iocharset={'iocharset', 0x3d, 'maciceland'}}, {@codepage={'codepage', 0x3d, 'koi8-u'}}, {}, {@gid}]}, 0x2, 0x2fe, &(0x7f0000001100)="$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") getdents(0xffffffffffffffff, &(0x7f0000001fc0)=""/184, 0xb8) 7m1.368017884s ago: executing program 2 (id=2098): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000680)='./file0\x00', 0x200010e, &(0x7f0000000100), 0x3, 0x46b, &(0x7f00000006c0)="$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") chdir(0x0) syz_mount_image$vfat(&(0x7f00000001c0), &(0x7f0000000040)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x80c000, 0x0, 0x1, 0x0, &(0x7f0000000180)) 7m1.060912708s ago: executing program 2 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)={0x1c, 0x76, 0x31f, 0x0, 0x4000000, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 6m45.652012516s ago: executing program 37 (id=2100): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000140)={0x1c, 0x76, 0x31f, 0x0, 0x4000000, "", [@typed={0x5, 0x0, 0x0, 0x0, @str='\x00'}, @nested={0x4, 0xd}]}, 0x1c}], 0x1}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000ed07449e00000000eb15000018010000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000396f7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socket(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f066bbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000002100)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000006c0)='./file0\x00', 0x400, 0xa4) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r1}, 0xc) 3m34.17009748s ago: executing program 1 (id=2601): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000080)=0x1, 0x4) syz_emit_ethernet(0x36, &(0x7f0000000300)={@local, @random="facfff00716e", @void, {@ipv4={0x800, @udp={{0x6, 0x4, 0x0, 0x26, 0x28, 0x2, 0x0, 0x0, 0x11, 0x0, @empty, @empty, {[@rr={0x7, 0x3, 0xab}]}}, {0x0, 0x4e20, 0x10, 0x0, @gue={{0x2, 0x0, 0x3}}}}}}}, 0x0) setsockopt$inet_int(r0, 0x0, 0x6, &(0x7f0000000000)=0x3f7, 0x4) recvmmsg(r0, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000003680)=""/43, 0x2b}}], 0x1, 0x2, 0x0) 3m33.919364903s ago: executing program 1 (id=2603): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r0, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) mmap(&(0x7f0000ff0000/0x10000)=nil, 0x10000, 0x7fa962bfffff, 0x13012, r0, 0x0) madvise(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x15) 3m33.799738121s ago: executing program 1 (id=2604): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1}, 0x8) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) listen(r0, 0x5) r1 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) r2 = accept$inet(r0, 0x0, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x2) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000018c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r3, 0xffffffffffffffff, 0x0) 3m31.424607767s ago: executing program 1 (id=2610): sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='48:8f:5a:', 0x9) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') 3m27.476656579s ago: executing program 1 (id=2626): syz_emit_ethernet(0x7e, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f0000000100)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$null(0xffffffffffffff9c, &(0x7f0000000180), 0x400, 0x0) r0 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000080), 0x80382, 0x0) ioctl$RTC_UIE_ON(r0, 0x7003) 3m22.968433317s ago: executing program 1 (id=2638): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"a2336848149e516d4b5e071887f70e09d038e7ff7fc6e5539b0d500a8b089b3f383563030890e0879b0a71c6e70a9b334a959b669a242f0a0af3988f7ef319520100ffe8d178708c523c921b1b3e31070d0773090acd3b78130daa61d8e804003e005802b77f07227227b7ba67e0e78657a6f5c2a874e62a9ccdc0d31a0c9f318c0da1993bd160e233df4a62179c6f30e065cd5b91cd0ae193973735b36d5b1b63dd1c00305d3f46635eb016d5b1dda98e2d749be7bd1df1fb3b231fdcdb5075a9aaa1b469c3090000000000000075271b286329d169934288fd789aa37d6e98b224fd44b65b31334ffc55cc82cd3ac32ecdb08ced6f9081b4dd0d8b38f3cd4498bee800490841bdb114f6b76383709d8f5c55432a909fda039aec54a1236e80f6a8abadea7662496bddbb42be6bfb2f17959d1f416e56c71b1931870262f5e801119242ca026bfc821e7e7daf2451138e645bb80c617669314e2fbe70de98ec76a9e40dad47f36fd9f7d0d42a4b5f1185ccdcf16ff46295d8a0fa17713c5802630933a9a34af674f3f39fe23491237c08822dec110911e893d0a8c4f677747abc360934b82910ff85bfd995083bba2987a67399eac427d145d546a40b9f6ff14ac488ec130fb3850a27af9544ae15a7e454dea05918b41243513f000000000000000a3621c56cea8d20fa911a0c41db6ebe8cac64f17679141d54b34bbc9903f1d4ab966203861b5b15a841f2b575a8bd0d78248ebe4d9a80002695104f674c2431dca141fae269cab70e9a66f3c3a9a63e9639e1f59c0ede26c6b5d74b078a5e15c31634e5ae098ce9ee70771aaa18119a867e1088334975e9f73483b6a62fa678ca14ffd9f9db2a7869d85864056526f889af43a6056080572286522449df466c632b3570243f989cce7cd9f465e41e610c20d80421d653a5520000008213b704c7fb082ff27590678ef9f190bae97909507041d860420c5664b27921b14dc1db8892fd32d0ad7bc946813591ad8deff4b05f60cea0da7710ac0000000000008000bea37ce0d0d4aa202f928d28381aab144a5d429a04a6a2b83c7068ae949ed06e288e810bac9c76600025e19c907f8ea2e2010000008271a1f5f8528f227e79c1389dbdfffe492f21579d2c15b8c70cdb1c332d86d87341432750861ec2bc3451edca194b221cfec4603d276bbaa1dfa6d4fb8a48a76eafc9a9a0270e4c10d64cd5a62427264f2377fe763c43470833ac96c45f357cbbaba8f1b1fdcc7cbb61a7cdb9744ed7f9129aede2be21ccfdc4e9134f8684b3a4f354da9a795e96334e207dff70f1988037b2ed3aaf575c0b88d8f146684078416d59fdee5325928974d12dad99dac44c3f0008047096a44002bebc2420aed92fa9b6578b4779415d4ac01b75d5495c118045651cf41c2fc48b778efa5ea5677747430af4162b987b80c3e001cd34e5c92f76cc4c24eeb8bc4e9ac2aed9e53803ed0ca4ae3a9737d214060005ea6f1783e287b3bee96e3a726eafe2fdfaa78d1f48c13b64df07847754b8400daaa69bf5c8f4350aeae9ca1207e78283cd0b20ceb360c7e658828163e2d25c4aa348561f927e88f63aa70e73a5e69b3df3495903f06572e1e007fa55a2999f596d067312f5779e8dbfdcf3427138f3d444d2639a10477f9bec4b0bbb6e3c04be68981f392203dd0ee3ef478e16dacfc5e3e03cf7ab8e3902f1b0ff034ef655b253ca509383815b1b6fc6522d4e4fdc11a48cf42d48604675fde2b94cf00500a2690891abf8ab9c015073014d9e08d4338b8780bdecd436cf0541359bafffa45237f104b96210403b2de9efed496f2730d56bd068ed211cf847535edecb7b373f78b095b68441a34cb51682a8ae4d24ad0465f3927f889b81305c038e79a7962fb385a882e8020f06c4c2ba1dd5cac7c18876da865d258734dd73583df292892448039ef799cf0630becdcce04579b5561dc825ab829827945e020c1f67ee615feb6243378e0610060f02cca4e91b2f001edb3d78fb4b55668dda93aec92a5de203717aa49c2d284acfabe262fccfcbb2b75a2183c46eb65ca8104e1b4da7fbb77ab2fc043aead87c32ab875ee7c2e7b7019c982cd3b43eaeb1a5fb135c0c7dcee8fe6516a328032f88c042891824659e9e94265c803b35ee5f83a2b210520106b8a358b50ab7a1fa89af9c251fe5294b3d1802d5676d95f160ec97b1ad94872cb2044642c37b4a6cc6c04effc1672db7e4b68d787d9a7a508ae54b3cd7369dde50e8c77d95a3d361c040babb171607caac2a3559ad4f75465f49c0d0ae3716db6e00cb11db4a5fade2a57c10238e204a67737c3b42aae501b20f7694a00f16e2d0174035a2c22656dc29880acebdbe8ddbd75c2f998d8ac2dfad2ba3a504767b6b45a45957f24d758ed024b3849cd9c30e23ef4df5c89644f48bb536f7945b59d7bcddff754413d135273ea8e75f22f216c6b9990ae71806f2c00b4025c48b75c0f73cdb9a7b8fa367b50028067e7f16f4dd569d462f4f19eacdb3ed70eeebb4483f8fd777d443e8b40427db6fe29068c0ca3d2414442e8f3a154704b0e51bc664a137b26be719f4f7c9a5678a674dfc95df80b9ce375dd649c8c704e509bd88c8e63d8c7dd67071115c8982ba46af4d6adcc9f68a75b9397b035153faf46366e7205dd8d6f37525c1a0e94610dd94323f6c15d085197149bfd6655548cfd9c52c9711937f79abb1a124f1210465483cd3b2d78378cfb85ed82e7da0f6eb6d279f2ae455925d0f6f1ba571eba281f2a654fb39ddff3b484539ff158e7c5419e037f3e3ad038f2211f1033195563c7f93cd54b9094f226e783271e1e5a2a2c10712eab625d64931cd4ffe6738d97b9b5ef828ee9fb059fc01af0e79c1e14b1d25988c69a399567c1f93768f7971d31488b8658a20878b7c1dd7ba02fc42939dde3d4a3339a65d507dc59c51097b40517705da56e9ebf0afa53282bf86dbb58c548069ff6eb95aade7cc66d7bbef724779ca1f731b3346ff177050373d79ff7b3e7f9bc0c1b4b266a8878b90baaa039d3e3b63979ac3df6e6f4859afd50238c7547a39b60810938044ae185d2ba3e00a4e73676864ae090d81eaee5ee6cf1d0ab378dd4dd891e937c2ea5410e0513005000000000000003911fab964c271550027697b52160687461602f88df165d884b36ec2b6c25a2f33c715687e9d4afb8843dd014e5c5ad8fe995754bd9cf32fce1e31919c4b2082fb0a30b9deae84bed4b2804563407308c58c89d9e99c81769177e6d594f88a4facfd4c735a20307c737afa2d60399473296b831dbd933d93994ba3064279b10ea0c5833f41f157ea2302993dbe433b1aa3a3766d5439020484f4113c4c859465c3b415c3432f81db8719539d5bf372aaaea1cc43a6c5cbe59758bfee2916580dac4b008e595f437491d87abed02cefcd9db53d94d02daee67918e5d6787463373b4b87c9050000002f7809959bc048850613d17ca51055f2f416a44fe180d2d50c312cca7cb14a2bdc331f57a9817139a206fc76957227ffff2de20a4b8e3737fbb42913777c06376f799eba367e21f94ca598705f5dcb767d6f0900d6b0f6095e53c4c4234d0c1fbe434f6ab8f43c0013ee93b83946ee7759e89d7bdd1a32d7b311711b757fe43c06d21a35810d8fe98b27faea8aa12bc8716eefc5c97c45ac33eeec964c5214bc3a9359bdea1cccab94f15e36319cb34ebcacedb82c2ed3de5a8a8f0011e8f74e82d7f96093530e76692839d7961939adfdeeeaff19d11efcafb6d546fef271e89d6cc2389e81ff58cefcce3fbf4625a7e7de40e42e07b34449e15e065cc7340002000000000000f288a4510de03dab19d26285eda89156d50dd385a60333ba5bbf5d77cd7007ad1519ad5470de3dd6d6080cafccf8a97406bb6b68a1f0c4549820a73c880f475f732ae00398e8bd1f4108b7807fb33b72685ec37a2d3f766413a60459516246e5a1d998a2017aef0948a68cf255315ab80dd349e891aef595dc4d470e8ac32a308e15fc37d06aeac289c0523f483e1ff7408c6087f1ab652f2ef91d4f2b01987b0f46da034e080000007ee8101a3934c54e24b48ec0275e2d0687dc746b0827cbf652f406c6b95f2722e58c05f752ce2126596e1cd7655b904801784c416b22f73d324678e2724f43f1fe687c7e8a60c28b82b6528341b648cdd56fed7cdcbb1575912d5ecd36dea3bca0b7427d8392c6289455e8f8d2ab2242729251ae033a9e02210e62df0546a74b333a1c48f95fd54acb5741259e8c5488efeee327415cc19451432c6f14c27693102a3cd84857cd6586fc5ca9a93eb0145fac0662ff86107f998a8ef7df8aa14046c55b03d3d47f88a8d60f7774a2ee08758897fb411a94b3c2fc5d5f0db42c0456ec015f08e5247d33ae2d35603ff8454c16f8342856935125102bb784ed7148b6ce431b63ee356b0c785f2f47b90e29389f22fc5b59a70efaea2bd40195af4486220d702e30bfc43c10ec23ea6283994a7dde4dcb61fea6b651fb1d62458d0741a12830052fcc460db043afe525629b40d7cee458e4cb5e930ed624806c43a006e3933ed07c2b8081c128ad2706f48261ff07000000000000613bc18f5a38d442768af38041efe03d152ef95ff569e76db2391f4509d7f339d92fdb4a89364949da398000000000000000d80a4fe654578376e599aff3565b1d531f30912b9945030b81ea9935fd46edb44a78f615255490a4b621501f2a9e4d24624c4dac9274118c67584f5d374755534d7f68f679c4ff516a9c861a0e7e65868fcb2bf1cb9aea4e05df72279fdb0d2b9e935c5af3cf474bed79dfc248c1f5aea4b8b32c5d295e57079d0fe662a46b7f71cd47744db86c50b704c971d90295c7b2c7439a2d78ccfa79b5fc2bff6bbf840262bf89394b3e0691953264d2700c838fa2c7b3425260f59500000000004ca7c12f45858d6284ca6270d6b2f0e58fded8a7b4a302a97bc641df07720ba2b26bbfcc807ca0abb1b44322269c21c5ec68cb068ea88067d905ea917bb03eefdaebdeabf2d0dce80997c915c8949de992587c2cb5fe36d7d3e5db21b094b8b77940b5f07722e47a08d367e5f84c96ec664b72934b99b3109af65d77e86abd6859cddf4bbae1f0930462df15fddbc48562ea3511a8065ef028cf12f14dcf6ebecd8d884836174faf1aa609e5f1ee1162dfa13bdc1fa7cfaadba85c72e9758f03a755d0be53f8d2a1dfb1c68cc164b0a0780d971a96ea2c4d4ca0398c2235980a9307b3d5bd3b01faffd0a5dbed2881a9700af561ac8c6b00000000000000f96f06817fb903729a7db6ff957697c9ede7885d94ffb0969be0daf60af93109eb1dee72e4363f51af62af6fb2a6df3bec89822a7a0b678058fa3fef86faec216eb6992162f8dcbf719c148cd2f9c55f4901203a9a8a2c3e90f3943dbc10360a1a49700d1dfbf66d69f6fbaf506c8bcce8bb0d872a02238926407a4eddd5d0fc5a752f9000", 0x1000}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='48:8f:5a:', 0x9) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') 3m7.792246155s ago: executing program 38 (id=2638): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) bind$inet6(0xffffffffffffffff, 0x0, 0x0) write$UHID_INPUT(r0, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x1, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x2, 0x0, 0x7fff0000}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1000, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./config\x00', 0x1ff) mount(&(0x7f0000000000)=@filename='none\x00', &(0x7f0000000100)='./config\x00', &(0x7f0000000200)='configfs\x00', 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000300)='./config/usb_gadget/g1\x00', 0x1ff) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./config/usb_gadget/g1/functions/rndis.usb0\x00', 0x1ff) r5 = openat(0xffffffffffffff9c, &(0x7f0000000500)='./config/usb_gadget/g1/functions/rndis.usb0/host_addr\x00', 0x1, 0x0) write(r5, &(0x7f0000000600)='48:8f:5a:', 0x9) bind$inet(r4, &(0x7f0000000240)={0x2, 0x0, @local}, 0x6f) syz_open_procfs(0x0, &(0x7f0000000300)='uid_map\x00') 2m11.776131884s ago: executing program 3 (id=2867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r1) sendmsg$IEEE802154_LIST_IFACE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, r2, 0x1, 0x70bd2a, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x20004801}, 0x90) 2m11.494344885s ago: executing program 3 (id=2868): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00001b1000/0x4000)=nil, 0x400000, 0x2, 0x2}) r1 = syz_open_procfs$pagemap(0x0, &(0x7f0000000000)) ioctl$PAGEMAP_SCAN(r1, 0xc0606610, &(0x7f0000000100)={0x60, 0x0, &(0x7f00001c9000/0x3000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}) 2m10.760289905s ago: executing program 3 (id=2872): fcntl$setstatus(0xffffffffffffffff, 0x4, 0x4400) r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x20, 0x56a, 0x323, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, "", [{{0x9, 0x4, 0x0, 0x0, 0xfe, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x81, 0xfc, 0x1, {0x22, 0x28}}, {{{0x9, 0x5, 0x81, 0x3, 0x400, 0x3, 0x81, 0x2}}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000240)={0x20, 0x23, 0x28, {0x28, 0x11, "83efb930f0187ff0478fa22a61a54607b71ea9e43d359c479c37f525cde38bf7914077366b48"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 2m8.675800729s ago: executing program 3 (id=2885): r0 = socket$inet6(0xa, 0x80002, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0xffffffff}, 0x1c) bind$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e20, 0xc826, @empty, 0xffffffff}, 0x1c) 2m8.53983506s ago: executing program 3 (id=2886): mkdir(&(0x7f0000000000)='my_sys\x00', 0x1ff) mount(0x0, &(0x7f0000000200)='my_sys\x00', &(0x7f0000000300)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000500)='my_sys/bus/pci/devices/0000:00:03.0/resource1\x00', 0x2, 0x0) mmap(&(0x7f0000800000)=nil, 0x1000, 0x3, 0x11, r0, 0x0) syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2800003, 0x31, 0xffffffffffffffff, 0x231cd000) 2m8.14400947s ago: executing program 3 (id=2888): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38, 0x66, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x34, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$search(0xa, r0, &(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x0}, r1) 1m52.778460135s ago: executing program 39 (id=2888): r0 = add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r1 = add_key$keyring(&(0x7f0000000100), &(0x7f0000000140)={'syz', 0x0}, 0x0, 0x0, 0xffffffffffffffff) r2 = add_key$keyring(&(0x7f0000000680), &(0x7f0000000000)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000180)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x32, 0x30, 0x38, 0x66, 0x30, 0x62, 0x30, 0x4, 0x30, 0x52, 0x30, 0x32]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x3e}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000200)={'fscrypt:', @auto=[0x30, 0x0, 0x30, 0x34, 0x30, 0x30, 0x30, 0x39, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x33, 0x34]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x24}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000440)={'fscrypt:', @auto=[0x30, 0x30, 0x64, 0x30, 0x64, 0x30, 0x62, 0x30, 0x30, 0x30, 0x34, 0x30, 0x30, 0x35, 0x30, 0x35]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566357a2e68bc1629ecff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000280)={'fscrypt:', @auto=[0x64, 0x33, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000002c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x35, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x37]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000300)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x38, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x0, 0x38]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000480), &(0x7f0000000580)={'fscrypt:', @desc2}, &(0x7f00000005c0)={0x0, "41aaa6461c7d9cdfe002a4fdf77ac6a6b897264411411eb3e0e991467601fa7590931ab1575e497fa2974dbe559c8f95118b6680568af90fbd32a6fd249117c5", 0x29}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000340)={'fscrypt:', @auto=[0x30, 0x31, 0x30, 0x63, 0x34, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x66, 0x36, 0x30, 0x39]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000780)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x31, 0x30, 0x30, 0x30, 0x61]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000700), &(0x7f0000000740)={'syz', 0x0}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f00000003c0)={'fscrypt:', @auto=[0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x30, 0x36, 0x30, 0x30, 0x62]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x40}, 0x48, r2) add_key$fscrypt_v1(&(0x7f0000000080), &(0x7f0000000400)={'fscrypt:', @desc3}, &(0x7f0000000100)={0x0, "00112233444d66778899aabbccddefff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff0011223344556677889c69bbccddeeff", 0x40}, 0x48, r2) add_key$keyring(&(0x7f0000000640), &(0x7f00000006c0)={'syz', 0x2}, 0x0, 0x0, r2) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000380)={'fscrypt:', @auto=[0x33, 0x30, 0x65, 0x38, 0x30, 0x30, 0x30, 0x65, 0x66, 0x30, 0x6f, 0x30, 0x31, 0x30, 0x30, 0x64]}, &(0x7f0000000100)={0x0, "00112233445566778899aabbccddeeff00116233445566778899aabbccdceeff00112233445566778899aabbccddeeff00112233445566778899aabbccddeeff", 0x12}, 0x48, r2) add_key$keyring(&(0x7f0000000000), &(0x7f0000000080)={'syz', 0x3}, 0x0, 0x0, r2) add_key$keyring(&(0x7f0000000040), &(0x7f0000000080)={'syz', 0x1}, 0x0, 0x0, r2) keyctl$search(0xa, r0, &(0x7f0000000100)='blacklist\x00', &(0x7f0000000140)={'syz', 0x0}, r1) 1m17.198511307s ago: executing program 0 (id=3115): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000600)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, 0x0, 0xa11, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 1m16.730578191s ago: executing program 0 (id=3118): timer_create(0x8, &(0x7f0000000640)={0x0, 0x17, 0x1, @thr={0x0, 0x0}}, &(0x7f0000000680)=0x0) timer_settime(r0, 0x1, &(0x7f0000000700), 0x0) 1m16.318450462s ago: executing program 0 (id=3121): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000280)=[{0x6, 0xfa, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000380)="c4f6567b42428c351d0eb7e00adfac40f6f3c6ddfeee4f9b47f2ae534b00a80cf8bfe9952dadad722784be00d5e05f8aa568711892567737d85ade9858ea72a66a3a417d6fbdfe0c98a369e4e8de7139ea726aa8fd9e2b80cf70a64914c3cc12d10db3f785dcc90135afb89c4f917aba8da3dafa45a3ce5c98ad8d4e6528e2210d206b85f15e5eb55355d2acc609a1cc4df8ff5011ac509e40cc0ebded6b2781a05df6b38f458fe8a98d5ec9117cf4d25825b441b2e49dd32aca0852c7d7387a5452972ebde3fa90be55", 0xca}], 0x1}}], 0x1, 0x4000000) write(r0, &(0x7f0000001f00)="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", 0x4f9) 1m15.768871254s ago: executing program 0 (id=3124): mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000080)='./file0/../file0\x00', &(0x7f00000000c0)='./file0/file0\x00', 0x0, 0x8b101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0\x00', 0x0, 0x80000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000001180)='mountinfo\x00') read$char_usb(r0, &(0x7f0000000040)=""/4109, 0x100d) 1m15.436052974s ago: executing program 0 (id=3129): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000340)=0x1) ioctl$TIOCSLCKTRMIOS(0xffffffffffffffff, 0x5457, &(0x7f00000000c0)) 1m14.876034821s ago: executing program 0 (id=3134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x20008044) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=ANY=[], 0x18, 0x20000084}, 0x40880) 1m13.862275808s ago: executing program 40 (id=3134): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001f40)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r2], 0x18}, 0x20008044) sendmsg$unix(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000280)='=', 0x1}], 0x1, &(0x7f0000000580)=ANY=[], 0x18, 0x20000084}, 0x40880) 47.035147746s ago: executing program 5 (id=3300): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0xfffffffc, @empty, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x30}}, 0x0) listen(r0, 0xc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x30, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @initdev={0xac, 0x1e, 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x7}]}]}, 0x30}}, 0x0) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000004c0)={0x14, 0x0, 0x1, 0x70bd2c, 0x25dfdbff}, 0x14}, 0x1, 0x0, 0x0, 0x20048001}, 0x800) 45.200445429s ago: executing program 5 (id=3302): mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./sys\x00', 0x1ff) mount(0x0, &(0x7f0000000040)='./sys\x00', &(0x7f0000000080)='sysfs\x00', 0x0, 0x0) r0 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) write(r0, &(0x7f0000000180)='0', 0x1) 44.489886075s ago: executing program 5 (id=3305): move_pages(0x0, 0x20a0, &(0x7f0000000040), &(0x7f0000001180), &(0x7f0000000000), 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x18, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_NAT_SRC={0x4}]}, 0x18}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) ioctl$TCSETAF(r0, 0x5408, &(0x7f00000000c0)={0xcf54, 0x5, 0xffff, 0x9dff, 0x10}) write$binfmt_aout(r0, &(0x7f00000000c0)=ANY=[], 0xff2e) ioctl$TCSETS(r0, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0xfffffff9, 0x0, 0xd, "0062007d82000000000000002240f7ffffff00"}) r1 = syz_open_pts(r0, 0x0) r2 = dup3(r1, r0, 0x0) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000200)=0x17) 43.641768404s ago: executing program 5 (id=3309): setns(0xc9, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0x1}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x10f) r1 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', 0x1}) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r2, &(0x7f0000000100), 0x12) listen(r2, 0x1) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000008050000010b"], 0x88) 15.795519076s ago: executing program 9 (id=3399): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001d00070f000200000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00g\x00\b'], 0x24}}, 0x14040) 15.3790008s ago: executing program 9 (id=3403): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 14.956334483s ago: executing program 9 (id=3405): setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000000c0)={0x14, 0x2c, 0x1, 0x0, 0xfffffffd, "", [@typed={0x4, 0xea}]}, 0x14}], 0x1}, 0x0) 14.676692067s ago: executing program 9 (id=3406): r0 = socket(0xa, 0x3, 0x3a) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syz_tun\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x0, 0x6, r2, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd4, &(0x7f0000000740)=0x8, 0x4) 12.752566085s ago: executing program 9 (id=3411): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) pipe2(&(0x7f0000000080), 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SNDRV_TIMER_IOCTL_SELECT(0xffffffffffffffff, 0x40345410, 0x0) signalfd4(0xffffffffffffffff, 0x0, 0x0, 0x80800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_mount_image$ext4(&(0x7f0000000140)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0xc248, &(0x7f0000000080)={[{@nodelalloc}, {@init_itable_val={'init_itable', 0x3d, 0x2cd}}, {@init_itable}]}, 0x81, 0x60a, &(0x7f0000000a80)="$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") sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x4000087, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0x1, 0xfffffffe}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={r3, &(0x7f0000000640), &(0x7f0000000580)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r3, &(0x7f00000003c0), &(0x7f0000000300)=@tcp=r4, 0x1}, 0x20) 4.680736459s ago: executing program 6 (id=3463): openat$tun(0xffffffffffffff9c, 0x0, 0xa0880, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) madvise(&(0x7f000004d000/0x2000)=nil, 0x2000, 0xb) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r4) r5 = shmget$private(0x0, 0x4000, 0x800, &(0x7f000004b000/0x4000)=nil) shmctl$IPC_RMID(r5, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000023c0)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, 0x41420, 0x80}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0x80}]}, 0x30}, 0x1, 0x0, 0x0, 0x24040051}, 0x24008080) 3.574812584s ago: executing program 6 (id=3467): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic', 0x3) shutdown(r0, 0x1) 3.136510345s ago: executing program 6 (id=3472): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) write$P9_RLINK(r1, &(0x7f0000000240)={0x7, 0x47, 0x1}, 0x7) 2.858407802s ago: executing program 6 (id=3474): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0xd, 0x6, 0x5, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2}, 0x800) 2.774337748s ago: executing program 8 (id=3475): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 2.396003413s ago: executing program 6 (id=3477): unshare(0x26000400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$BLKPG(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 2.370719091s ago: executing program 8 (id=3478): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x129c81, 0x0) write$binfmt_aout(r1, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(r1, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r2 = syz_open_pts(r1, 0x60300) dup3(r2, r1, 0x0) splice(r1, 0x0, r0, 0x0, 0x7ffff000, 0x0) 2.163856882s ago: executing program 7 (id=3480): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) 2.149058555s ago: executing program 6 (id=3481): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x5) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x400, &(0x7f0000000280)={[{@nogrpid}, {@noload}]}, 0x2, 0x786, &(0x7f0000000f80)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file1\x00', 0x143042, 0x80) sendfile(r0, r0, 0x0, 0x7a680000) 1.947709177s ago: executing program 4 (id=3482): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 1.8642734s ago: executing program 7 (id=3483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x2, 0x200, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000003c0), 0x0, 0x24000045, &(0x7f00000001c0)={0xa, 0x2, 0xffff, @loopback, 0x9}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='bic', 0x3) shutdown(r0, 0x1) 1.850760584s ago: executing program 5 (id=3313): syz_mount_image$ext4(&(0x7f00000001c0)='ext4\x00', &(0x7f0000000000)='./bus\x00', 0x10000, &(0x7f0000000400)={[{@acl}, {@quota}, {@journal_dev={'journal_dev', 0x3d, 0x11}}, {}, {@delalloc}, {@usrjquota}, {@minixdf}]}, 0x1, 0x50a, &(0x7f0000001f40)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./bus\x00', 0x1c1040, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000e80)='./bus\x00', 0x1c1002, 0x40) write(r1, &(0x7f0000004200)='t', 0x1) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuset.effective_mems\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000a00), 0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) write$binfmt_elf64(r2, &(0x7f0000000cc0)={{0x7f, 0x45, 0x4c, 0x46, 0xd5, 0x8, 0x8, 0x6, 0x7fffffff, 0x3, 0x6, 0x1, 0x364, 0x40, 0x362, 0x7, 0xb77b, 0x38, 0x1, 0xd, 0x3303, 0x1}, [{0x60000000, 0x8d, 0x6, 0x7fffffffffffffff, 0xd, 0x3, 0x9, 0x5}]}, 0x78) sendfile(r1, r0, 0x0, 0x7fffffff) 1.660212484s ago: executing program 4 (id=3485): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_PROTOCOL(r0, &(0x7f00000020c0)={0x0, 0x0, &(0x7f0000002080)={&(0x7f0000002000)=ANY=[@ANYBLOB="1c000000010601"], 0x1c}, 0x1, 0x0, 0x0, 0x44001}, 0x20004000) 1.653468696s ago: executing program 8 (id=3486): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_genetlink_get_family_id$fou(&(0x7f00000004c0), r0) 1.378026703s ago: executing program 7 (id=3487): openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x42000, 0x0) r0 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000040)={0x6000000d}) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000c40)) 1.123090785s ago: executing program 4 (id=3488): symlink(&(0x7f0000000540)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000380)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') readlinkat(0xffffffffffffff9c, &(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xffffffffffffffff, 0xb4) readlink(&(0x7f0000000280)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f00000004c0)=""/79, 0x4f) 1.043744873s ago: executing program 8 (id=3489): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000000000090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a090400000000000000000200000040000480100001800c0001006e6f747261636b002c0001800e000100696d6d656469617465000000180002800c00028005000100c402000008000140000000080900010073797a30000000000900020073797a320000000014000000110001"], 0x94}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000700)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x4009}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x74}, 0x1, 0x0, 0x0, 0x10}, 0x8084) 887.692842ms ago: executing program 9 (id=3490): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x28, 0x10, 0x801, 0x70bd2e, 0x25dfdbf7, {0x0, 0x0, 0x0, 0x0, 0x2202e}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x20000090) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f00000000c0)={0x18, 0x0, {0x4, @local, 'veth0_to_team\x00'}}, 0x1e) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0x4, @remote, 'veth0_virt_wifi\x00'}}, 0x1e) 703.079793ms ago: executing program 4 (id=3491): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) setsockopt$nfc_llcp_NFC_LLCP_RW(r0, 0x118, 0x0, &(0x7f00000000c0)=0xf00, 0x4) 576.010962ms ago: executing program 7 (id=3492): unshare(0x26000400) mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) ioctl$BLKPG(0xffffffffffffffff, 0xc0c0128e, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0}) 490.541436ms ago: executing program 8 (id=3493): prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff0000/0x1000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffe000/0x1000)=nil, &(0x7f0000ffa000/0x4000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004005) r0 = io_uring_setup(0x899, &(0x7f0000000040)={0x0, 0x1cb1, 0x1c080, 0xa, 0x20002f7}) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, 0x94) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000440)={0x0, 0x1e, "e2e6a141cd18cb820abf00386d51a2edab535ea30308a7ebcb456c594135"}, &(0x7f0000000480)=0x26) io_uring_enter(r0, 0x2219, 0x34d3, 0x16, 0x0, 0x0) 483.768102ms ago: executing program 5 (id=3494): setns(0xc9, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r1, 0x1, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x8090}, 0x2000c198) 256.073065ms ago: executing program 7 (id=3495): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b702000023000000bfa30000000000000703000000feffff7a0af0ff0000000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000001007d60b7030000010000006a0a00fe00000000850000000d0000009700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000000000639100000000000000000000ff7f0000292f17cee19d0001000000000000000000cb04fcbb0ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4852f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16cc75fe369258673b5d053bdec75dca3772be2c9d2d29db3d36dd01797bd3f15aa6aadbeab2a01685108e61aa000000000000000000000000008b798b4f7458d1863cc67d4c6a06e828e5216f601b19db1af1b5d356d0f062137d866d11be4ba3f0151fdbbd4e97d62ecc645e143a60f1b1b71b5f7ec6edc76609073909826151e2b42bf0ed0c8cef3ba2a730a00c87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc972a3fd2c46f3c1cde71a19d1a2982492aba0883783d2831210e00d2bfea3bf97ff8836d000000000000946bdb747e416b3064edb4f5aea06eba207ddab9f9baf98bc5192f23d95d33357fc55f92e5937e10995059f3348f69667b9260d504ba96446e1437af6fa875d9d32fdaaae01e6c74f192a23572ef582b7dd867c163c8cedaa2a2c5baceb37d4a40244c9bdca541cc7e65e20f5b5b735e2f33df9bd0614431d7dc5e47bb31c5b827d51733b64ddad4de1cdadce076d19d62e821b435619fb89fc07f81938200b4ebce83db57a6f5e9b1c2cf4b6ee90772d4865bf448d200e5c4e1e044d3587498128273b65670c02ff5c3c3ca633c41324fdc09e0b2621087db26bb0553612f2be27579ede2344a809e6b27d0044f2337895323357caddb54642dac82ae25deb08e111e0b9fa133c9da85dc50c3454ee0ff915331bd7f32f96fb55c7990334b1a1bc4d5d817b82f9fc278cc4858fbfa4d0f32a863c1ce050caddc5ca3b10c3e63daebba039e9f80fdef113a145ace522e8379474aa8849dcc2501df3ffcb02d29d55a1a2cbe00e836db0e6b0a7ffd680dbcf7b982a956998df3dce0e9091a4d736db69038061e"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000100), 0x237}, 0x48) socket$inet6_sctp(0xa, 0x5, 0x84) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x80802, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x50) r0 = socket$packet(0x11, 0x2, 0x300) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r0, &(0x7f00000005c0)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x8, r2, 0x14}, 0x80, 0x0}}], 0x1, 0x20000081) 255.894411ms ago: executing program 4 (id=3496): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000700850000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 141.688428ms ago: executing program 8 (id=3497): bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xe, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) writev(0xffffffffffffffff, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, 0x0, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000000)=0x8) write$binfmt_aout(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[], 0xff2e) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) ioctl$TCSETS(0xffffffffffffffff, 0x40045431, &(0x7f00000000c0)={0x0, 0x5, 0x400007f, 0x4000006, 0x3, "42341f9b1000007e4f00"}) r1 = syz_open_pts(0xffffffffffffffff, 0x60300) dup3(r1, 0xffffffffffffffff, 0x0) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x7ffff000, 0x0) 82.805109ms ago: executing program 7 (id=3498): syz_mount_image$ext4(&(0x7f0000000100)='ext4\x00', &(0x7f0000000480)='./file2\x00', 0x10445, &(0x7f0000000040)={[{@inlinecrypt}, {@stripe={'stripe', 0x3d, 0x4}}]}, 0x3, 0x453, &(0x7f00000004c0)="$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") r0 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) r1 = fspick(r0, &(0x7f00000000c0)='.\x00', 0x0) fsconfig$FSCONFIG_CMD_RECONFIGURE(r1, 0x7, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_FLAG(r1, 0x0, &(0x7f0000000000)='async\x00', 0x0, 0x0) 0s ago: executing program 4 (id=3499): prctl$PR_SET_SECCOMP(0x4e, 0x1, 0x0) setsockopt$inet_sctp_SCTP_AUTOCLOSE(0xffffffffffffffff, 0x84, 0x4, &(0x7f0000000300), 0x4) futex(0x0, 0x85, 0x0, 0x0, 0x0, 0xb0090199) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000500)={'virt_wifi0\x00', &(0x7f0000000200)=@ethtool_per_queue_op={0x4b, 0xf, [0xa, 0x47, 0x7fff, 0x1, 0x4, 0x9, 0xa4, 0xffb, 0x7, 0xb66, 0xc1, 0x4, 0x1, 0x3, 0x4, 0xfe, 0x1000, 0x9, 0x3, 0x3, 0x80000006, 0xfffffffa, 0x5d, 0xa, 0x9, 0x4, 0x7, 0x5, 0x100000, 0x763, 0xfffffffc, 0x1, 0xe, 0x2b12, 0x1100, 0x6, 0x1c00, 0xb, 0x40, 0x4, 0x1, 0x3, 0xffffad37, 0x0, 0x40, 0x8, 0x7, 0x79b, 0x2, 0x5, 0x7f, 0x7, 0xa, 0xefaf, 0xf, 0x102, 0x4, 0x1fa0860a, 0x7, 0xaa, 0x81, 0x9, 0x180000, 0x4007, 0x8b, 0x5, 0x2af, 0xf7, 0x5, 0x2, 0x400, 0x9, 0x4, 0x7, 0x2, 0x0, 0x4, 0x100002, 0x8, 0x752, 0x0, 0x3, 0x0, 0x10001, 0x2, 0x8, 0x6, 0x6, 0x9, 0x80000002, 0xfdffffff, 0x10002, 0xfffffffe, 0x84, 0x100, 0x5, 0xc, 0x81, 0xb, 0x5, 0x20006, 0x7, 0x2, 0xb, 0x4, 0xd9a, 0xd, 0x2a2, 0xfffffffd, 0x3, 0x2, 0x5, 0x8, 0x0, 0x4, 0x2, 0x80003b, 0x2, 0x4, 0x4, 0x401, 0x66cd, 0x8, 0x8, 0x1, 0x5, 0xc59, 0xffffffff]}}) kernel console output (not intermixed with test programs): SB device found, idVendor=041e, idProduct=3010, bcdDevice= 0.40 [ 689.378191][ T5613] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 689.429628][ T5613] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 689.486059][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 689.519339][ T5613] usb 7-1: Product: syz [ 689.545326][ T5613] usb 7-1: Manufacturer: syz [ 689.571377][ T5613] usb 7-1: SerialNumber: syz [ 690.058546][ T5613] usb 7-1: unknown interface protocol 0x29, assuming v1 [ 690.068859][ T5613] usb 7-1: skipping empty audio interface (v1) [ 690.969133][ T5613] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 691.032365][ T5613] usb 7-1: USB disconnect, device number 33 [ 691.098120][ T5338] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 691.330364][T10142] udevd[10142]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 693.349108][ T5338] usb 4-1: Using ep0 maxpacket: 32 [ 693.403531][ T5338] usb 4-1: device descriptor read/all, error -71 [ 694.823211][T13503] loop3: detected capacity change from 0 to 512 [ 694.884546][T13503] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 694.990805][T13503] EXT4-fs (loop3): 1 truncate cleaned up [ 695.073005][T13503] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 698.037637][T10611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.266252][T13523] loop3: detected capacity change from 0 to 32768 [ 701.316663][T13523] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2296 (13523) [ 701.400793][T13523] BTRFS error (device loop3): open_ctree failed: -4 [ 705.504054][ T5793] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 705.783339][T11788] Bluetooth: hci3: command 0x1003 tx timeout [ 705.799871][ T5626] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 707.361714][ T5613] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 708.910486][ T5744] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 709.090336][ T5744] usb 4-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 709.128946][ T5744] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 709.173702][ T5744] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 709.416444][T13600] loop9: detected capacity change from 0 to 32768 [ 709.458567][T13600] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop9 (7:9) scanned by syz.9.2320 (13600) [ 709.514510][T13600] BTRFS info (device loop9): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 709.954139][T13600] BTRFS info (device loop9): using crc32c checksum algorithm [ 710.374664][ T5744] lg-g15 0003:046D:C222.0012: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.3-1/input0 [ 710.490455][ T5744] lg-g15 0003:046D:C222.0012: Error getting LED brightness: 0 [ 710.506552][ T5744] lg-g15 0003:046D:C222.0012: probe with driver lg-g15 failed with error -5 [ 710.584644][T13600] BTRFS info (device loop9): enabling ssd optimizations [ 710.602752][T13600] BTRFS info (device loop9): turning on flush-on-commit [ 710.633340][T13600] BTRFS info (device loop9): enabling free space tree [ 710.773556][T13600] BTRFS info (device loop9): enabling auto defrag [ 710.821119][ T10] usb 4-1: USB disconnect, device number 6 [ 710.827620][T13600] BTRFS info (device loop9): use lzo compression, level 1 [ 710.888342][T13600] BTRFS info (device loop9): max_inline set to 4096 [ 711.585095][ T9734] BTRFS info (device loop9): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 713.621312][T13659] loop3: detected capacity change from 0 to 32768 [ 714.235662][T13659] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2333 (13659) [ 714.600880][T13659] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 714.695131][T13659] BTRFS info (device loop3): using crc32c checksum algorithm [ 714.857271][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 714.857749][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 714.941715][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-flush_delalloc": -EINTR [ 715.038456][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 715.134292][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-fixup": -EINTR [ 715.217428][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio": -EINTR [ 715.295871][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 715.396508][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 715.492037][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 715.584982][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 715.672913][T13659] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 715.828370][T13659] BTRFS error (device loop3): open_ctree failed: -12 [ 715.888813][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 716.297668][T13673] loop9: detected capacity change from 0 to 32768 [ 719.845918][T13733] loop9: detected capacity change from 0 to 1024 [ 721.450179][T13733] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 721.560887][T13733] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 721.664611][T13733] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 721.731899][T13733] EXT4-fs (loop9): orphan cleanup on readonly fs [ 721.837070][T13733] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.2346: Inode bitmap for bg 0 marked uninitialized [ 722.033040][T13733] loop9: lost filesystem error report for type 5 error -117 [ 722.038035][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 722.051853][ C1] EXT4-fs (loop9): initial error at time 1786776691: ext4_read_inode_bitmap:168 [ 722.060941][ C1] EXT4-fs (loop9): last error at time 1786776691: ext4_read_inode_bitmap:168 [ 723.499504][T13733] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 723.854188][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 725.021008][T13766] loop9: detected capacity change from 0 to 128 [ 725.083190][T13766] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 725.192575][T13766] ext4 filesystem being mounted at /149/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 725.358208][ T186] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 725.470899][ T9734] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 725.696219][T13758] loop3: detected capacity change from 0 to 32768 [ 725.754392][T13758] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2357 (13758) [ 726.076752][ T186] usb 2-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 726.093891][ T186] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 726.108906][ T186] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 726.122664][T13758] BTRFS info (device loop3): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 726.168141][T13758] BTRFS info (device loop3): using blake2b checksum algorithm [ 726.413649][T13758] BTRFS info (device loop3): enabling ssd optimizations [ 726.451062][T13798] loop9: detected capacity change from 0 to 512 [ 726.470750][T13758] BTRFS info (device loop3): turning on async discard [ 726.517276][T13758] BTRFS info (device loop3): enabling free space tree [ 726.564756][T13798] EXT4-fs error (device loop9): ext4_orphan_get:1399: inode #15: comm syz.9.2362: inode has both inline data and extents flags [ 726.611609][T13758] BTRFS info (device loop3): use zstd compression, level 3 [ 726.626935][T13798] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 726.628210][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 726.643920][ C1] EXT4-fs (loop9): initial error at time 1786776696: ext4_orphan_get:1399: inode 15 [ 726.653498][ C1] EXT4-fs (loop9): last error at time 1786776696: ext4_orphan_get:1399: inode 15 [ 726.670245][T13798] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2362: couldn't read orphan inode 15 (err -117) [ 727.151324][T13798] loop9: lost filesystem error report for type 5 error -117 [ 727.184976][T13798] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 727.431825][T10611] BTRFS info (device loop3): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 727.628618][ T186] lg-g15 0003:046D:C222.0013: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.1-1/input0 [ 727.701747][ T186] lg-g15 0003:046D:C222.0013: Error getting LED brightness: 2 [ 727.717422][ T186] lg-g15 0003:046D:C222.0013: probe with driver lg-g15 failed with error -5 [ 728.299619][T13816] loop3: detected capacity change from 0 to 512 [ 728.399516][T13816] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 728.584874][T13819] syzkaller0: entered promiscuous mode [ 728.631594][T13816] EXT4-fs (loop3): 1 truncate cleaned up [ 728.657225][T13819] syzkaller0: entered allmulticast mode [ 728.681571][ T186] usb 2-1: USB disconnect, device number 8 [ 728.712244][T13816] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 728.972643][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 729.246972][T13831] loop9: detected capacity change from 0 to 1024 [ 729.292933][T13831] EXT4-fs (loop9): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 729.345902][T13831] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 729.402781][T13831] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 729.450099][T13831] EXT4-fs (loop9): orphan cleanup on readonly fs [ 730.102372][T13831] EXT4-fs error (device loop9): ext4_read_inode_bitmap:168: comm syz.9.2369: Inode bitmap for bg 0 marked uninitialized [ 730.268187][T13831] loop9: lost filesystem error report for type 5 error -117 [ 730.278050][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 730.291866][ C0] EXT4-fs (loop9): initial error at time 1786776699: ext4_read_inode_bitmap:168 [ 730.301423][ C0] EXT4-fs (loop9): last error at time 1786776699: ext4_read_inode_bitmap:168 [ 730.313134][T13831] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 730.548888][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.833322][ T31] audit: type=1326 audit(1786776700.312:73): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 730.962115][ T31] audit: type=1326 audit(1786776700.312:74): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.051996][ T31] audit: type=1326 audit(1786776700.312:75): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=315 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.151906][ T31] audit: type=1326 audit(1786776700.312:76): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.275950][ T31] audit: type=1326 audit(1786776700.312:77): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.372324][ T31] audit: type=1326 audit(1786776700.312:78): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.495791][ T31] audit: type=1326 audit(1786776700.312:79): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.581095][ T31] audit: type=1326 audit(1786776700.422:80): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.669317][ T31] audit: type=1326 audit(1786776700.422:81): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 731.758161][ T31] audit: type=1326 audit(1786776700.512:82): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13848 comm="syz.9.2375" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f3a2639e0d9 code=0x7ffc0000 [ 732.248222][T13868] usb usb8: usbfs: process 13868 (syz.9.2379) did not claim interface 0 before use [ 735.994877][T10611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 736.012093][ T186] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 736.192339][ T186] usb 7-1: New USB device found, idVendor=046d, idProduct=c222, bcdDevice= 0.00 [ 737.205534][ T186] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 737.237505][ T186] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 738.067014][T13915] loop3: detected capacity change from 0 to 1024 [ 738.127968][T13915] EXT4-fs (loop3): ext4_check_descriptors: Checksum for group 0 failed (32298!=35945) [ 738.204389][T13915] EXT4-fs (loop3): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 738.306767][T13915] EXT4-fs (loop3): revision level too high, forcing read-only mode [ 738.355852][T13915] EXT4-fs (loop3): orphan cleanup on readonly fs [ 738.377549][T13915] EXT4-fs error (device loop3): ext4_read_inode_bitmap:168: comm syz.3.2387: Inode bitmap for bg 0 marked uninitialized [ 738.425979][T13915] loop3: lost filesystem error report for type 5 error -117 [ 738.428038][ C1] EXT4-fs (loop3): error count since last fsck: 1 [ 738.441884][ C1] EXT4-fs (loop3): initial error at time 1786776707: ext4_read_inode_bitmap:168 [ 738.450995][ C1] EXT4-fs (loop3): last error at time 1786776707: ext4_read_inode_bitmap:168 [ 738.486062][T13915] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 738.727531][T10611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 738.759038][ T186] lg-g15 0003:046D:C222.0014: hidraw0: USB HID v1.11 Device [HID 046d:c222] on usb-dummy_hcd.6-1/input0 [ 738.859636][ T186] lg-g15 0003:046D:C222.0014: Error getting LED brightness: 2 [ 738.934964][ T186] lg-g15 0003:046D:C222.0014: probe with driver lg-g15 failed with error -5 [ 739.087684][ T186] usb 7-1: USB disconnect, device number 34 [ 741.305004][T13927] loop3: detected capacity change from 0 to 32768 [ 741.628258][T13927] JBD2: Ignoring recovery information on journal [ 741.705705][T13927] jbd2_journal_bmap: journal block not found at offset 32 on loop3-75 [ 741.766285][T13927] JBD2: bad block at offset 32 [ 741.862946][T13927] ocfs2: Mounting device (7,3) on (node local, slot 0) with ordered data mode. [ 743.331268][T10611] ocfs2: Unmounting device (7,3) on (node local) [ 745.398629][ T31] kauditd_printk_skb: 22 callbacks suppressed [ 745.398653][ T31] audit: type=1326 audit(1786776714.872:105): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 745.602939][ T31] audit: type=1326 audit(1786776714.872:106): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 745.834355][ T31] audit: type=1326 audit(1786776714.932:107): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=28 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.071329][ T31] audit: type=1326 audit(1786776714.932:108): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.272507][ T31] audit: type=1326 audit(1786776714.942:109): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=149 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.475822][ T31] audit: type=1326 audit(1786776715.122:110): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.632409][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 746.649829][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 746.667918][ T31] audit: type=1326 audit(1786776715.122:111): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.823540][ T31] audit: type=1326 audit(1786776715.292:112): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 746.944865][ T31] audit: type=1326 audit(1786776715.292:113): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 747.053375][ T31] audit: type=1326 audit(1786776715.292:114): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=13988 comm="syz.3.2408" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7ebcb9e0d9 code=0x7ffc0000 [ 748.230518][T14028] netlink: 156 bytes leftover after parsing attributes in process `syz.6.2419'. [ 748.562999][T14030] loop9: detected capacity change from 0 to 2048 [ 748.603625][T14030] EXT4-fs: Ignoring removed nomblk_io_submit option [ 748.870682][T14030] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 749.619246][T14038] EXT4-fs error (device loop9): ext4_validate_block_bitmap:431: comm ext4lazyinit: bg 0: block 2: invalid block bitmap [ 749.776329][T14038] EXT4-fs (loop9): Remounting filesystem read-only [ 749.784455][T14010] loop3: detected capacity change from 0 to 40427 [ 749.797173][T14010] F2FS-fs (loop3): Unable to read 1th superblock [ 749.806638][T14010] F2FS-fs (loop3): Unable to read 2th superblock [ 750.218589][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 750.489859][T14057] binder: 14055:14057 ioctl c0306201 200000000080 returned -14 [ 750.569626][T14057] binder: 14055:14057 ioctl c0306201 2000000003c0 returned -14 [ 751.156160][T14065] loop9: detected capacity change from 0 to 1024 [ 751.229355][T14065] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 751.304787][T14065] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 751.679094][T14065] EXT4-fs (loop9): orphan cleanup on readonly fs [ 752.021211][T14065] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #3: comm syz.9.2425: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 752.157723][T14065] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 752.158029][ C0] EXT4-fs (loop9): error count since last fsck: 1 [ 752.173601][ C0] EXT4-fs (loop9): initial error at time 1786776721: ext4_ext_check_inode:521: inode 3 [ 752.183346][ C0] EXT4-fs (loop9): last error at time 1786776721: ext4_ext_check_inode:521: inode 3 [ 752.193357][T14065] EXT4-fs error (device loop9): ext4_quota_enable:7234: comm syz.9.2425: Bad quota inode: 3, type: 0 [ 752.388099][T14065] loop9: lost filesystem error report for type 5 error -117 [ 752.390107][T14065] EXT4-fs warning (device loop9): ext4_enable_quotas:7272: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 752.512966][T14065] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 752.522867][T14065] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 755.373510][T14089] syzkaller0: entered promiscuous mode [ 755.408956][T14089] syzkaller0: entered allmulticast mode [ 756.279967][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 756.842522][T14103] loop3: detected capacity change from 0 to 32768 [ 756.925096][T14103] XFS (loop3): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 757.048477][T14103] XFS (loop3): Ending clean mount [ 757.721961][T10611] XFS (loop3): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 759.084781][T14139] loop3: detected capacity change from 0 to 512 [ 759.124803][T14139] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 759.211311][T14139] EXT4-fs (loop3): 1 truncate cleaned up [ 759.281541][T14139] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 764.458569][T11788] Bluetooth: hci2: command 0x0406 tx timeout [ 767.892116][T10611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 768.970529][T14206] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2474'. [ 770.511411][T14194] loop3: detected capacity change from 0 to 32768 [ 770.554821][T14194] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop3 (7:3) scanned by syz.3.2469 (14194) [ 771.098808][T14194] BTRFS info (device loop3): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 771.109027][T14194] BTRFS info (device loop3): using crc32c checksum algorithm [ 771.181363][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-worker": -EINTR [ 771.183850][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-delalloc": -EINTR [ 771.276219][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-cache": -EINTR [ 771.378666][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-meta": -EINTR [ 771.443473][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-rmw": -EINTR [ 771.510642][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-endio-write": -EINTR [ 771.576883][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-delayed-meta": -EINTR [ 771.587679][T14194] workqueue: Failed to create a rescuer kthread for wq "btrfs-qgroup-rescan": -EINTR [ 771.611232][T14194] BTRFS error (device loop3): open_ctree failed: -12 [ 772.058528][T14240] loop9: detected capacity change from 0 to 512 [ 772.123052][T14240] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 772.282415][T14250] mmap: syz.5.2479 (14250) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 773.278402][T14240] EXT4-fs (loop9): 1 truncate cleaned up [ 774.299598][T14240] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 775.500161][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 775.611734][T14263] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2485'. [ 776.284076][T14276] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2487'. [ 780.831835][T14284] loop3: detected capacity change from 0 to 32768 [ 781.379634][T14284] XFS (loop3): Mounting V5 Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 781.700084][T14284] XFS (loop3): Torn write (CRC failure) detected at log block 0x30. Truncating head block from 0x51. [ 781.833951][T14284] XFS (loop3): Starting recovery (logdev: internal) [ 782.324721][T14284] XFS (loop3): Ending recovery (logdev: internal) [ 782.556378][T10611] XFS (loop3): Unmounting Filesystem c496e05e-540d-4c72-b591-04d79d8b4eeb [ 783.297477][T14319] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2499'. [ 784.297211][T14330] loop3: detected capacity change from 0 to 128 [ 784.347828][T14327] syzkaller0: entered promiscuous mode [ 784.369125][T14330] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 784.370038][T14327] syzkaller0: entered allmulticast mode [ 784.396804][T14330] ext4 filesystem being mounted at /129/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 784.481917][T14334] loop9: detected capacity change from 0 to 1024 [ 784.523329][T14334] EXT4-fs (loop9): warning: mounting unchecked fs, running e2fsck is recommended [ 784.591235][T14334] EXT4-fs (loop9): Errors on filesystem, clearing orphan list. [ 784.630606][T10611] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 784.644634][T14334] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 784.921879][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 785.250007][ T186] usb 7-1: new high-speed USB device number 35 using dummy_hcd [ 785.379672][ T5619] usb 10-1: new high-speed USB device number 21 using dummy_hcd [ 785.421245][ T186] usb 7-1: Using ep0 maxpacket: 8 [ 785.432930][ T186] usb 7-1: unable to get BOS descriptor or descriptor too short [ 785.448262][ T186] usb 7-1: New USB device found, idVendor=1235, idProduct=8214, bcdDevice= 0.40 [ 785.474574][ T186] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 785.495051][ T186] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 785.518416][ T186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 785.526802][ T186] usb 7-1: Product: syz [ 785.536836][ T186] usb 7-1: Manufacturer: syz [ 785.546969][ T186] usb 7-1: SerialNumber: syz [ 785.550985][ T5619] usb 10-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 785.582398][ T5619] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 785.617426][ T5619] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.747456][ T5619] usb 10-1: config 0 descriptor?? [ 785.934334][ T186] usb 7-1: 0:1 : does not exist [ 785.940466][ T186] usb 7-1: unit 3 not found! [ 785.945146][ T186] usb 7-1: unit 5 not found! [ 785.951113][ T186] usb 7-1: Focusrite Scarlett Gen 3 Mixer Driver enabled (pid=0x8214); report any issues to https://github.com/geoffreybennett/scarlett-gen2/issues [ 785.967853][ T186] usb 7-1: Error initialising Scarlett Gen 3 Mixer Driver: -22 [ 786.650928][ T5619] usbhid 10-1:0.0: can't add hid device: -71 [ 786.657650][ T5619] usbhid 10-1:0.0: probe with driver usbhid failed with error -71 [ 786.694910][ T5619] usb 10-1: USB disconnect, device number 21 [ 786.896863][ T186] snd-usb-audio 7-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 786.937162][ T186] usb 7-1: USB disconnect, device number 35 [ 786.995956][T14215] udevd[14215]: error opening ATTR{/sys/devices/platform/dummy_hcd.6/usb7/7-1/7-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 788.152868][T14366] loop9: detected capacity change from 0 to 256 [ 788.922027][T14366] exFAT-fs (loop9): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 788.938616][T14366] exFAT-fs (loop9): failed to load alloc-bitmap [ 788.945077][T14366] exFAT-fs (loop9): failed to recognize exfat type [ 790.749468][T13745] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 790.935901][T13745] usb 7-1: Using ep0 maxpacket: 16 [ 790.947565][T13745] usb 7-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 791.000369][T13745] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 81, changing to 10 [ 791.019165][T13745] usb 7-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid maxpacket 8871, setting to 1024 [ 791.032016][T13745] usb 7-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 28 [ 791.063194][T13745] usb 7-1: config 0 interface 0 has no altsetting 0 [ 791.070361][T13745] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 791.098851][T13745] usb 7-1: config 0 descriptor?? [ 791.524721][T13745] hid (null): nested delimiters [ 791.529806][T13745] hid (null): unknown global tag 0xe [ 791.547748][T13745] hid (null): unknown global tag 0xd [ 791.553385][T13745] hid (null): unknown global tag 0xfe [ 791.559211][T13745] hid (null): global environment stack underflow [ 791.565643][T13745] hid (null): invalid report_size 198691626 [ 791.572761][T13745] hid (null): unknown global tag 0xe [ 791.745290][ T5619] usb 7-1: USB disconnect, device number 36 [ 792.146071][T14365] vlan2: entered promiscuous mode [ 792.151398][T14365] syz_tun: entered promiscuous mode [ 795.078749][T14405] hub 8-0:1.0: USB hub found [ 795.088701][T14405] hub 8-0:1.0: 1 port detected [ 795.523372][T14398] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 795.613495][T14408] fuse: fd is not a fuse device [ 796.327853][T14423] loop3: detected capacity change from 0 to 512 [ 796.914616][T14423] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 797.066968][T14423] EXT4-fs (loop3): 1 truncate cleaned up [ 797.139734][T14423] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 798.557278][T10611] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 798.846771][T14416] loop9: detected capacity change from 0 to 40427 [ 798.865844][T14430] loop3: detected capacity change from 0 to 256 [ 798.877487][T14416] F2FS-fs (loop9): Invalid Fs Meta Ino: node(0) meta(2) root(0) [ 798.902652][T14416] F2FS-fs (loop9): Can't find valid F2FS filesystem in 1th superblock [ 798.940247][T14430] FAT-fs (loop3): error, allocated dir entry found after end-of-directory marker (i_pos 1) [ 798.947275][T14416] F2FS-fs (loop9): invalid crc value [ 798.990742][T14416] F2FS-fs (loop9): Failed to start F2FS issue_checkpoint_thread (-4) [ 798.992255][T14430] FAT-fs (loop3): Filesystem has been set read-only [ 801.959956][T14451] netlink: 'syz.3.2541': attribute type 16 has an invalid length. [ 802.107434][T14451] netlink: 'syz.3.2541': attribute type 17 has an invalid length. [ 803.984150][ T186] usb 7-1: new high-speed USB device number 37 using dummy_hcd [ 804.555097][T14474] loop9: detected capacity change from 0 to 512 [ 804.568367][T14474] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 804.643317][T14474] EXT4-fs (loop9): 1 truncate cleaned up [ 804.732358][ T186] usb 7-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 804.770870][T14474] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 804.801617][ T186] usb 7-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 804.847814][ T186] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 804.885637][ T186] usb 7-1: Product: syz [ 805.129615][ T186] usb 7-1: Manufacturer: syz [ 805.135084][ T186] usb 7-1: SerialNumber: syz [ 805.998705][ T186] cdc_ncm 7-1:1.0: bind() failure [ 806.031507][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 806.067229][ T186] cdc_ncm 7-1:1.1: CDC Union missing and no IAD found [ 806.099805][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 806.117566][ T186] cdc_ncm 7-1:1.1: bind() failure [ 806.133768][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 806.156187][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 806.186068][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 806.207242][ T186] usb 7-1: USB disconnect, device number 37 [ 806.844279][T14497] overlayfs: failed to clone upperpath [ 807.145168][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 807.152786][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 807.160905][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 807.168387][ T5613] hid-generic 0000:0000:0001.0016: unknown main item tag 0x0 [ 807.186120][ T5613] hid-generic 0000:0000:0001.0016: hidraw0: HID v0.10 Device [syz0] on syz1 [ 807.270437][T14486] bridge0: port 1(bridge_slave_0) entered disabled state [ 807.700954][T14503] fido_id[14503]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 808.054313][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.064039][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 810.083945][T14512] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 811.522815][T14530] loop9: detected capacity change from 0 to 512 [ 811.544178][T14530] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 811.622076][T14530] EXT4-fs (loop9): 1 truncate cleaned up [ 811.692629][T14530] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 813.609880][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 817.793524][T14585] loop9: detected capacity change from 0 to 16 [ 817.886892][T14585] erofs (device loop9): mounted with root inode @ nid 36. [ 818.013109][T14585] erofs (device loop9): compressed inode (nid 89) is invalid in a plain filesystem [ 820.294349][T14611] loop9: detected capacity change from 0 to 1024 [ 823.562005][ T5619] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 824.008131][ T5619] usb 4-1: Using ep0 maxpacket: 16 [ 824.047864][ T5619] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 824.107784][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 824.223961][ T5619] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 824.278247][ T5619] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 824.351084][ T5619] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 825.168674][ T5619] usb 4-1: config 0 descriptor?? [ 825.412084][ T5613] usb 7-1: new full-speed USB device number 38 using dummy_hcd [ 825.636334][T14639] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 825.650169][T14639] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 825.765523][ T5613] usb 7-1: New USB device found, idVendor=09e8, idProduct=0062, bcdDevice= 0.40 [ 826.192617][ T5613] usb 7-1: config 1 interface 0 altsetting 0 endpoint 0x8C has invalid maxpacket 512, setting to 64 [ 826.278755][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 826.306159][ T5613] usb 7-1: Product: syz [ 826.322802][ T5613] usb 7-1: Manufacturer: syz [ 826.340691][ T5613] usb 7-1: SerialNumber: syz [ 826.390970][T14635] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 826.666350][ T5613] usb 7-1: Quirk or no altset; falling back to MIDI 1.0 [ 826.959737][ T5613] usb 7-1: USB disconnect, device number 38 [ 827.302024][ T5619] usbhid 4-1:0.0: can't add hid device: -71 [ 827.322234][ T5619] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 827.385891][ T5619] usb 4-1: USB disconnect, device number 7 [ 828.737563][T14652] loop9: detected capacity change from 0 to 128 [ 828.822001][T14652] FAT-fs (loop9): data area starts beyond volume (33 > 0) [ 828.829340][T14652] FAT-fs (loop9): Can't find a valid FAT filesystem [ 831.024542][T14672] futex_wake_op: syz.1.2595 tries to shift op by 144; fix this program [ 832.312490][T14681] loop9: detected capacity change from 0 to 512 [ 832.353128][T14681] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 832.413387][T14681] EXT4-fs (loop9): feature flags set on rev 0 fs, running e2fsck is recommended [ 832.413688][T14682] input: syz0 as /devices/virtual/input/input21 [ 832.575763][T14681] __quota_error: 50 callbacks suppressed [ 832.575791][T14681] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 832.606625][T14681] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 832.617853][T14681] EXT4-fs error (device loop9): ext4_acquire_dquot:7039: comm syz.9.2599: Failed to acquire dquot type 1 [ 832.632654][T14681] loop9: lost filesystem error report for type 5 error -117 [ 832.638006][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 832.651931][ C1] EXT4-fs (loop9): last error at time 1786776802: ext4_acquire_dquot:7039 [ 832.710779][T14681] EXT4-fs (loop9): 1 truncate cleaned up [ 832.759648][T14681] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0008-000000000000 r/w without journal. Quota mode: writeback. [ 833.714448][T14701] Quota error (device loop9): do_check_range: Getting block 196613 out of range 1-5 [ 833.726104][T14701] Quota error (device loop9): qtree_read_dquot: Can't read quota structure for id 0 [ 833.735709][T14701] EXT4-fs error (device loop9): ext4_acquire_dquot:7039: comm syz.9.2599: Failed to acquire dquot type 1 [ 835.101337][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0008-000000000000. [ 837.074899][T14732] loop9: detected capacity change from 0 to 256 [ 837.098299][T14732] vfat: Unknown parameter 'shortnam' [ 838.513762][T14741] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2620'. [ 838.565154][T14744] loop9: detected capacity change from 0 to 512 [ 838.584882][T14744] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 838.669092][T14744] EXT4-fs (loop9): 1 truncate cleaned up [ 838.707196][T14744] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 839.814218][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 839.993116][T14757] mac80211_hwsim hwsim12 wlan0: left promiscuous mode [ 841.608086][ T10] usb 10-1: new high-speed USB device number 22 using dummy_hcd [ 841.786669][ T10] usb 10-1: Using ep0 maxpacket: 32 [ 842.781567][ T10] usb 10-1: unable to get BOS descriptor or descriptor too short [ 842.805475][ T10] usb 10-1: New USB device found, idVendor=0dba, idProduct=1000, bcdDevice= 0.40 [ 842.879181][ T10] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 843.838278][ T10] usb 10-1: Product: syz [ 843.838312][ T10] usb 10-1: Manufacturer: syz [ 843.838341][ T10] usb 10-1: SerialNumber: syz [ 845.068647][ T10] usb 10-1: unit 0 not found! [ 845.078545][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.087165][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.094767][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.102854][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.118652][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.126268][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.136842][ C0] raw-gadget.0 gadget.9: ignoring, device is not running [ 845.152289][ T10] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 845.224152][ T10] usb 10-1: unit 0 not found! [ 845.244714][ T10] snd-usb-audio 10-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 845.276594][ T10] usb 10-1: unit 0 not found! [ 846.518533][ T10] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 846.531679][T14818] fuse: fd is not a fuse device [ 846.560705][ T10] usb 10-1: USB disconnect, device number 22 [ 847.597649][T14487] udevd[14487]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 851.027729][T14851] vlan2: entered promiscuous mode [ 851.032920][T14851] syz_tun: entered promiscuous mode [ 857.908048][ T5731] usb 7-1: new high-speed USB device number 39 using dummy_hcd [ 858.072403][ T5731] usb 7-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 858.100571][ T5731] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 858.130418][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 858.169490][ T5731] usb 7-1: config 0 descriptor?? [ 858.208655][ T5731] usbhid 7-1:0.0: couldn't find an input interrupt endpoint [ 858.430702][ T5619] usb 7-1: USB disconnect, device number 39 [ 861.649471][T14966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 861.661483][T14966] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 861.670618][T14966] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 861.681907][T14966] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 861.692999][T14966] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 863.740192][ T5626] Bluetooth: hci3: command tx timeout [ 865.004688][T15007] overlayfs: failed to clone upperpath [ 865.116199][T15009] loop9: detected capacity change from 0 to 4096 [ 865.131824][T15009] EXT4-fs: Ignoring removed orlov option [ 865.137772][T15009] EXT4-fs: Ignoring removed nomblk_io_submit option [ 865.156272][T15009] EXT4-fs (loop9): Test dummy encryption mode enabled [ 866.118079][ T5626] Bluetooth: hci3: command tx timeout [ 866.156788][T15009] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 866.363249][T15009] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 867.346904][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 867.363711][ T6309] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 867.952493][ T6309] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 868.338003][ T5626] Bluetooth: hci3: command tx timeout [ 869.351142][ T6309] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 869.490852][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 869.497266][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.434364][ T10] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 870.447505][ T6309] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 870.620277][ T10] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 870.661322][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 870.699924][ T10] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 870.706951][ T5626] Bluetooth: hci3: command tx timeout [ 870.710924][ T10] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 870.725434][T14965] bridge0: port 1(bridge_slave_0) entered blocking state [ 870.736938][ T10] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 870.752421][T14965] bridge0: port 1(bridge_slave_0) entered disabled state [ 870.763936][ T10] usb 4-1: config 0 descriptor?? [ 870.781038][T14965] bridge_slave_0: entered allmulticast mode [ 870.791524][T14965] bridge_slave_0: entered promiscuous mode [ 870.800835][T14965] bridge0: port 2(bridge_slave_1) entered blocking state [ 870.808693][T14965] bridge0: port 2(bridge_slave_1) entered disabled state [ 870.815907][T14965] bridge_slave_1: entered allmulticast mode [ 870.824425][T14965] bridge_slave_1: entered promiscuous mode [ 871.012787][T15069] overlayfs: failed to clone lowerpath [ 871.061506][T14965] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 871.853981][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 871.894868][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 871.941943][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 871.971603][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 871.985133][T14965] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.989370][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.027617][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.063139][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.087882][T14965] team0: Port device team_slave_0 added [ 872.089192][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.099840][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.123837][ T10] plantronics 0003:047F:FFFF.0017: unknown main item tag 0x0 [ 872.185193][T14965] team0: Port device team_slave_1 added [ 872.192786][ T10] plantronics 0003:047F:FFFF.0017: hiddev0,hidraw0: USB HID v0.00 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 872.262127][ T10] usb 4-1: USB disconnect, device number 8 [ 872.534550][T15081] loop9: detected capacity change from 0 to 128 [ 872.594266][T15077] fido_id[15077]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 873.590335][T14965] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 873.690027][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 873.717394][T14965] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.611252][T15081] EXT4-fs (loop9): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 875.125197][T15081] ext4 filesystem being mounted at /208/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 875.518210][T15081] EXT4-fs (loop9): shut down requested (2) [ 875.546626][ T6309] bridge_slave_1: left allmulticast mode [ 875.560345][ T6309] bridge_slave_1: left promiscuous mode [ 875.567818][T15081] fscrypt (loop9, inode 12): Error -5 getting encryption context [ 875.576330][ T6309] bridge0: port 2(bridge_slave_1) entered disabled state [ 875.615855][ T6309] bridge_slave_0: left allmulticast mode [ 875.628819][ T6309] bridge_slave_0: left promiscuous mode [ 875.646826][ T6309] bridge0: port 1(bridge_slave_0) entered disabled state [ 875.721411][ T9734] EXT4-fs (loop9): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 875.959370][ T6384] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 876.148143][ T6384] usb 4-1: Using ep0 maxpacket: 32 [ 876.179545][ T6384] usb 4-1: unable to get BOS descriptor or descriptor too short [ 876.197684][ T6384] usb 4-1: New USB device found, idVendor=2b53, idProduct=0023, bcdDevice= 0.40 [ 876.225572][ T6384] usb 4-1: config 1 has an invalid interface number: 64 but max is 2 [ 876.260581][ T6384] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 876.308977][ T6384] usb 4-1: config 1 has no interface number 0 [ 876.335669][ T6384] usb 4-1: Duplicate descriptor for config 1 interface 2 altsetting 0, skipping [ 876.408453][ T6384] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.475205][ T6384] usb 4-1: Product: syz [ 877.450760][ T6384] usb 4-1: Manufacturer: syz [ 877.465608][ T6384] usb 4-1: SerialNumber: syz [ 879.154998][ T6309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 879.227313][ T6384] snd-usb-audio 4-1:1.64: probe with driver snd-usb-audio failed with error -22 [ 879.246422][ T6309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 879.302054][ T6309] bond0 (unregistering): Released all slaves [ 879.313447][ T6384] snd-usb-audio 4-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 879.358359][T14965] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.398221][T14965] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.556903][T14965] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 880.596922][ T6384] snd-usb-audio 4-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 880.665244][ T6384] usb 4-1: USB disconnect, device number 9 [ 880.800789][T14487] udevd[14487]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 882.347889][ T5267] 8021q: adding VLAN 0 to HW filter on device eth5 [ 882.516482][T14965] hsr_slave_0: entered promiscuous mode [ 882.577455][T14965] hsr_slave_1: entered promiscuous mode [ 882.630690][T14965] debugfs: 'hsr0' already exists in 'hsr' [ 882.684314][T14965] Cannot create hsr debugfs directory [ 883.141333][ T6309] hsr_slave_0: left promiscuous mode [ 883.177445][ T6309] hsr_slave_1: left promiscuous mode [ 883.232015][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 883.286480][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 883.320713][ T6309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 883.340152][ T6309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 883.374870][ T6309] veth1_macvtap: left promiscuous mode [ 883.388273][ T6309] veth0_macvtap: left promiscuous mode [ 883.399045][ T6309] veth1_vlan: left promiscuous mode [ 883.414815][ T6309] veth0_vlan: left promiscuous mode [ 883.898316][T15173] loop9: detected capacity change from 0 to 256 [ 883.916351][T15173] exfat: Deprecated parameter 'utf8' [ 883.922651][T15173] exfat: Deprecated parameter 'namecase' [ 883.929479][T15173] exfat: Deprecated parameter 'utf8' [ 884.232696][T15173] exFAT-fs (loop9): failed to load upcase table (idx : 0x0001fe89, chksum : 0xc374f927, utbl_chksum : 0xe619d30d) [ 886.519856][T15181] netlink: 'syz.3.2747': attribute type 21 has an invalid length. [ 886.764521][ T6309] team0 (unregistering): Port device team_slave_1 removed [ 886.797903][ T6309] team0 (unregistering): Port device team_slave_0 removed [ 887.186759][T15181] netlink: 'syz.3.2747': attribute type 6 has an invalid length. [ 887.194844][T15181] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2747'. [ 888.664826][T15201] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2752'. [ 889.599238][T15208] Dead loop on virtual device ip6_vti0 (net 242), fix it urgently! [ 889.695286][T15211] loop9: detected capacity change from 0 to 16 [ 889.713022][T15211] erofs: Unknown parameter '' [ 892.627978][T15227] binder: 15226:15227 ioctl c0306201 200000000640 returned -22 [ 893.220003][T15236] netlink: 'syz.5.2763': attribute type 39 has an invalid length. [ 894.984839][T15236] veth1_macvtap: left promiscuous mode [ 895.137737][ T5267] 8021q: adding VLAN 0 to HW filter on device eth6 [ 896.859041][ T5613] usb 7-1: new high-speed USB device number 40 using dummy_hcd [ 897.050016][ T5613] usb 7-1: New USB device found, idVendor=0bda, idProduct=8150, bcdDevice= 0.00 [ 897.113468][ T5613] usb 7-1: config index 0 descriptor too short (expected 45, got 32) [ 897.165245][ T5613] usb 7-1: config 1 has an invalid descriptor of length 9, skipping remainder of the config [ 897.228910][ T5613] usb 7-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 897.322112][ T5613] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.369019][ T5613] usb 7-1: Product: syz [ 897.403904][ T5613] usb 7-1: Manufacturer: syz [ 897.442646][ T5613] usb 7-1: SerialNumber: syz [ 897.576937][ T5613] rtl8150 7-1:1.0: couldn't find required endpoints [ 897.631734][ T5613] rtl8150 7-1:1.0: probe with driver rtl8150 failed with error -5 [ 897.841500][ T5613] usb 7-1: USB disconnect, device number 40 [ 898.120420][T14965] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 898.174653][T14965] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 898.202180][T14965] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 898.244507][T14965] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 898.261791][T14965] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 898.287741][T14965] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 898.320139][T14965] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 898.395968][T14965] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 898.514879][T15304] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 898.576611][T15304] overlayfs: failed to set xattr on upper [ 898.596626][T15304] overlayfs: ...falling back to redirect_dir=nofollow. [ 898.631723][T15304] overlayfs: ...falling back to index=off. [ 898.656146][T15304] overlayfs: ...falling back to uuid=null. [ 898.729328][T14965] 8021q: adding VLAN 0 to HW filter on device bond0 [ 898.811487][ T5267] 8021q: adding VLAN 0 to HW filter on device eth7 [ 898.850901][T14965] 8021q: adding VLAN 0 to HW filter on device team0 [ 898.886176][T15320] cgroup: Invalid name [ 898.901554][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 898.908746][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 898.959134][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 898.966472][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 900.048101][ T5731] usb 7-1: new high-speed USB device number 41 using dummy_hcd [ 900.218464][ T5731] usb 7-1: Using ep0 maxpacket: 16 [ 900.248004][ T5731] usb 7-1: New USB device found, idVendor=28bd, idProduct=0071, bcdDevice= 0.00 [ 900.269003][ T5731] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 900.290260][ T5731] usb 7-1: config 0 has no interface number 0 [ 900.314300][ T5731] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 900.363108][ T5731] usb 7-1: config 0 descriptor?? [ 900.819070][ T6384] usb 10-1: new high-speed USB device number 23 using dummy_hcd [ 901.545403][T15365] overlayfs: failed to clone upperpath [ 901.820443][ T5731] input: HID 28bd:0071 Pen as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0018/input/input22 [ 901.968397][ T5613] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 902.159217][ T5613] usb 4-1: New USB device found, idVendor=0e8f, idProduct=0003, bcdDevice= 0.00 [ 902.197870][ T5613] usb 4-1: config 0 interface 0 altsetting 3 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 902.234806][ T5613] usb 4-1: config 0 interface 0 altsetting 3 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 902.282108][ T5613] usb 4-1: config 0 interface 0 has no altsetting 0 [ 902.307260][ T5613] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 902.347988][ T5613] usb 4-1: config 0 descriptor?? [ 902.829258][ T6384] usb 10-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 902.851973][ T6384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 902.855520][ T5613] hid_parser_main: 28 callbacks suppressed [ 902.855547][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 902.866698][ T5731] input: HID 28bd:0071 Pad as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.1/0003:28BD:0071.0018/input/input23 [ 903.064316][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.095420][ T6384] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 903.111389][ T6384] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 903.151711][ T5731] uclogic 0003:28BD:0071.0018: input,hidraw0: USB HID v0.02 Keypad [HID 28bd:0071] on usb-dummy_hcd.6-1/input1 [ 903.157565][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.169801][ T6384] usb 10-1: config 0 descriptor?? [ 903.189704][ T5267] 8021q: adding VLAN 0 to HW filter on device eth8 [ 903.248980][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.321348][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.367370][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.405176][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.443891][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.483719][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.527883][ T5613] pantherlord 0003:0E8F:0003.0019: unknown main item tag 0x0 [ 903.603713][ T5613] pantherlord 0003:0E8F:0003.0019: hidraw1: USB HID v80.00 Device [HID 0e8f:0003] on usb-dummy_hcd.3-1/input0 [ 903.655394][ T5613] pantherlord 0003:0E8F:0003.0019: no output reports found [ 903.716584][ T6384] playstation 0003:054C:0DF2.001A: hidraw2: USB HID v1.01 Device [HID 054c:0df2] on usb-dummy_hcd.9-1/input0 [ 903.720427][T14965] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 903.831975][ T5613] usb 4-1: USB disconnect, device number 10 [ 904.026630][T15394] fido_id[15394]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 904.249674][ T5731] usb 7-1: USB disconnect, device number 41 [ 904.305452][ T6384] playstation 0003:054C:0DF2.001A: Failed to retrieve feature with reportID 5: -71 [ 904.349875][T15408] netlink: 'syz.0.2803': attribute type 39 has an invalid length. [ 904.354307][ T6384] playstation 0003:054C:0DF2.001A: Failed to retrieve DualSense calibration info: -71 [ 904.407054][ T6384] playstation 0003:054C:0DF2.001A: Failed to get calibration data from DualSense [ 904.412471][T15408] veth1_macvtap: left promiscuous mode [ 904.466152][ T6384] playstation 0003:054C:0DF2.001A: Failed to create dualsense. [ 904.552663][ T6384] playstation 0003:054C:0DF2.001A: probe with driver playstation failed with error -71 [ 904.629062][ T6384] usb 10-1: USB disconnect, device number 23 [ 905.334476][T14965] veth0_vlan: entered promiscuous mode [ 905.386156][T14965] veth1_vlan: entered promiscuous mode [ 905.510654][T14965] veth0_macvtap: entered promiscuous mode [ 905.555777][T14965] veth1_macvtap: entered promiscuous mode [ 905.645907][T15438] overlayfs: failed to clone lowerpath [ 905.694165][T14965] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 905.706140][T15438] overlayfs: failed to clone lowerpath [ 905.755253][T14965] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 905.850056][ T7567] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 905.952253][ T5916] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.011823][ T5916] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.062456][T15449] fuse: fd is not a fuse device [ 906.138359][ T7569] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 906.335776][T15458] file system registered [ 906.389790][ T5916] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 906.407054][ T5916] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 906.426153][T15463] loop9: detected capacity change from 0 to 512 [ 906.647310][ T6071] ffs_data_put(): freeing [ 906.771138][T15463] EXT4-fs warning (device loop9): dx_probe:836: inode #2: comm syz.9.2815: Unimplemented hash flags: 0x0001 [ 907.037381][T15463] EXT4-fs warning (device loop9): dx_probe:933: inode #2: comm syz.9.2815: Corrupt directory, running e2fsck is recommended [ 907.113116][ T7567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 907.137280][T15463] EXT4-fs (loop9): Cannot turn on journaled quota: type 1: error -117 [ 907.156963][ T7567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 907.206197][T15463] EXT4-fs error (device loop9): ext4_iget_extra_inode:5179: inode #15: comm syz.9.2815: corrupted in-inode xattr: invalid ea_ino [ 907.333035][T15463] loop9: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 907.335445][T15463] EXT4-fs error (device loop9): ext4_orphan_get:1402: comm syz.9.2815: couldn't read orphan inode 15 (err -117) [ 907.344955][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 907.344990][ C1] EXT4-fs (loop9): initial error at time 1786776876: ext4_iget_extra_inode:5179: inode 15 [ 907.345047][ C1] EXT4-fs (loop9): last error at time 1786776876: ext4_iget_extra_inode:5179: inode 15 [ 907.530112][T15463] loop9: lost filesystem error report for type 5 error -117 [ 907.540981][T15463] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 907.756219][T15477] syzkaller1: entered promiscuous mode [ 907.762072][T15477] syzkaller1: entered allmulticast mode [ 907.768203][T15470] EXT4-fs error (device loop9): ext4_mb_generate_buddy:1314: group 0, block bitmap and bg descriptor inconsistent: 219 vs 220 free clusters [ 910.485584][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 910.979345][ T5613] usb 10-1: new high-speed USB device number 24 using dummy_hcd [ 911.045545][ T3288] Bluetooth: hci2: Frame reassembly failed (-84) [ 911.158329][ T5613] usb 10-1: Using ep0 maxpacket: 32 [ 911.185701][ T5613] usb 10-1: New USB device found, idVendor=1e7d, idProduct=2d5a, bcdDevice= 0.00 [ 911.245958][ T5613] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 911.278989][ T5613] usb 10-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 911.313614][ T5613] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 911.355826][ T5613] usb 10-1: config 0 descriptor?? [ 911.837503][T15583] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2850'. [ 912.084701][ T5613] savu 0003:1E7D:2D5A.001B: hiddev0,hidraw0: USB HID v0.00 Device [HID 1e7d:2d5a] on usb-dummy_hcd.9-1/input0 [ 912.406978][ T5613] usb 10-1: USB disconnect, device number 24 [ 912.696319][T15589] fido_id[15589]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.9/usb10/report_descriptor': No such file or directory [ 912.848419][T13745] usb 8-1: new full-speed USB device number 6 using dummy_hcd [ 913.021238][T13745] usb 8-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 913.050787][T15601] netlink: 'syz.5.2854': attribute type 27 has an invalid length. [ 913.056330][T13745] usb 8-1: config 0 has an invalid interface number: 41 but max is 0 [ 913.075983][T15604] binder: 15602:15604 ioctl 50009417 0 returned -22 [ 913.084467][T13745] usb 8-1: config 0 has no interface number 0 [ 913.089341][T14966] Bluetooth: hci2: command 0x1003 tx timeout [ 913.093298][ T5626] Bluetooth: hci2: Opcode 0x1003 failed: -110 [ 913.131885][T13745] usb 8-1: config 0 interface 41 has no altsetting 0 [ 913.143819][T13745] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 913.171189][T13745] usb 8-1: Product: syz [ 913.176662][T13745] usb 8-1: Manufacturer: syz [ 913.182022][T13745] usb 8-1: SerialNumber: syz [ 913.190526][T13745] usb 8-1: config 0 descriptor?? [ 913.556117][T15601] vlan2: left promiscuous mode [ 913.575815][T15601] syz_tun: left promiscuous mode [ 914.062677][T13745] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): sr_get_phy_addr : Error reading PHYID register:ffffffe0 [ 914.309956][ T5731] usb 10-1: new high-speed USB device number 25 using dummy_hcd [ 914.490202][ T5731] usb 10-1: New USB device found, idVendor=1f38, idProduct=0001, bcdDevice= 0.40 [ 914.537309][ T5731] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 53, changing to 7 [ 914.568073][ T5731] usb 10-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid maxpacket 1568, setting to 1024 [ 914.603045][ T5731] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.614219][ T6308] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 914.623063][ T5731] usb 10-1: Product: syz [ 914.633986][ T6308] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 914.637551][ T5731] usb 10-1: Manufacturer: syz [ 914.641910][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 914.659882][ T5731] usb 10-1: SerialNumber: syz [ 914.963836][ T5731] usb 10-1: Can't get UAC3 power state for id 10 [ 914.979148][ T5731] usb 10-1: BAAD HEADSET ADAPTER c_chmask mismatch [ 914.999208][ T5731] snd-usb-audio 10-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 915.000392][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.045577][ T5731] usb 10-1: Audio class v2/v3 interfaces need an interface association [ 915.062325][ T30] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 915.241963][ T5731] snd-usb-audio 10-1:1.2: probe with driver snd-usb-audio failed with error -22 [ 915.285430][ T5731] usb 10-1: USB disconnect, device number 25 [ 915.303473][T15653] overlayfs: failed to clone upperpath [ 915.381362][T13745] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Error reading RX_CTL register:ffffffb9 [ 915.437522][T13745] CoreChips 8-1:0.41 (unnamed net_device) (uninitialized): Failed to write RX_CTL mode to 0x0000:ffffffb9 [ 915.450326][T14350] udevd[14350]: error opening ATTR{/sys/devices/platform/dummy_hcd.9/usb10/10-1/10-1:1.2/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 915.493373][T13745] CoreChips 8-1:0.41: probe with driver CoreChips failed with error -71 [ 915.523214][T13745] usb 8-1: USB disconnect, device number 6 [ 916.128775][ T5731] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 916.298032][ T5731] usb 4-1: Using ep0 maxpacket: 32 [ 916.315366][ T5731] usb 4-1: New USB device found, idVendor=056a, idProduct=0323, bcdDevice= 0.00 [ 916.338819][ T5731] usb 4-1: too many endpoints for config 0 interface 0 altsetting 0: 254, using maximum allowed: 30 [ 916.355826][ T5731] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 916.371149][T15678] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2877'. [ 916.399842][ T5731] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 916.425162][ T5731] usb 4-1: config 0 descriptor?? [ 917.481218][ T5731] usb 4-1: USB disconnect, device number 11 [ 917.889783][ T30] usb 8-1: new high-speed USB device number 7 using dummy_hcd [ 918.090225][ T30] usb 8-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 918.121449][ T30] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 918.153579][ T30] usb 8-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 918.191946][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 918.215427][ T30] usb 8-1: SerialNumber: syz [ 918.499144][ T30] usb 8-1: 0:2 : does not exist [ 918.726402][ T30] usb 8-1: USB disconnect, device number 7 [ 919.008201][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 919.220668][T14183] udevd[14183]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 920.498106][ T5731] usb 8-1: new high-speed USB device number 8 using dummy_hcd [ 920.623412][T14966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 920.640264][T14966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 920.654033][T14966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 920.670197][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 920.696870][ T5731] usb 8-1: Using ep0 maxpacket: 16 [ 920.704532][T14966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 920.711776][ T5731] usb 8-1: New USB device found, idVendor=0d8c, idProduct=0102, bcdDevice= 0.40 [ 920.724034][T14966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 920.735756][ T5731] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.743997][ T5731] usb 8-1: Product: syz [ 920.748243][ T5731] usb 8-1: Manufacturer: syz [ 920.752847][ T5731] usb 8-1: SerialNumber: syz [ 921.137058][ T31] audit: type=1326 audit(1786776890.612:165): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=15754 comm="syz.6.2900" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fd52179e0d9 code=0x0 [ 921.299121][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.560945][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 921.702961][ T5731] snd-usb-audio 8-1:1.0: probe with driver snd-usb-audio failed with error -71 [ 921.771930][ T5731] usb 8-1: USB disconnect, device number 8 [ 921.816671][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 922.298375][ T5613] usb 10-1: new full-speed USB device number 26 using dummy_hcd [ 922.465897][T15786] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2906'. [ 922.497879][ T5613] usb 10-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 922.535070][ T5613] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 922.582146][ T5613] usb 10-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 512, setting to 64 [ 922.634881][ T5613] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 922.677540][ T5613] usb 10-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid maxpacket 512, setting to 64 [ 922.706793][ T5613] usb 10-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.735386][ T5613] usb 10-1: Product: syz [ 922.747324][ T13] bridge_slave_1: left allmulticast mode [ 922.762552][ T5613] usb 10-1: Manufacturer: syz [ 922.775815][ T13] bridge_slave_1: left promiscuous mode [ 922.785663][ T5613] usb 10-1: SerialNumber: syz [ 922.800202][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 922.817271][T15778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 922.848271][ T5626] Bluetooth: hci0: command tx timeout [ 922.864785][ T13] bridge_slave_0: left allmulticast mode [ 922.888087][ T13] bridge_slave_0: left promiscuous mode [ 922.900215][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 923.056155][T15778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 923.074079][T15778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 923.081376][ T5338] usb 8-1: new high-speed USB device number 9 using dummy_hcd [ 923.285233][ T5338] usb 8-1: Using ep0 maxpacket: 8 [ 923.303825][ T5338] usb 8-1: New USB device found, idVendor=0eef, idProduct=72c4, bcdDevice= 0.00 [ 923.337236][ T5338] usb 8-1: config 0 interface 0 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 923.388954][ T5338] usb 8-1: config 0 interface 0 has no altsetting 0 [ 923.410913][ T5338] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 923.459160][ T5338] usb 8-1: config 0 descriptor?? [ 923.643068][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 923.696273][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 923.720938][T15778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 923.724054][ T13] bond0 (unregistering): Released all slaves [ 923.738876][T15778] raw-gadget.0 gadget.9: fail, usb_ep_enable returned -22 [ 923.910578][ T5338] hid_parser_main: 19 callbacks suppressed [ 923.910609][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 923.955949][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 923.959465][ T5613] cdc_ncm 10-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 923.963955][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 923.997019][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.011489][ T5613] cdc_ncm 10-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 924.016812][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.027268][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.038857][ T5613] cdc_ncm 10-1:1.0: setting rx_max = 2048 [ 924.039765][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.056452][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.073443][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.109908][ T5338] hid-multitouch 0003:0EEF:72C4.001D: unknown main item tag 0x0 [ 924.157471][ T5338] hid-multitouch 0003:0EEF:72C4.001D: hidraw0: USB HID v10.04 Device [HID 0eef:72c4] on usb-dummy_hcd.7-1/input0 [ 924.164650][ T5613] cdc_ncm 10-1:1.0: setting tx_max = 88 [ 924.212065][ T5338] usb 8-1: USB disconnect, device number 9 [ 924.346994][ T5613] cdc_ncm 10-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.9-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 924.352576][T15818] fido_id[15818]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.7/usb8/report_descriptor': No such file or directory [ 924.461718][ T5613] usb 10-1: USB disconnect, device number 26 [ 924.471805][ T13] hsr_slave_0: left promiscuous mode [ 924.494397][ T13] hsr_slave_1: left promiscuous mode [ 924.521311][ T5613] cdc_ncm 10-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.9-1, CDC NCM (NO ZLP) [ 924.533364][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 924.556852][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 924.605191][ T13] veth0_macvtap: left promiscuous mode [ 924.613193][ T13] veth1_vlan: left promiscuous mode [ 924.619066][ T13] veth0_vlan: left promiscuous mode [ 924.939033][ T5626] Bluetooth: hci0: command tx timeout [ 926.433557][ T13] team0 (unregistering): Port device team_slave_1 removed [ 926.536133][ T13] team0 (unregistering): Port device team_slave_0 removed [ 927.008058][ T5626] Bluetooth: hci0: command tx timeout [ 927.158370][ T30] usb 8-1: new high-speed USB device number 10 using dummy_hcd [ 927.339383][ T30] usb 8-1: Using ep0 maxpacket: 16 [ 927.364795][ T30] usb 8-1: New USB device found, idVendor=057e, idProduct=2019, bcdDevice= 0.00 [ 927.416920][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 927.484086][ T30] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x2 has an invalid bInterval 0, changing to 7 [ 927.632181][ T30] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 5 [ 927.646338][ T30] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 927.882136][ T30] usb 8-1: config 0 descriptor?? [ 928.368188][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 928.415052][ T30] nintendo 0003:057E:2019.001E: hidraw0: USB HID v80.05 Device [HID 057e:2019] on usb-dummy_hcd.7-1/input0 [ 928.715224][T15891] futex_wake_op: syz.5.2932 tries to shift op by 144; fix this program [ 928.789025][ T30] nintendo 0003:057E:2019.001E: Failed to get joycon info; ret=-71 [ 928.849736][ T30] nintendo 0003:057E:2019.001E: Failed to retrieve controller info; ret=-71 [ 928.895746][ T30] nintendo 0003:057E:2019.001E: Failed to initialize controller; ret=-71 [ 928.976903][ T30] nintendo 0003:057E:2019.001E: probe - fail = -71 [ 929.098002][ T5626] Bluetooth: hci0: command tx timeout [ 929.236552][ T30] nintendo 0003:057E:2019.001E: probe with driver nintendo failed with error -71 [ 929.930960][ T30] usb 8-1: USB disconnect, device number 10 [ 930.676366][T15919] overlayfs: failed lookup in lower (newroot/241, name='file2', err=-40): overlapping layers [ 930.963177][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 930.970194][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 931.193249][T15744] bridge0: port 1(bridge_slave_0) entered blocking state [ 931.236021][T15744] bridge0: port 1(bridge_slave_0) entered disabled state [ 931.269406][T15744] bridge_slave_0: entered allmulticast mode [ 931.297586][T15744] bridge_slave_0: entered promiscuous mode [ 931.332959][T15744] bridge0: port 2(bridge_slave_1) entered blocking state [ 931.358127][T15744] bridge0: port 2(bridge_slave_1) entered disabled state [ 931.377880][T15744] bridge_slave_1: entered allmulticast mode [ 931.414561][T15744] bridge_slave_1: entered promiscuous mode [ 931.546099][T15744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 931.630479][T15744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 931.762719][T15744] team0: Port device team_slave_0 added [ 931.807253][T15744] team0: Port device team_slave_1 added [ 931.927510][T15744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 931.948412][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.008318][T15744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 932.055545][T15744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 932.071875][T15744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 932.142045][T15744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 932.351782][T15744] hsr_slave_0: entered promiscuous mode [ 932.379435][T15744] hsr_slave_1: entered promiscuous mode [ 932.399978][T15744] debugfs: 'hsr0' already exists in 'hsr' [ 932.423681][T15744] Cannot create hsr debugfs directory [ 932.978167][T13745] usb 10-1: new high-speed USB device number 27 using dummy_hcd [ 933.649978][T13745] usb 10-1: Using ep0 maxpacket: 8 [ 933.717605][T13745] usb 10-1: New USB device found, idVendor=057e, idProduct=200e, bcdDevice= 0.00 [ 933.780736][T13745] usb 10-1: too many endpoints for config 0 interface 0 altsetting 9: 254, using maximum allowed: 30 [ 933.841097][T13745] usb 10-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 254 [ 933.897632][T13745] usb 10-1: config 0 interface 0 has no altsetting 0 [ 933.929532][T13745] usb 10-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 933.974088][T13745] usb 10-1: config 0 descriptor?? [ 934.361630][T14966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 934.373435][T14966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 934.382480][T14966] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 934.391603][T14966] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 934.401030][T14966] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 934.479921][T13745] nintendo 0003:057E:200E.001F: ignoring exceeding usage max [ 934.519856][T13745] nintendo 0003:057E:200E.001F: hidraw0: USB HID v80.01 Device [HID 057e:200e] on usb-dummy_hcd.9-1/input0 [ 934.628038][T15985] syzkaller1: entered promiscuous mode [ 934.642386][T13745] nintendo 0003:057E:200E.001F: Failed charging grip handshake [ 934.642630][T15985] syzkaller1: entered allmulticast mode [ 934.677120][T13745] nintendo 0003:057E:200E.001F: Failed to initialize controller; ret=-110 [ 934.734951][T13745] nintendo 0003:057E:200E.001F: probe - fail = -110 [ 934.779393][T13745] nintendo 0003:057E:200E.001F: probe with driver nintendo failed with error -110 [ 935.087607][T13745] usb 10-1: USB disconnect, device number 27 [ 935.736506][T16014] netlink: 'syz.9.2960': attribute type 32 has an invalid length. [ 936.446361][ T6308] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 936.528763][ T5626] Bluetooth: hci2: command tx timeout [ 936.729768][ T6308] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.117826][ T6308] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 937.677096][ T6308] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 938.436890][T15744] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 938.728339][ T5626] Bluetooth: hci2: command tx timeout [ 938.826773][T15744] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 938.874703][T15744] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 938.933887][T15744] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 939.154537][T15744] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 939.284314][T15744] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 939.332278][T15744] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 939.400146][T16085] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2980'. [ 940.162457][T15744] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 940.768352][ T5626] Bluetooth: hci2: command tx timeout [ 941.176034][ T6308] bridge_slave_1: left allmulticast mode [ 941.210443][ T6308] bridge_slave_1: left promiscuous mode [ 941.226981][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 941.304494][ T6308] bridge_slave_0: left allmulticast mode [ 941.331834][ T6308] bridge_slave_0: left promiscuous mode [ 941.353880][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 942.314750][T16128] loop9: detected capacity change from 0 to 32768 [ 942.382347][T16128] XFS (loop9): Mounting V5 Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 942.415127][ T6308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 942.460327][ T6308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 942.484683][T16128] XFS (loop9): Ending clean mount [ 942.533368][ T6308] bond0 (unregistering): Released all slaves [ 942.850458][ T5626] Bluetooth: hci2: command tx timeout [ 942.896735][ T9734] XFS (loop9): Unmounting Filesystem d7dc424e-7990-42cb-9f91-9cb7200a101d [ 944.065947][T15986] bridge0: port 1(bridge_slave_0) entered blocking state [ 944.108104][T15986] bridge0: port 1(bridge_slave_0) entered disabled state [ 944.124419][T15986] bridge_slave_0: entered allmulticast mode [ 944.156748][T15986] bridge_slave_0: entered promiscuous mode [ 944.265970][ T6308] hsr_slave_0: left promiscuous mode [ 944.311488][ T6308] hsr_slave_1: left promiscuous mode [ 944.335889][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 944.369419][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 944.419566][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 944.458558][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 944.561080][ T6308] veth1_macvtap: left promiscuous mode [ 944.582154][ T6308] veth0_macvtap: left promiscuous mode [ 944.599238][ T6308] veth1_vlan: left promiscuous mode [ 944.622273][ T6308] veth0_vlan: left promiscuous mode [ 945.900219][ T6308] team0 (unregistering): Port device team_slave_1 removed [ 945.966168][ T6308] team0 (unregistering): Port device team_slave_0 removed [ 946.435272][T15986] bridge0: port 2(bridge_slave_1) entered blocking state [ 946.449515][T15986] bridge0: port 2(bridge_slave_1) entered disabled state [ 946.467413][T15986] bridge_slave_1: entered allmulticast mode [ 946.488398][T15986] bridge_slave_1: entered promiscuous mode [ 946.630079][ T5267] 8021q: adding VLAN 0 to HW filter on device eth10 [ 946.735897][T15986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 946.793822][T15986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 946.928187][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 947.004891][T15744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 947.206219][T15986] team0: Port device team_slave_0 added [ 947.252505][T15986] team0: Port device team_slave_1 added [ 947.543110][T15986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 947.582415][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.697453][T15986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 947.786071][T15744] 8021q: adding VLAN 0 to HW filter on device team0 [ 947.811034][T15986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 947.875235][T15986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 947.956290][T15986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 948.204229][T15986] hsr_slave_0: entered promiscuous mode [ 948.235301][T15986] hsr_slave_1: entered promiscuous mode [ 948.260464][T15986] debugfs: 'hsr0' already exists in 'hsr' [ 948.278189][T15986] Cannot create hsr debugfs directory [ 948.299827][ T5916] bridge0: port 1(bridge_slave_0) entered blocking state [ 948.307149][ T5916] bridge0: port 1(bridge_slave_0) entered forwarding state [ 948.376834][ T5916] bridge0: port 2(bridge_slave_1) entered blocking state [ 948.384080][ T5916] bridge0: port 2(bridge_slave_1) entered forwarding state [ 949.396677][ T5267] 8021q: adding VLAN 0 to HW filter on device eth11 [ 949.923940][T16266] netlink: 28 bytes leftover after parsing attributes in process `syz.5.3023'. [ 951.593716][ T5267] 8021q: adding VLAN 0 to HW filter on device eth12 [ 951.757767][T15744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 951.816309][T15986] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 951.839804][T15986] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 951.869314][T15986] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 951.904594][T15986] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 951.922322][T15986] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 951.952653][T15986] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 951.966656][T15986] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 951.987391][T15986] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 952.163488][T15744] veth0_vlan: entered promiscuous mode [ 952.257738][T15744] veth1_vlan: entered promiscuous mode [ 952.503337][T15744] veth0_macvtap: entered promiscuous mode [ 952.542492][T15744] veth1_macvtap: entered promiscuous mode [ 952.585579][T15986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 952.711640][T15744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 952.733116][T15986] 8021q: adding VLAN 0 to HW filter on device team0 [ 952.760576][T15744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 952.814264][ T7567] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.821464][ T7567] bridge0: port 1(bridge_slave_0) entered forwarding state [ 952.961368][T15855] bridge0: port 2(bridge_slave_1) entered blocking state [ 952.968643][T15855] bridge0: port 2(bridge_slave_1) entered forwarding state [ 953.009105][T15855] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.058207][T15855] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.100161][T15855] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.208429][ T6196] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 953.572893][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.590740][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 953.753494][ T7567] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 953.785302][ T7567] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 956.735841][T16425] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3052'. [ 957.529874][T15986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 959.797347][T15986] veth0_vlan: entered promiscuous mode [ 959.848252][T15986] veth1_vlan: entered promiscuous mode [ 960.018226][T15986] veth0_macvtap: entered promiscuous mode [ 960.053953][T15986] veth1_macvtap: entered promiscuous mode [ 960.135505][T16472] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3066'. [ 960.135604][T15986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 960.688210][T16485] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3067'. [ 961.481455][T15986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 961.708519][ T6196] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 961.950225][ T5916] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.035061][ T5916] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.148171][ T7567] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 962.367305][T16397] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.432036][T16397] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 962.812566][ T6196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 962.865099][ T6196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 964.507307][T16545] loop9: detected capacity change from 0 to 16 [ 964.524587][T16545] erofs: Unknown parameter '' [ 964.577394][T16545] netlink: 8 bytes leftover after parsing attributes in process `syz.9.3086'. [ 966.983599][T16575] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 967.174586][T16583] overlayfs: missing 'lowerdir' [ 967.879231][T16604] program syz.6.3108 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 968.550402][T16621] loop8: detected capacity change from 0 to 16 [ 968.568226][T16621] erofs: Unknown parameter '' [ 968.621420][T16621] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3109'. [ 971.553163][ T5267] 8021q: adding VLAN 0 to HW filter on device eth9 [ 972.168391][ T6308] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.554234][ T6308] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.636773][T16686] syzkaller0: refused to change device tx_queue_len [ 972.806755][ T6308] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.173149][T16707] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3141'. [ 973.214406][T16707] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3141'. [ 973.220312][ T6308] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 973.387743][T14966] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 973.408486][T14966] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 973.423439][T14966] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 973.449678][T14966] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 973.464189][T14966] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 973.531690][T16707] geneve2: entered promiscuous mode [ 973.550593][T16707] geneve2: entered allmulticast mode [ 974.388084][ T6308] bridge_slave_1: left allmulticast mode [ 974.432897][ T6308] bridge_slave_1: left promiscuous mode [ 974.460192][ T6308] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.531609][ T6308] bridge_slave_0: left allmulticast mode [ 974.566313][ T6308] bridge_slave_0: left promiscuous mode [ 974.593796][ T6308] bridge0: port 1(bridge_slave_0) entered disabled state [ 975.489043][T14966] Bluetooth: hci0: command tx timeout [ 975.533606][T16732] loop8: detected capacity change from 0 to 512 [ 975.554653][T16732] EXT4-fs: Ignoring removed i_version option [ 975.561535][ T6308] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 975.583288][T16732] EXT4-fs (loop8): VFS: Can't find ext4 filesystem [ 975.632907][ T6308] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 975.673897][ T6308] bond0 (unregistering): Released all slaves [ 975.810146][T16761] tipc: Started in network mode [ 975.834764][T16761] tipc: Node identity 9e44c0f5d9f4, cluster identity 4711 [ 975.878583][T16761] tipc: Enabled bearer , priority 0 [ 975.905322][T16756] syzkaller0: entered promiscuous mode [ 975.945709][T16756] syzkaller0: entered allmulticast mode [ 976.341359][T16756] tipc: Resetting bearer [ 976.414257][T16756] tipc: Disabling bearer [ 977.082967][ T6308] hsr_slave_0: left promiscuous mode [ 977.116463][ T6308] hsr_slave_1: left promiscuous mode [ 977.156172][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 977.192225][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 977.219130][ T6308] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 977.234837][ T6308] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 977.297454][ T6308] veth1_macvtap: left promiscuous mode [ 977.325544][ T6308] veth0_macvtap: left promiscuous mode [ 977.342441][ T6308] veth1_vlan: left promiscuous mode [ 977.363114][ T6308] veth0_vlan: left promiscuous mode [ 977.568136][T14966] Bluetooth: hci0: command tx timeout [ 978.082251][ T6308] team0 (unregistering): Port device team_slave_1 removed [ 978.106426][ T6308] team0 (unregistering): Port device team_slave_0 removed [ 978.610582][T16835] loop8: detected capacity change from 0 to 1024 [ 978.645816][T16835] EXT4-fs (loop8): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 978.703207][T16835] EXT4-fs (loop8): revision level too high, forcing read-only mode [ 978.729458][T16835] EXT4-fs (loop8): orphan cleanup on readonly fs [ 978.735950][T16835] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #3: comm syz.8.3181: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 978.770664][T16835] loop8: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 978.774201][T16835] EXT4-fs error (device loop8): ext4_quota_enable:7234: comm syz.8.3181: Bad quota inode: 3, type: 0 [ 978.778411][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 978.802864][ C0] EXT4-fs (loop8): initial error at time 1786776948: ext4_ext_check_inode:521: inode 3 [ 978.812633][ C0] EXT4-fs (loop8): last error at time 1786776948: ext4_ext_check_inode:521: inode 3 [ 978.866345][T16835] loop8: lost filesystem error report for type 5 error -117 [ 978.866686][T16835] EXT4-fs warning (device loop8): ext4_enable_quotas:7272: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 978.932805][T16835] EXT4-fs (loop8): Cannot turn on quotas: error -117 [ 978.976156][T16835] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 979.549342][T16851] loop9: detected capacity change from 0 to 256 [ 979.648101][T14966] Bluetooth: hci0: command tx timeout [ 979.660674][T16851] FAT-fs (loop9): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 979.885826][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 979.994401][T16851] FAT-fs (loop9): Filesystem has been set read-only [ 980.071464][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.244029][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.420056][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.598482][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.667775][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.732622][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.755476][T16874] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3190'. [ 980.787291][T16874] tc_dump_action: action bad kind [ 980.792977][T16851] FAT-fs (loop9): error, fat_bmap_cluster: request beyond EOF (i_pos 196) [ 980.856945][ T31] audit: type=1800 audit(1786776950.332:166): pid=16851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.9.3186" name="file1" dev="loop9" ino=1048686 res=0 errno=0 [ 981.453846][T16714] bridge0: port 1(bridge_slave_0) entered blocking state [ 981.511037][T16714] bridge0: port 1(bridge_slave_0) entered disabled state [ 981.564723][T16714] bridge_slave_0: entered allmulticast mode [ 981.614642][T16714] bridge_slave_0: entered promiscuous mode [ 981.691326][T16714] bridge0: port 2(bridge_slave_1) entered blocking state [ 981.739541][T14966] Bluetooth: hci0: command tx timeout [ 981.750357][T16714] bridge0: port 2(bridge_slave_1) entered disabled state [ 981.812571][T16714] bridge_slave_1: entered allmulticast mode [ 981.874904][T16714] bridge_slave_1: entered promiscuous mode [ 981.999592][T16892] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3194'. [ 982.009145][T16887] md: async del_gendisk mode will be removed in future, please upgrade to mdadm-4.5+ [ 982.012476][T15986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 982.126515][T16714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 982.129557][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 982.208234][T16714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 982.437650][T16900] loop8: detected capacity change from 0 to 512 [ 982.502255][T16714] team0: Port device team_slave_0 added [ 982.526682][T16900] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3196: inode has both inline data and extents flags [ 982.582072][T16714] team0: Port device team_slave_1 added [ 982.683829][T16900] loop8: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 982.684259][T16900] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3196: couldn't read orphan inode 15 (err -117) [ 982.693555][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 982.693589][ C0] EXT4-fs (loop8): initial error at time 1786776952: ext4_orphan_get:1399: inode 15 [ 982.693646][ C0] EXT4-fs (loop8): last error at time 1786776952: ext4_orphan_get:1399: inode 15 [ 982.789886][T16910] tipc: Enabling of bearer rejected, failed to enable media [ 982.811194][T16900] loop8: lost filesystem error report for type 5 error -117 [ 982.843747][T16714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 982.876185][T16900] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 982.902338][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.026478][T16714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 983.136866][T16714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 983.172340][T16714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 983.269573][T16714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 983.789931][T16714] hsr_slave_0: entered promiscuous mode [ 983.833438][T16714] hsr_slave_1: entered promiscuous mode [ 983.852036][T16714] debugfs: 'hsr0' already exists in 'hsr' [ 983.868015][T16714] Cannot create hsr debugfs directory [ 984.113419][T15986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 984.215813][ T5626] Bluetooth: hci3: command 0x0406 tx timeout [ 984.274766][T16955] device-mapper: ioctl: Invalid ioctl structure: name my, dev f801 [ 985.890106][T17008] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3226'. [ 985.981955][T17009] syzkaller0: entered promiscuous mode [ 986.000649][T17009] syzkaller0: entered allmulticast mode [ 987.503689][T16714] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 987.547174][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 987.585432][T16714] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 987.658271][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 987.691657][T16714] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 987.724174][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 987.751733][T17059] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3241'. [ 987.762913][T16714] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 987.796096][T16714] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 987.865226][T17064] netlink: 152 bytes leftover after parsing attributes in process `syz.5.3243'. [ 988.066705][T17073] netlink: 'syz.5.3243': attribute type 10 has an invalid length. [ 988.190219][T17064] bridge_slave_0: left allmulticast mode [ 988.211561][T17075] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3243'. [ 988.235985][T17064] bridge_slave_0: left promiscuous mode [ 988.246339][T17064] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.689927][T17078] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3245'. [ 989.080985][T17064] bridge_slave_1: left allmulticast mode [ 989.109581][T17064] bridge_slave_1: left promiscuous mode [ 989.136761][T17064] bridge0: port 2(bridge_slave_1) entered disabled state [ 989.264139][T17064] bond0: (slave bond_slave_0): Releasing backup interface [ 989.333546][T17064] bond0: (slave bond_slave_1): Releasing backup interface [ 989.420942][T17064] team0: Port device team_slave_0 removed [ 989.479290][T17064] team0: Port device team_slave_1 removed [ 989.508310][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 989.539942][T17064] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 989.554634][ T30] logitech-hidpp-device 0005:046D:B012.0020: hidraw0: BLUETOOTH HID v0.00 Device [syz0] on syz1 [ 989.587362][T17064] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 989.615067][T17064] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 989.656260][T17064] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 989.762647][T17097] fido_id[17097]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 989.825238][T17073] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 989.930737][T17075] bond0: (slave bridge0): Releasing backup interface [ 990.624032][T16714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 990.696669][T16714] 8021q: adding VLAN 0 to HW filter on device team0 [ 990.800763][ T7569] bridge0: port 1(bridge_slave_0) entered blocking state [ 990.808025][ T7569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 990.906796][T16400] bridge0: port 2(bridge_slave_1) entered blocking state [ 990.914019][T16400] bridge0: port 2(bridge_slave_1) entered forwarding state [ 991.105995][T17122] syzkaller0: entered promiscuous mode [ 991.133399][T17122] syzkaller0: entered allmulticast mode [ 992.370966][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 992.380728][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 992.999244][T17182] netlink: 4 bytes leftover after parsing attributes in process `syz.9.3275'. [ 994.309964][T17189] syzkaller0: entered promiscuous mode [ 994.348543][T17189] syzkaller0: entered allmulticast mode [ 994.543793][T16714] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 994.785063][T17216] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3278'. [ 995.826853][T17220] loop9: detected capacity change from 0 to 4096 [ 995.919245][T17220] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 997.153999][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 997.473384][T17258] loop9: detected capacity change from 0 to 512 [ 997.515358][T17258] EXT4-fs (loop9): encrypted files will use data=ordered instead of data journaling mode [ 997.601772][T17258] EXT4-fs (loop9): 1 truncate cleaned up [ 997.637390][T17258] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 998.766949][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 998.949844][T16714] veth0_vlan: entered promiscuous mode [ 999.057030][T16714] veth1_vlan: entered promiscuous mode [ 999.309622][T16714] veth0_macvtap: entered promiscuous mode [ 999.397815][ T31] audit: type=1326 audit(1786776968.872:167): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 999.433619][T16714] veth1_macvtap: entered promiscuous mode [ 1000.718401][T17298] loop8: detected capacity change from 0 to 16 [ 1000.725775][T17298] erofs: Unknown parameter '' [ 1000.733963][T17298] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3299'. [ 1001.000503][T16714] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1001.216082][T16714] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1001.668774][T16400] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.703629][ T31] audit: type=1326 audit(1786776968.872:168): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1001.732306][T16400] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.740041][ T31] audit: type=1326 audit(1786776968.922:169): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=247 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1001.843829][ T7569] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1001.893548][ T7569] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1002.304441][T17309] bridge0: port 3(bond0) entered blocking state [ 1002.353943][T17309] bridge0: port 3(bond0) entered disabled state [ 1002.390674][T17309] bond0: entered allmulticast mode [ 1002.446981][T17309] bond_slave_0: entered allmulticast mode [ 1002.495354][T17309] bond_slave_1: entered allmulticast mode [ 1002.585769][ T31] audit: type=1326 audit(1786776968.952:170): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f245a93f459 code=0x7ffc0000 [ 1002.614904][ T31] audit: type=1326 audit(1786776968.952:171): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1002.643798][T17309] bond0: entered promiscuous mode [ 1002.649787][T17309] bond_slave_0: entered promiscuous mode [ 1002.655783][T17309] bond_slave_1: entered promiscuous mode [ 1002.665024][ T31] audit: type=1326 audit(1786776968.952:172): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1002.697393][T17309] bridge0: port 3(bond0) entered blocking state [ 1002.705936][T17309] bridge0: port 3(bond0) entered forwarding state [ 1002.751341][ T5946] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1002.759657][ T31] audit: type=1326 audit(1786776968.962:173): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1002.783103][ T5946] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1002.802866][T17314] bridge0: port 4(team0) entered blocking state [ 1002.825395][T17314] bridge0: port 4(team0) entered disabled state [ 1002.851975][T17314] team0: entered allmulticast mode [ 1002.856320][ T31] audit: type=1326 audit(1786776968.962:174): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1002.888294][T17314] team_slave_0: entered allmulticast mode [ 1002.910529][T17314] team_slave_1: entered allmulticast mode [ 1002.928981][ T31] audit: type=1326 audit(1786776968.962:175): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1002.961991][T17314] team0: entered promiscuous mode [ 1002.967071][T17314] team_slave_0: entered promiscuous mode [ 1002.991030][T17314] team_slave_1: entered promiscuous mode [ 1003.006288][T17314] bridge0: port 4(team0) entered blocking state [ 1003.012812][T17314] bridge0: port 4(team0) entered forwarding state [ 1003.024624][ T31] audit: type=1326 audit(1786776969.002:176): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17266 comm="syz.7.3293" exe="/root/ci-upstream-kasan-badwrites-root/syz-executor" sig=0 arch=c000003e syscall=55 compat=0 ip=0x7f245a99e0d9 code=0x7ffc0000 [ 1003.210441][T17330] syzkaller0: entered promiscuous mode [ 1003.222278][T17330] syzkaller0: entered allmulticast mode [ 1003.264551][T16396] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1003.269359][T17324] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 1003.299831][T16396] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1003.308916][T17324] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 1003.350603][T17324] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 1003.443220][T17324] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 1003.532921][T17324] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 1006.176823][T17368] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3319'. [ 1006.448588][ T5626] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1006.465477][ T5626] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1006.473800][ T5626] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1006.486516][ T5626] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1006.504775][ T5626] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1006.722841][T17372] loop9: detected capacity change from 0 to 1024 [ 1006.772258][T17372] EXT4-fs: Ignoring removed bh option [ 1006.878794][T17372] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1007.720382][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1008.189892][ T7569] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1008.520310][T17390] syzkaller0: entered promiscuous mode [ 1008.548086][T17390] syzkaller0: entered allmulticast mode [ 1008.608370][ T5626] Bluetooth: hci4: command tx timeout [ 1010.627053][T17440] loop9: detected capacity change from 0 to 512 [ 1010.657111][T17440] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1010.689366][ T5626] Bluetooth: hci4: command tx timeout [ 1010.815814][T17440] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1010.831830][T17440] ext4 filesystem being mounted at /336/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1011.236245][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1011.698741][ T7569] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1011.921471][T17470] loop8: detected capacity change from 0 to 512 [ 1011.942647][T17470] EXT4-fs: Ignoring removed orlov option [ 1011.961185][T17470] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1011.994127][ T7569] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1012.067142][T17470] EXT4-fs error (device loop8): ext4_ext_check_inode:521: inode #16: comm syz.8.3340: pblk 0 bad header/extent: invalid magic - magic 0, entries 0, max 28(0), depth 0(0) [ 1012.088346][T17470] loop8: lost file I/O error report for ino 16 type 5 pos 0x0 len 0x0 error -117 [ 1012.097924][ C0] EXT4-fs (loop8): error count since last fsck: 1 [ 1012.113641][ C0] EXT4-fs (loop8): initial error at time 1786776981: ext4_ext_check_inode:521: inode 16 [ 1012.123444][ C0] EXT4-fs (loop8): last error at time 1786776981: ext4_ext_check_inode:521: inode 16 [ 1012.200686][T17470] EXT4-fs error (device loop8): ext4_orphan_get:1402: comm syz.8.3340: couldn't read orphan inode 16 (err -117) [ 1012.213950][T17470] loop8: lost filesystem error report for type 5 error -117 [ 1012.214537][T17470] EXT4-fs (loop8): 1 orphan inode deleted [ 1012.233074][T17470] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1012.310094][T17463] syzkaller0: entered promiscuous mode [ 1012.320051][T17463] syzkaller0: entered allmulticast mode [ 1012.369618][T17470] EXT4-fs error (device loop8): ext4_find_dest_de:2049: inode #12: block 7: comm syz.8.3340: bad entry in directory: rec_len is too small for name_len - offset=0, inode=13, rec_len=16, size=56 fake=0 [ 1012.828188][ T5626] Bluetooth: hci4: command tx timeout [ 1013.231900][T15986] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1013.481320][T17493] netlink: 28 bytes leftover after parsing attributes in process `syz.9.3345'. [ 1013.582392][ T7569] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1013.760983][T17498] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3342'. [ 1014.968321][ T5626] Bluetooth: hci4: command tx timeout [ 1017.082063][T17519] syzkaller0: entered promiscuous mode [ 1017.122850][T17519] syzkaller0: entered allmulticast mode [ 1020.725242][T17588] program syz.7.3367 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1020.859256][ T7569] bond0 (unregistering): Released all slaves [ 1021.616759][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3368'. [ 1023.951469][T17615] hub 8-0:1.0: USB hub found [ 1023.958169][T17615] hub 8-0:1.0: 1 port detected [ 1025.445310][T17366] bridge0: port 1(bridge_slave_0) entered blocking state [ 1025.485132][T17366] bridge0: port 1(bridge_slave_0) entered disabled state [ 1025.516849][T17366] bridge_slave_0: entered allmulticast mode [ 1025.546303][T17366] bridge_slave_0: entered promiscuous mode [ 1025.631876][T17366] bridge0: port 2(bridge_slave_1) entered blocking state [ 1025.662813][T17366] bridge0: port 2(bridge_slave_1) entered disabled state [ 1025.705192][T17366] bridge_slave_1: entered allmulticast mode [ 1025.736624][T17366] bridge_slave_1: entered promiscuous mode [ 1025.996194][ T7569] hsr_slave_0: left promiscuous mode [ 1026.032820][ T7569] hsr_slave_1: left promiscuous mode [ 1026.128936][ T7569] veth0_macvtap: left promiscuous mode [ 1026.151053][ T7569] veth1_vlan: left promiscuous mode [ 1026.173752][ T7569] veth0_vlan: left promiscuous mode [ 1026.179073][T17656] loop9: detected capacity change from 0 to 512 [ 1026.215539][T17656] FAT-fs (loop9): bogus sectors per cluster 0 [ 1026.239333][T17656] FAT-fs (loop9): This doesn't look like a DOS 1.x volume; no bootstrapping code [ 1026.300463][T17656] FAT-fs (loop9): Can't find a valid FAT filesystem [ 1027.842597][T17646] syzkaller1: entered promiscuous mode [ 1027.855783][T17646] syzkaller1: entered allmulticast mode [ 1027.966978][T17682] loop8: detected capacity change from 0 to 128 [ 1028.009376][T17366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1028.065923][T17366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1028.267110][T17366] team0: Port device team_slave_0 added [ 1028.335746][T17366] team0: Port device team_slave_1 added [ 1028.541786][T17693] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 1028.589957][T17366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1028.614413][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.720411][T17366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1028.801447][T17692] syzkaller0: entered promiscuous mode [ 1028.817786][T17692] syzkaller0: entered allmulticast mode [ 1028.873625][T17366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1028.902928][T17366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1028.987214][T17366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1029.334353][T17366] hsr_slave_0: entered promiscuous mode [ 1029.369560][T17366] hsr_slave_1: entered promiscuous mode [ 1029.382407][T17366] debugfs: 'hsr0' already exists in 'hsr' [ 1029.409459][T17366] Cannot create hsr debugfs directory [ 1030.920618][T17738] loop8: detected capacity change from 0 to 8192 [ 1030.961524][T17738] vfat: Unknown parameter 'ÿÿÿÿ`’NX#öEeOnŽßøá©Hï°Ô¹©ÔÃ]¬³Á§ê%‡Õ‘ew' [ 1031.317648][T17749] Config c/1 of g1 needs at least one function. [ 1031.361261][T17749] udc usbip-vudc.0: failed to start g1: -22 [ 1031.395759][T17749] configfs-gadget.g1 gadget.32: probe with driver configfs-gadget.g1 failed with error -22 [ 1031.431057][T17713] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3394'. [ 1032.592091][T17749] UDC core: g1: couldn't find an available UDC or it's busy [ 1033.517012][T17784] vxcan1: tx drop: invalid sa for name 0x0000100000000000 [ 1034.054876][T17790] loop9: detected capacity change from 0 to 1024 [ 1034.097568][T17790] EXT4-fs (loop9): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1034.173511][T17790] EXT4-fs (loop9): revision level too high, forcing read-only mode [ 1034.193820][T17775] syzkaller0: entered promiscuous mode [ 1034.239750][T17775] syzkaller0: entered allmulticast mode [ 1034.261437][T17790] EXT4-fs (loop9): orphan cleanup on readonly fs [ 1034.293211][T17790] EXT4-fs error (device loop9): ext4_ext_check_inode:521: inode #3: comm syz.9.3411: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 2, max 3(4), depth 0(0) [ 1034.411350][T17790] loop9: lost file I/O error report for ino 3 type 5 pos 0x0 len 0x0 error -117 [ 1034.414263][T17790] EXT4-fs error (device loop9): ext4_quota_enable:7234: comm syz.9.3411: Bad quota inode: 3, type: 0 [ 1034.423446][ C1] EXT4-fs (loop9): error count since last fsck: 1 [ 1034.423479][ C1] EXT4-fs (loop9): initial error at time 1786777003: ext4_ext_check_inode:521: inode 3 [ 1034.423534][ C1] EXT4-fs (loop9): last error at time 1786777003: ext4_ext_check_inode:521: inode 3 [ 1034.693507][T17790] loop9: lost filesystem error report for type 5 error -117 [ 1034.693809][T17790] EXT4-fs warning (device loop9): ext4_enable_quotas:7272: Failed to enable quota tracking (type=0, err=-117, ino=3). Please run e2fsck to fix. [ 1034.744011][T17790] EXT4-fs (loop9): Cannot turn on quotas: error -117 [ 1034.775450][T17790] EXT4-fs (loop9): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 1035.364000][T17811] NOTICE: Automounting of tracing to debugfs is deprecated and will be removed in 2030 [ 1035.385343][T17812] loop8: detected capacity change from 0 to 256 [ 1035.742892][T17366] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 1035.787207][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 1035.820675][T17820] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3423'. [ 1035.876236][T17366] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 1035.921008][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 1035.943930][T17366] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 1035.985135][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 1036.005651][T17366] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 1036.065441][T17366] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 1036.493003][T17366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1036.782490][T17366] 8021q: adding VLAN 0 to HW filter on device team0 [ 1037.383013][T16398] bridge0: port 1(bridge_slave_0) entered blocking state [ 1037.390266][T16398] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1037.526657][T17862] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3433'. [ 1037.643407][T16398] bridge0: port 2(bridge_slave_1) entered blocking state [ 1037.650645][T16398] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1038.654149][T17890] loop8: detected capacity change from 0 to 512 [ 1039.716982][T17897] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3444'. [ 1040.031294][T17907] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3446'. [ 1040.064196][T17910] netlink: 27 bytes leftover after parsing attributes in process `syz.8.3447'. [ 1040.111917][T17908] syzkaller0: entered promiscuous mode [ 1040.143092][T17908] syzkaller0: entered allmulticast mode [ 1040.976309][T17900] syzkaller1: entered promiscuous mode [ 1041.026547][T17900] syzkaller1: entered allmulticast mode [ 1041.076359][T17366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1041.219379][T17938] device-mapper: ioctl: Invalid ioctl structure: name ¿, dev fff88a7b [ 1041.562275][T17947] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3460'. [ 1043.170093][T17366] veth0_vlan: entered promiscuous mode [ 1043.221189][T17366] veth1_vlan: entered promiscuous mode [ 1043.388255][T17366] veth0_macvtap: entered promiscuous mode [ 1043.442136][T17366] veth1_macvtap: entered promiscuous mode [ 1043.536888][T17366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1043.604709][T17366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1043.688494][T16398] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.728460][T16398] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.839419][T16397] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1043.880875][T16397] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1044.248434][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.295599][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1044.433521][ T3288] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1044.469973][ T3288] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1045.128335][T18022] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3485'. [ 1045.609048][T14966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1045.627731][T14966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1045.637410][T14966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1045.650470][T14966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1045.662170][T14966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1045.724827][ T9734] EXT4-fs (loop9): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1046.173449][T18040] bridge0: port 2(bridge_slave_1) entered disabled state [ 1046.180898][T18040] bridge0: port 1(bridge_slave_0) entered disabled state [ 1046.556637][T18040] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1046.614958][T18064] ------------[ cut here ]------------ [ 1046.619355][T18040] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1046.620556][T18064] do not call blocking ops when !TASK_RUNNING; state=2 set at [] prepare_to_wait_event+0x8d/0x720 [ 1046.640321][T18064] WARNING: kernel/sched/core.c:9120 at __might_sleep+0x94/0xc0, CPU#0: syz.4.3499/18064 [ 1046.650182][T18064] Modules linked in: [ 1046.654100][T18064] CPU: 0 UID: 0 PID: 18064 Comm: syz.4.3499 Not tainted syzkaller #0 PREEMPT(full) [ 1046.665153][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1046.676429][T18064] RIP: 0010:__might_sleep+0x97/0xc0 [ 1046.683601][T18064] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d ec b9 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 5d 45 a4 00 eb 9f 89 74 24 04 e8 82 45 a4 [ 1046.703586][T18064] RSP: 0018:ffffc9000354fb88 EFLAGS: 00010286 [ 1046.709736][T18064] RAX: dffffc0000000000 RBX: ffffffff8bcfd700 RCX: ffffffff81e24edd [ 1046.717722][T18064] RDX: ffffffff81e24edd RSI: 0000000000000002 RDI: ffffffff91256e10 [ 1046.725807][T18064] RBP: 000000000000026f R08: ffffffff81fc5742 R09: 0000000000000000 [ 1046.734112][T18064] R10: ffffc9000354fd38 R11: 0000000000000000 R12: ffff88807c9e3e00 [ 1046.742227][T18064] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80bbf0 [ 1046.750283][T18064] FS: 00007ff0220716c0(0000) GS:ffff888123de1000(0000) knlGS:0000000000000000 [ 1046.759368][T18064] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 1046.765999][T18064] CR2: 00007ff021427dac CR3: 0000000034869000 CR4: 0000000000350ef0 [ 1046.775132][T18064] Call Trace: [ 1046.779085][T18064] [ 1046.782028][T18064] __mutex_lock+0x10e/0x1bd0 [ 1046.787130][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.792596][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.798321][T18064] ? futex_hash_allocate+0x6fc/0x1120 [ 1046.803732][T18064] ? __pfx___mutex_lock+0x10/0x10 [ 1046.808894][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.814572][T18064] ? find_held_lock+0x2b/0x80 [ 1046.819366][T18064] ? prepare_to_wait_event+0xbe/0x720 [ 1046.824771][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.830496][T18064] ? lockdep_hardirqs_on+0x78/0x100 [ 1046.835759][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.841514][T18064] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1046.847358][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.853092][T18064] ? prepare_to_wait_event+0xbe/0x720 [ 1046.858562][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.863968][T18064] futex_hash_allocate+0xd22/0x1120 [ 1046.869269][T18064] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1046.876249][T18064] ? __pfx_var_wake_function+0x10/0x10 [ 1046.882541][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.888271][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.893970][T18064] ? static_key_count+0x5a/0x70 [ 1046.898932][T18064] futex_hash_prctl+0x1b8/0x390 [ 1046.904354][T18064] __do_sys_prctl+0x16dd/0x2270 [ 1046.909566][T18064] ? __pfx___do_sys_prctl+0x10/0x10 [ 1046.914841][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.921201][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.926890][T18064] do_syscall_64+0x115/0x870 [ 1046.931790][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.933996][T18067] futex_wake_op: syz.4.3499 tries to shift op by 144; fix this program [ 1046.937793][T18064] RIP: 0033:0x7ff02119e0d9 [ 1046.937828][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.937913][T18064] RSP: 002b:00007ff022071028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1046.937956][T18064] RAX: ffffffffffffffda RBX: 00007ff021425fa0 RCX: 00007ff02119e0d9 [ 1046.937985][T18064] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1046.938012][T18064] RBP: 00007ff021235024 R08: 0000000000000000 R09: 0000000000000000 [ 1046.938038][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.938065][T18064] R13: 00007ff021426038 R14: 00007ff021425fa0 R15: 00007ffec285be18 [ 1046.938121][T18064] [ 1046.938140][T18064] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1046.938167][T18064] CPU: 0 UID: 0 PID: 18064 Comm: syz.4.3499 Not tainted syzkaller #0 PREEMPT(full) [ 1046.938212][T18064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/16/2026 [ 1046.938235][T18064] Call Trace: [ 1046.938248][T18064] [ 1046.938262][T18064] dump_stack_lvl+0x100/0x190 [ 1046.938310][T18064] vpanic+0x552/0x970 [ 1046.938349][T18064] ? __pfx_vpanic+0x10/0x10 [ 1046.938404][T18064] panic+0xd1/0xe0 [ 1046.938441][T18064] ? __pfx_panic+0x10/0x10 [ 1046.938499][T18064] check_panic_on_warn.cold+0x19/0x34 [ 1046.938541][T18064] ? __might_sleep+0x94/0xc0 [ 1046.938582][T18064] __warn.cold+0x191/0x318 [ 1046.938626][T18064] __report_bug+0x30f/0x440 [ 1046.938673][T18064] ? __might_sleep+0x94/0xc0 [ 1046.938724][T18064] ? __pfx___report_bug+0x10/0x10 [ 1046.938770][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.938816][T18064] ? lock_acquire+0x1b9/0x370 [ 1046.938861][T18064] ? prepare_to_wait_event+0x8d/0x720 [ 1046.938899][T18064] ? prepare_to_wait_event+0x8d/0x720 [ 1046.938936][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.938988][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.939033][T18064] ? mark_held_locks+0x40/0x70 [ 1046.939076][T18064] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 1046.939118][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.939163][T18064] ? lockdep_hardirqs_on+0x78/0x100 [ 1046.939218][T18064] report_bug_entry+0xe1/0x290 [ 1046.939265][T18064] ? __might_sleep+0x97/0xc0 [ 1046.939307][T18064] handle_bug+0x1cd/0x2a0 [ 1046.939361][T18064] exc_invalid_op+0x17/0x50 [ 1046.939416][T18064] asm_exc_invalid_op+0x1a/0x20 [ 1046.939452][T18064] RIP: 0010:__might_sleep+0x97/0xc0 [ 1046.939495][T18064] Code: 8b 94 24 70 18 00 00 48 85 d2 75 14 48 83 c4 08 89 ee 48 89 df 31 d2 5b 5d 41 5c e9 33 fc ff ff 48 8d 3d ec b9 4f 0f 48 89 d1 <67> 48 0f b9 3a eb db e8 5d 45 a4 00 eb 9f 89 74 24 04 e8 82 45 a4 [ 1046.939531][T18064] RSP: 0018:ffffc9000354fb88 EFLAGS: 00010286 [ 1046.939562][T18064] RAX: dffffc0000000000 RBX: ffffffff8bcfd700 RCX: ffffffff81e24edd [ 1046.939588][T18064] RDX: ffffffff81e24edd RSI: 0000000000000002 RDI: ffffffff91256e10 [ 1046.939613][T18064] RBP: 000000000000026f R08: ffffffff81fc5742 R09: 0000000000000000 [ 1046.939638][T18064] R10: ffffc9000354fd38 R11: 0000000000000000 R12: ffff88807c9e3e00 [ 1046.939663][T18064] R13: 0000000000000000 R14: dffffc0000000000 R15: ffffffff8e80bbf0 [ 1046.939698][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.939750][T18064] ? prepare_to_wait_event+0x8d/0x720 [ 1046.939786][T18064] ? prepare_to_wait_event+0x8d/0x720 [ 1046.939832][T18064] ? __lock_acquire+0x49f/0x1a40 [ 1046.939878][T18064] __mutex_lock+0x10e/0x1bd0 [ 1046.939928][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.939972][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940019][T18064] ? futex_hash_allocate+0x6fc/0x1120 [ 1046.940071][T18064] ? __pfx___mutex_lock+0x10/0x10 [ 1046.940122][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940167][T18064] ? find_held_lock+0x2b/0x80 [ 1046.940223][T18064] ? prepare_to_wait_event+0xbe/0x720 [ 1046.940263][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940314][T18064] ? lockdep_hardirqs_on+0x78/0x100 [ 1046.940360][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940404][T18064] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 1046.940487][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940532][T18064] ? prepare_to_wait_event+0xbe/0x720 [ 1046.940579][T18064] ? futex_hash_allocate+0xd22/0x1120 [ 1046.940623][T18064] futex_hash_allocate+0xd22/0x1120 [ 1046.940678][T18064] ? __pfx_futex_hash_allocate+0x10/0x10 [ 1046.940734][T18064] ? __pfx_var_wake_function+0x10/0x10 [ 1046.940783][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940833][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.940878][T18064] ? static_key_count+0x5a/0x70 [ 1046.940941][T18064] futex_hash_prctl+0x1b8/0x390 [ 1046.940995][T18064] __do_sys_prctl+0x16dd/0x2270 [ 1046.941037][T18064] ? __pfx___do_sys_prctl+0x10/0x10 [ 1046.941074][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.941125][T18064] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1046.941178][T18064] do_syscall_64+0x115/0x870 [ 1046.941233][T18064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1046.941272][T18064] RIP: 0033:0x7ff02119e0d9 [ 1046.941305][T18064] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 1046.941344][T18064] RSP: 002b:00007ff022071028 EFLAGS: 00000246 ORIG_RAX: 000000000000009d [ 1046.941379][T18064] RAX: ffffffffffffffda RBX: 00007ff021425fa0 RCX: 00007ff02119e0d9 [ 1046.941405][T18064] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 000000000000004e [ 1046.941428][T18064] RBP: 00007ff021235024 R08: 0000000000000000 R09: 0000000000000000 [ 1046.941452][T18064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1046.941476][T18064] R13: 00007ff021426038 R14: 00007ff021425fa0 R15: 00007ffec285be18 [ 1046.941525][T18064] [ 1046.946873][T18064] Kernel Offset: disabled