last executing test programs: 1m41.419622844s ago: executing program 0 (id=1694): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x300000b, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r4, 0x0) prlimit64(0x0, 0x7, &(0x7f0000000140), 0x0) syz_io_uring_submit(0x0, 0x0, 0x0, &(0x7f0000000280)=@IORING_OP_ACCEPT={0xd, 0x0, 0x5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x800}) io_setup(0x1, &(0x7f0000000040)=0x0) io_submit(r5, 0x0, &(0x7f0000000440)) io_uring_enter(0xffffffffffffffff, 0x2003, 0xfffffffd, 0x9, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0xfffc}, [@IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 1m39.803316094s ago: executing program 0 (id=1695): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x2000800001000088}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000300)=0x7) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r4, &(0x7f00000000c0)={0x1d, r5}, 0x18) connect$can_j1939(r4, &(0x7f0000000140)={0x1d, r5}, 0x18) mmap$IORING_OFF_SQ_RING(0x0, 0xc00000, 0x3000002, 0x5d031, 0xffffffffffffffff, 0x0) 1m38.540582294s ago: executing program 0 (id=1699): timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x0, @thr={0x0, 0x0}}, &(0x7f0000000340)=0x0) fcntl$lock(0xffffffffffffffff, 0x5, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) madvise(&(0x7f0000c00000/0x400000)=nil, 0x400000, 0xe) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x108}) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x3}) syz_io_uring_setup(0x867, &(0x7f0000000140)={0x0, 0x27f9, 0x1000, 0x1, 0x35d}, &(0x7f00000002c0), &(0x7f0000ff4000), &(0x7f0000000000)) 1m30.030503629s ago: executing program 0 (id=1715): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xa8f94000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet(0x2, 0x3, 0x6) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r4, 0x107, 0x16, &(0x7f00000003c0)={0x1, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}]}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03000000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008"], 0x80}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet(r3, 0x0, 0x0, 0x20000800, 0x0, 0x0) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, &(0x7f0000000040)={0xf0f000, 0xf, @name="211ac0912fb1a36f4826fb7943a679c23dc6871e0875cc8f7b171f10622e1233"}) 1m28.723733191s ago: executing program 0 (id=1718): syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000018105e04da0700000000000109022400010000000009040000090300000009210000000122220009058103"], 0x0) r0 = openat$comedi(0xffffffffffffff9c, &(0x7f0000001e40)='/dev/comedi4\x00', 0x80040, 0x0) ioctl$COMEDI_CMDTEST(r0, 0x8050640a, &(0x7f0000001f40)={0x300, 0x8, 0x4, 0x3, 0x40, 0x6, 0x40, 0x7fff, 0x40, 0x6, 0x0, 0x5, 0x0, 0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpgrp(0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x5) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xf5c5d000) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r4, 0x107, 0xc, &(0x7f0000000080)=0x77d, 0x4) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)='H\x00', 0x2}], 0x1) 1m23.913840001s ago: executing program 0 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x7, 0x2) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 1m7.968304068s ago: executing program 32 (id=1724): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x40000000015, 0x5, 0x0) r2 = syz_open_dev$sndpcmc(0x0, 0x7, 0x2) ioctl$SNDRV_PCM_IOCTL_READI_FRAMES(r2, 0x80184151, &(0x7f0000000180)={0x0, 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0xd, &(0x7f0000000500)={&(0x7f0000000180)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800080000fcffff0800090000000000080011000000000008000e00800000000800", @ANYRES64=r0], 0x5c}, 0x1, 0x0, 0x0, 0xc840}, 0x0) 25.777571406s ago: executing program 4 (id=1827): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) getpid() write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) pipe2(0x0, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) timer_create(0x1, 0x0, 0x0) r3 = io_uring_setup(0x3450, &(0x7f0000000080)={0x0, 0x1539, 0x0, 0x2}) io_uring_register$IORING_REGISTER_BUFFERS(r3, 0x0, &(0x7f00000002c0)=[{0x0}], 0x1) mremap(&(0x7f00003eb000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000003000/0x1000)=nil) io_uring_register$IORING_REGISTER_BUFFERS_UPDATE(r3, 0x10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)=[{0x0}], 0x0, 0x1}, 0x20) socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x41, 0x3, 0x240, 0x0, 0x19, 0x542c, 0xd0, 0x3200, 0x1a8, 0x1f0, 0x1f0, 0x1a8, 0x1f0, 0x3, 0x0, {[{{@ip={@loopback, @loopback, 0x0, 0xffffffff, 'bond_slave_0\x00', 'vlan1\x00'}, 0x32020000, 0x70, 0xd0, 0x6400, {0x500000000000000, 0xffffffffa0028000}}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x1, @multicast}}}, {{@uncond, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x80000, 0x0, '\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a0) 22.971631903s ago: executing program 1 (id=1835): syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(0xffffffffffffffff, 0x0, 0x39) socket$inet_mptcp(0x2, 0x1, 0x106) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bind$alg(0xffffffffffffffff, &(0x7f00000007c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(sm4)\x00'}, 0x58) r1 = syz_open_dev$vim2m(&(0x7f0000000100), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x1, 0x2, 0x1}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x0) ioctl$vim2m_VIDIOC_STREAMON(r1, 0x40045612, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c0001000b080c00bdad01409bbc7a46e39a8285dcdf12176679df069163ce947ee2b49e33538afaeb2713f450ebd010a20ff27fff0000000000000000", 0x89}], 0x1}, 0xff0f000000000000) openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0/file0\x00', 0x1842, 0x136) ioctl$VIDIOC_DECODER_CMD(r1, 0xc0485660, 0x0) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x72, 0x0, 0x7fff0000}]}) close_range(r4, 0xffffffffffffffff, 0x0) 21.884567177s ago: executing program 1 (id=1837): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) dup3(r1, r0, 0x0) r2 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000040)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) close(0x3) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) bind$nfc_llcp(r6, &(0x7f0000001040)={0x27, 0x0, 0xfffffffe, 0x4, 0x0, 0x1, "d92984bd1ca44c226af5160e961711a077609475b78411e88509de050000000000f2170e65e3f50327e422000000000000000000000200000000001900", 0x3f}, 0x60) 17.65154035s ago: executing program 1 (id=1842): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getrlimit(0xd, &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_mr_vif\x00') r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newroute={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa}, [@RTA_SPORT={0x6}]}, 0x24}}, 0x0) preadv(r3, 0x0, 0x0, 0x5, 0xfffff073) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x84}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, 0x0, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a", 0x1a) 17.074370647s ago: executing program 4 (id=1845): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) timer_create(0x3, 0x0, 0x0) syz_open_dev$usbfs(0x0, 0xb, 0x101301) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x1000, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$vim2m_VIDIOC_S_FMT(r0, 0xc0d05605, &(0x7f00000000c0)={0x1, @pix={0x9, 0xc, 0x59565955, 0x2, 0x6, 0x6, 0xc, 0xa6e, 0x0, 0x2, 0x2, 0x5}}) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_int(r4, 0x29, 0x46, 0x0, 0x0) r5 = openat$sndseq(0xffffffffffffff9c, 0x0, 0x42002) quotactl_fd$Q_SYNC(r0, 0xffffffff80000101, 0x0, 0x0) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r5, 0x4040534e, &(0x7f0000000140)={0x16f, @time={0x6, 0x800}}) 15.804213647s ago: executing program 4 (id=1847): r0 = getpgrp(0x0) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x8000000000001, r0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x6) sched_setaffinity(r0, 0x8, &(0x7f0000000140)=0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000200)='attr/fscreate\x00') write$binfmt_script(r4, 0x0, 0x0) ioctl$sock_SIOCADDDLCI(0xffffffffffffffff, 0x5452, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000002) rt_tgsigqueueinfo(0x0, 0x0, 0xb, 0x0) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x2000000, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), 0xffffffffffffffff) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0x4008ae89, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) 15.639664292s ago: executing program 1 (id=1848): r0 = socket$inet6(0xa, 0x1, 0x0) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, &(0x7f0000000000)=0x0) rt_sigqueueinfo(r1, 0xf, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_mount_image$reiserfs(&(0x7f0000000000), &(0x7f00000000c0)='./file1\x00', 0x8488, &(0x7f00000001c0), 0x1, 0x10fd, &(0x7f0000001140)="$eJzs2T9rFEEYBvBnds8/3cqmXwQtLCQknF8ghcK1ttqIpDJVrlL8OH4cTWUf0msRsF9Zb/dO5UTwTm1+PzjmvYd9Z2fKmQ0AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMZsmnkhxUSTtlVZKSdN3F4ipJN+V33tdVSp6eLpaPz+dPlknqb4+XZ0kZuoa2tMf3brfzdt4et48OTu5/WL5+8+rF2dnp+ThNSZfL6/1vpYzrAQAAAH7U76z5z+8HAAAAfmdvFwkAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAf6hvNnU7FVWSknTdxeIqSbel78Y/Wh8AAACwu5Iqz5tt+eoaYONhPjZlnQ/jlzLUR3m3pR8AAAD4pf7WWHz/fb3c3JzHH2S2PpcP2d3Mcni4+j8O+XyS1EmOfpr88vrty+lX+vpv7wUAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAgK/swLEAAAAAgDB/6zQ6NgAAAAAAAAAAAAAAAAAAAPYKAAD///F61s8=") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x102}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_mount_image$vfat(&(0x7f00000002c0), &(0x7f0000000280)='./bus\x00', 0x810408, 0x0, 0x0, 0x0, &(0x7f00000007c0)) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xc0, 0x0, 0x0) r5 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x110) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r6, &(0x7f0000000900)=@file={0x1, './file0\x00'}, 0x6e) listen(r6, 0x1) pwrite64(r5, &(0x7f0000000140)='2', 0x1, 0x8080c61) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000080)={@private1, 0x800, 0x0, 0x3, 0x3, 0x4, 0x6}, 0x20) 10.873785951s ago: executing program 5 (id=1850): syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$KDSKBMODE(0xffffffffffffffff, 0x4b45, 0x0) dup(0xffffffffffffffff) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000180)='./bus\x00', 0x1400c, &(0x7f0000000840)={[{@stripe={'stripe', 0x3d, 0x3d}}, {@init_itable}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}]}, 0x3, 0x457, &(0x7f0000000bc0)="$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") syz_mount_image$vfat(&(0x7f00000024c0), &(0x7f00000001c0)='./bus\x00', 0x204b82f, 0x0, 0x3, 0x0, &(0x7f0000000240)) chdir(&(0x7f00000003c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000000000)='.\x00', 0x0, 0x83) openat$binfmt(0xffffffffffffff9c, 0x0, 0x42, 0x1ff) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000840)='./file0\x00', 0x200014, &(0x7f0000000980)=ANY=[], 0x1, 0x0, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000a80)='./file0\x00', &(0x7f0000000040)={0x436002, 0x12, 0x17}, 0x18) 10.854765342s ago: executing program 3 (id=1851): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$MAP_CREATE(0x0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x882}, 0x0) 10.853930462s ago: executing program 4 (id=1852): r0 = msgget$private(0x0, 0x193) msgsnd(r0, &(0x7f0000000000)={0x2}, 0x8, 0x0) msgrcv(r0, &(0x7f0000000140)={0x0, ""/197}, 0xcd, 0x0, 0x1800) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000280)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDCTL_TMR_TIMEBASE(0xffffffffffffffff, 0xc0045401, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000001080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r4, &(0x7f0000002940)={0x0, 0x0, &(0x7f0000002900)={&(0x7f0000000600)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01002dbd7000fedbdf250e0000002000018014000200767863616e310000000000000000000008000300020000001800018014000200"], 0x4c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = add_key(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) keyctl$clear(0x7, r6) bpf$TOKEN_CREATE(0x24, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) 10.751176355s ago: executing program 2 (id=1853): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x8e40, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x8, 0x4}}]}}]}, 0x48}}, 0x20040084) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {0xffff}, {0xffff, 0xffff}, {0x2, 0x1}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x5, 0x0, 0xf, 0x10, 0x2, 0x4, 0x2, 0xf, 0x6, 0x3, 0x7, 0x8, 0x4, 0x1, 0x4], 0x3, [0xb, 0x3, 0x1, 0x2002, 0x1, 0x4, 0x2, 0xd09, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x2, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x1, 0x9, 0x3ff, 0x2, 0xc, 0x42, 0xfffc, 0x3, 0x1]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x400dc}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=@newqdisc={0x8c, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r8, {0x4}, {0xffff}, {0x2, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x4, [0xc, 0x9, 0x0, 0xf, 0x10, 0x2, 0x6, 0x2, 0x8, 0x2, 0x0, 0x1, 0x8, 0x1, 0x10, 0x4], 0x3, [0xc, 0x101, 0x7fff, 0x2002, 0x1, 0x4, 0x6, 0xd03, 0xff05, 0x2, 0xb, 0x3, 0x5, 0x6, 0xd, 0x100], [0xfff1, 0x5, 0xffff, 0xfff5, 0x4, 0x8, 0x7, 0x2a, 0x401, 0x2, 0xc, 0x40, 0xfffc, 0x3, 0x4]}}]}}]}, 0x8c}, 0x1, 0x0, 0x0, 0x810}, 0x0) r9 = socket$packet(0x11, 0x2, 0x300) sendto$packet(r9, 0x0, 0x0, 0x48040, &(0x7f00000001c0)={0x11, 0x7, r8, 0x1, 0x6, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r10) sendmsg$TIPC_CMD_ENABLE_BEARER(r10, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}, 0x1, 0x0, 0x0, 0x44081}, 0x40000) 9.670163469s ago: executing program 3 (id=1854): r0 = syz_open_procfs(0x0, &(0x7f00000000c0)='net/ptype\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000080)={@multicast2, @remote, @multicast1}, 0xc) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f00000006c0)={0x7, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e24, @multicast1}}}, 0x108) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c00010062726964"], 0x3c}}, 0x0) bind$packet(r4, 0x0, 0x0) preadv(r0, &(0x7f0000000200)=[{&(0x7f0000000180)=""/46, 0x2e}], 0x1, 0x144f, 0x4) 9.669146719s ago: executing program 1 (id=1864): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$SEG6(&(0x7f0000002040), r3) sendmsg$SEG6_CMD_SETHMAC(r3, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000002080)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x882}, 0x0) 8.810784516s ago: executing program 5 (id=1855): openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$UHID_INPUT(r0, &(0x7f0000000940)={0x8, {"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", 0xdd52d6c}}, 0x1006) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x5) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeeb, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x128}, 0x4044000) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f00000000c0)=0x2, 0x4) sendmmsg$inet6(r4, 0x0, 0x0, 0x20002040) r6 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r6, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r6, &(0x7f0000000480)={0x2, 0x4e23, @multicast2}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in6=@empty, 0x0, 0x0, 0x4e23, 0x4, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x2, 0x0, 0x4, 0x0, 0xffffeffffffffffc, 0x2, 0x406}, {0x18000000, 0x0, 0x3fffffffe}, 0xfffffffd, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x32}, 0x0, @in=@private=0xa010101, 0x0, 0x0, 0x0, 0xb7, 0x8, 0xfffffffe}}, 0xe8) sendmmsg(r6, &(0x7f0000007fc0), 0x800001d, 0x1c) 8.528716424s ago: executing program 2 (id=1856): mkdir(0x0, 0xb) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) syz_usb_control_io$hid(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, 0x0, 0x0) openat$ptp0(0xffffffffffffff9c, &(0x7f0000000000), 0x80042, 0x0) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x8080, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) socketpair$nbd(0x1, 0x1, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xb, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = syz_open_dev$MSR(&(0x7f00000007c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$sock_int(r2, 0x1, 0x0, &(0x7f0000000040)=0x6, 0x4) ioctl$TIOCSETD(r1, 0x5423, &(0x7f00000000c0)=0x3) ioctl$TCFLSH(r1, 0x540b, 0x1) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, &(0x7f0000000840)={0x3, 0x1, {0x80, @usage=0x5, 0x0, 0x3, 0x101, 0x1, 0xff, 0x1, 0x30, @struct={0x5, 0x4}, 0x400, 0x5, [0x2, 0x5, 0x8, 0xb2a0, 0x9fa, 0x4]}, {0x8000000000000000, @struct={0xc, 0x9}, 0x0, 0x1, 0xc, 0x8, 0xfffffffffffffffc, 0x9, 0x20, @usage=0xb, 0x0, 0x5, [0x1000, 0x3, 0xfffffffffffffff9, 0x9, 0x2, 0x6]}, {0xfffffffffffff550, @usage=0x9, 0x0, 0x28d, 0x7fff, 0x5, 0x1, 0xfffffffffffffff7, 0x52, @usage=0x100000001, 0x2, 0x1, [0x9, 0x4, 0x9, 0x7, 0x9, 0x7]}, {0x9, 0x4, 0x9}}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000000)='./cgroup\x00', &(0x7f0000000100)='adfs\x00', 0x2000010, 0x0) sendmsg$NFNL_MSG_CTHELPER_DEL(r4, &(0x7f0000000140)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, 0x2, 0x9, 0x101, 0x0, 0x0, {0xa, 0x0, 0x8}}, 0x14}, 0x1, 0x0, 0x0, 0x4000041}, 0x4004040) 8.498102566s ago: executing program 3 (id=1857): prlimit64(0x0, 0xe, &(0x7f00000001c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r0 = getpid() ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, &(0x7f0000002180)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, 0x0) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000009c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x1748, 0x230, 0x438, 0x1538, 0x1538, 0x1538, 0x1678, 0x1678, 0x1678, 0x1678, 0x1678, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0, 0x0, {0x7a00000000000000}}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@private0, @ipv4=@empty, 0xe, 0x3f}}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0x0, 0xffffffff], [], 'pimreg0\x00', 'veth1_macvtap\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x7}}, @common=@unspec=@connbytes={{0x38}}]}, @common=@unspec=@AUDIT={0x28}}, {{@uncond, 0x0, 0x1e0, 0x208, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @private2, @loopback, @mcast2, @local, @private1, @local, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast2, @empty, @private1, @private1, @loopback, @loopback]}}]}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @dev={0xfe, 0x80, '\x00', 0x15}, [0xffffffff, 0x0, 0xff, 0xff000000], [0xff000000, 0x0, 0xff], 'syz_tun\x00', 'pimreg1\x00', {0xff}, {}, 0x2f, 0x81, 0x1, 0x8}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x1, 0x0, './cgroup.cpu/syz0\x00', 0xe, {0x6}}}]}, @common=@unspec=@MARK={0x28}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, [], [0x0, 0xffffff00], 'bond_slave_1\x00', 'gretap0\x00'}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4, @ipv6=@empty, 0x0, 0x29}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x17a8) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) 7.462007128s ago: executing program 3 (id=1858): openat$sequencer(0xffffffffffffff9c, &(0x7f00000000c0), 0x22000, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) socket$nl_route(0x10, 0x3, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000040)=0x2) recvmmsg(r2, &(0x7f0000000040), 0x80002c1, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000480)={0x0, 0x14, &(0x7f0000000140)={&(0x7f00000002c0)={0x14, r5, 0x9c3fa077fa966179, 0x12, 0x21000000, {{0x7e}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x8}, 0x4040800) socket$inet_icmp(0x2, 0x2, 0x1) socket$netlink(0x10, 0x3, 0x0) recvmmsg(r0, 0x0, 0x0, 0x4002, 0x0) socket(0x23, 0x1, 0x6) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) 5.843616709s ago: executing program 5 (id=1859): bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000140)={0x28, 0x0, 0x2710, @local}, 0x10) ioctl$BTRFS_IOC_QUOTA_RESCAN(0xffffffffffffffff, 0x4040942c, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, 0x0, 0x0) sendto(r0, 0x0, 0x0, 0x40480c0, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000200)='ext4\x00', &(0x7f0000000740)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0xc000, &(0x7f00000006c0), 0x2, 0x246, &(0x7f0000000ac0)="$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") prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) madvise(&(0x7f00009e6000/0x3000)=nil, 0x3000, 0x19) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffe}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) msgget$private(0x0, 0x0) r4 = syz_open_dev$video(&(0x7f0000000000), 0x101, 0xab02) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000180)=0x1) ioctl$VIDIOC_S_CROP(r4, 0x4014563c, &(0x7f0000000100)={0x1, {0xf8000002, 0x8ba, 0x27, 0xb}}) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 5.218293408s ago: executing program 3 (id=1860): recvmmsg$unix(0xffffffffffffffff, &(0x7f0000006fc0)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)=""/22, 0x16}, {&(0x7f00000000c0)=""/37, 0x25}, {0x0}], 0x3, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f00000002c0)=@abs, 0x6e, &(0x7f0000001040)=[{&(0x7f0000000340)=""/36, 0x24}, {&(0x7f0000000440)=""/18, 0x12}, {&(0x7f0000000480)=""/64, 0x40}, {&(0x7f00000004c0)=""/47, 0x2f}, {&(0x7f0000000500)=""/95, 0x5f}, {&(0x7f0000000580)=""/199, 0xc7}, {&(0x7f0000000680)=""/201, 0xc9}, {&(0x7f0000000780)=""/114, 0x72}, {0x0}], 0x9, &(0x7f0000000f00)=[@cred={{0x1c}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000bc0)=""/237, 0xed}], 0x1, &(0x7f0000000d00)}}, {{&(0x7f0000000e80), 0x6e, &(0x7f0000004740)=[{&(0x7f0000001580)=""/4096, 0x1000}, {&(0x7f0000002580)=""/121, 0x79}, {&(0x7f0000002600)=""/4096, 0x1000}, {0x0}, {&(0x7f0000004640)=""/43, 0x2b}, {0x0}, {&(0x7f00000046c0)=""/98, 0x62}], 0x7}}, {{&(0x7f0000004880), 0x6e, &(0x7f0000004a00)=[{0x0}, {&(0x7f00000049c0)=""/22, 0x16}], 0x2}}, {{&(0x7f0000005c00), 0x6e, &(0x7f0000006f40)=[{&(0x7f0000005d40)=""/4096, 0x1000}, {0x0}, {0x0}], 0x3}}], 0x6, 0x40, &(0x7f00000071c0)) fcntl$lock(0xffffffffffffffff, 0x410, 0x0) syz_usb_connect(0x2, 0x9a2, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x40}}, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x240, 0x0) ioctl$TCFLSH(r0, 0x400455c8, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$TIOCL_PASTESEL(0xffffffffffffffff, 0x541c, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$video4linux(0x0, 0x4, 0x40000) openat$ttyprintk(0xffffff9c, &(0x7f0000000040), 0x20000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) setsockopt$sock_linger(r2, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) socket$pppl2tp(0x18, 0x1, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) 4.958588746s ago: executing program 2 (id=1861): r0 = socket(0x10, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000) mount(&(0x7f0000000140)=@nullb, 0x0, 0x0, 0x2208004, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) ioctl$sock_SIOCETHTOOL(r1, 0x89f1, &(0x7f0000000340)={'ip6gre0\x00', &(0x7f0000000f00)=@ethtool_per_queue_op={0x4b, 0xe, [0xf68f, 0x8, 0x9, 0x1ff, 0x1ff, 0x4, 0xe97, 0x4, 0x6, 0xecbf, 0xff, 0x101, 0x7, 0x200, 0x3d, 0x5e, 0x1000, 0xffff, 0xf557, 0x2, 0x5, 0x7c, 0xce, 0x2, 0xffffff6b, 0xe52c, 0xaa8, 0x7ffffffc, 0xd, 0xe9c4, 0xcd8, 0x6e, 0x200006, 0x7, 0xd, 0x8a, 0x3, 0x6, 0x3, 0x3, 0x3, 0xfffffffc, 0xfd2, 0x6, 0x8, 0x401, 0xfffffffe, 0x2b, 0xa, 0x0, 0x7, 0x8, 0x5, 0x3, 0x6, 0x8, 0x23, 0x2, 0x3, 0x10, 0x3, 0xffffffff, 0x6, 0x5fffffd, 0xd1, 0xf, 0x4, 0xa, 0xfffffffe, 0x400, 0x80000000, 0x8000, 0x3, 0x5, 0x2, 0x0, 0x2, 0x1, 0x80, 0x4, 0x2, 0x0, 0xd, 0x2000006, 0x4, 0x8, 0x0, 0x1, 0xfffffffc, 0x0, 0x7ff, 0x7, 0x2, 0xbde, 0x37, 0x3, 0x4, 0x1, 0xa, 0x6, 0x7fff, 0x1, 0x3, 0x33e3, 0x9, 0x6, 0x7fff, 0x6, 0x100, 0x3, 0xfffffffd, 0x2, 0x6, 0x8, 0x6, 0x7, 0x200, 0x9, 0xe, 0x81, 0x0, 0x4, 0x105, 0x5, 0x8, 0x3, 0x1, 0xfffffffa]}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x5, 0xff, 0x0, @mcast1, @empty, 0xb6, 0x20, 0x100009, 0x45}}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, 0x0) 3.885664049s ago: executing program 4 (id=1862): r0 = syz_open_dev$dvb_frontend(&(0x7f0000000000), 0x0, 0x2000) ioctl$FE_GET_EVENT(r0, 0x80286f4e, &(0x7f0000000040)={0x0, {0x0, 0x0, @qam}}) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) timer_create(0x0, &(0x7f0000000240)={0x0, 0x21}, &(0x7f0000000300)) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0xfd8b, 0x5}) syz_open_dev$dri(&(0x7f0000000000), 0x0, 0x0) mremap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x800000, 0x3, &(0x7f00007fe000/0x800000)=nil) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{}, {0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xb320a000) r1 = open(&(0x7f0000000280)='.\x00', 0x0, 0x0) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xb72ff000) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], 0x0, 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r2 = openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x20842, 0x63) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x5a, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) write$cgroup_subtree(r2, &(0x7f0000000280)=ANY=[], 0x9) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000001c0)=[0x5], 0x0, 0x0, 0x1, 0x1}}, 0x40) ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x3ff) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = socket(0x15, 0x5, 0x0) getsockopt(r4, 0x200000000114, 0x271c, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) fcntl$lock(r1, 0x410, &(0x7f00000000c0)={0x1, 0x1, 0x1, 0xfffe}) 3.697731825s ago: executing program 5 (id=1863): openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) r0 = openat$rdma_cm(0xffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_INIT_QP_ATTR(r0, &(0x7f0000000200)={0xb, 0x10, 0xfa00, {0x0, 0xffffffffffffffff, 0xfff}}, 0x18) ioctl$BTRFS_IOC_BALANCE_PROGRESS(0xffffffffffffffff, 0x84009422, 0x0) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x4a102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x4e22, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x6f}, 0x2c) setsockopt$IP_VS_SO_SET_ADDDEST(r2, 0x0, 0x487, &(0x7f0000000000)={{0x84, @private=0xa010102, 0x4e22, 0x3, 'lc\x00', 0x4, 0x8, 0x77}, {@remote, 0x4e20, 0x2, 0xcd}}, 0x44) setsockopt$IP_VS_SO_SET_FLUSH(r3, 0x0, 0x485, 0x0, 0x0) socket(0x2, 0x80805, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IP_VS_SO_SET_ADD(r4, 0x0, 0x482, &(0x7f0000000040)={0x84, @rand_addr=0x64010101, 0x0, 0x3, 'lblcr\x00', 0x1, 0x80005, 0x41}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r4, 0x0, 0x485, 0x0, 0x0) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) read$FUSE(r5, &(0x7f00000031c0)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_STATX(r5, &(0x7f00000002c0)={0x130, 0x0, r6, {0x4000000000007, 0xc, 0x0, '\x00', {0x6, 0xaf22, 0x6, 0x6, 0x0, r7, 0xa000, '\x00', 0x7, 0x8, 0xd60b, 0x80000000005, {0x4002008, 0xfffffff0}, {0x203d7f, 0x2, 0xc000000}, {0x100000000408, 0x72}, {0xfffffffffffffffd, 0xdb23}, 0xffffffff, 0x5, 0x200, 0x8000}}}, 0x130) 2.358053707s ago: executing program 2 (id=1865): syz_emit_vhci(0x0, 0x1a) madvise(&(0x7f0000ffd000/0x3000)=nil, 0x3011, 0x17) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) io_getevents(0x0, 0xea, 0x0, 0x0, 0x0) bind$inet6(r3, 0x0, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, @void}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f0000001b00), 0x0, 0x20000045, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) 1.371652528s ago: executing program 5 (id=1866): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000240), 0x4) socket$netlink(0x10, 0x3, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0xd}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x7, 0x9}]}}]}, 0x38}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000009f40)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="b1", 0x1}], 0x1}}], 0x1, 0x4000054) r6 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000380)=[{0x0}, {&(0x7f0000002c00)=""/4096, 0x1000}], 0x2, 0x401, 0xc) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x12, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0xd, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_BUCKETS_LOG={0x8, 0x8, 0x1}]}}]}, 0x38}}, 0x0) 1.278769291s ago: executing program 3 (id=1867): r0 = socket$nl_audit(0x10, 0x3, 0x9) mknodat(0xffffffffffffffff, &(0x7f0000000040)='./file0\x00', 0x1000, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x3d, &(0x7f0000000200)=0x10000002) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) sendmsg$inet(0xffffffffffffffff, 0x0, 0x24008004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(0xffffffffffffffff, 0x0, 0x80) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) keyctl$join(0x1, 0x0) mount$binderfs(0x0, &(0x7f0000000040)='./binderfs\x00', 0x0, 0xb80420, &(0x7f00000000c0)=ANY=[@ANYBLOB='rootcontext=']) keyctl$session_to_parent(0x12) socket(0x10, 0x803, 0x0) r4 = syz_open_procfs(0x0, 0x0) preadv(r4, &(0x7f00000029c0)=[{&(0x7f0000002200)=""/175, 0xaf}], 0x1, 0x20007c, 0x8001) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'veth0_to_bond\x00', &(0x7f0000000180)=@ethtool_coalesce={0xe, 0x7, 0x7, 0x7, 0x3, 0x0, 0xfff, 0x100, 0x5, 0x6, 0x1, 0x2, 0x401, 0x5, 0x1, 0x9, 0x4, 0xb, 0x8, 0x3, 0x9, 0x90e, 0x2}}) 1.272776211s ago: executing program 2 (id=1877): connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0xfffffffffffffffd, 0x22000000) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x100) r1 = fsopen(&(0x7f0000000080)='qnx4\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x28383, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) openat$comedi(0xffffffffffffff9c, &(0x7f0000000000)='/dev/comedi4\x00', 0x20080, 0x0) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) epoll_create1(0x0) syz_io_uring_setup(0x2, &(0x7f0000000580)={0x0, 0x8b2, 0x13500, 0x0, 0x304}, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x2, 0x3, 0xfffffffffffffffd, 0x400000, 0x0, 0xffffffffffffff1b, 0x7b}, 0x0, &(0x7f0000000280)={0x3fc, 0x0, 0x0, 0x1, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x8) r3 = epoll_create1(0x0) r4 = syz_open_dev$media(&(0x7f00000000c0), 0x103, 0x0) ioctl$MEDIA_IOC_REQUEST_ALLOC(r4, 0x80047c05, &(0x7f0000000080)=0xffffffffffffffff) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r5, &(0x7f0000000040)={0x2000001b}) socket$alg(0x26, 0x5, 0x0) 232.558843ms ago: executing program 1 (id=1868): openat$random(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000280)='net/fib_triestat\x00') socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x40}, 0x87d4b69a72310a97) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c:::\x00', 0x0) r5 = gettid() fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r5, 0xb) ioctl$TIOCL_SETSEL(r0, 0x541c, &(0x7f0000001900)={0x2, {0xc, 0x117, 0x5, 0x101, 0x200}}) 145.730936ms ago: executing program 2 (id=1869): r0 = syz_open_dev$vcsn(&(0x7f0000000300), 0x5, 0x100) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r0, 0x4040534e, &(0x7f0000000340)={0x8, @time={0x9, 0x5ee}, 0x40, {0xb, 0xf8}, 0x7, 0x1, 0x5}) syz_usb_connect$hid(0x5, 0x36, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000040), 0x60442, 0x0) readv(r4, &(0x7f0000001800)=[{&(0x7f0000000400)=""/198, 0xc6}], 0x1) sendmsg$TIPC_NL_BEARER_ENABLE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x54, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x40, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x0, @loopback}}, {0x14, 0x2, @in={0x2, 0x0, @multicast2}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}]}]}, 0x54}}, 0x0) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x58, r3, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NODE={0x44, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x3c, 0x4, {'gcm(aes)\x00', 0x14, "e3de3d7b4cd07ec3ee777de774fc7987cca41989"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x4000004) socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ocfs2_control(0xffffffffffffff9c, &(0x7f0000000280), 0x210000, 0x0) r6 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto]}}, 0x0, 0x26}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r6, 0x27, &(0x7f00000002c0)={0x0, 0x38, 0x0, &(0x7f00000027c0)=""/4096, 0x1000}}, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f0000000a80)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x44820}, 0x4000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$random(0xffffffffffffff9c, &(0x7f0000000000), 0x101200, 0x0) ppoll(&(0x7f00000000c0)=[{r7, 0x1001}], 0x1, 0x0, 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000940), 0x4004) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000e40), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r9, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000001080)={&(0x7f0000000000)={0x6c, r10, 0x1, 0x0, 0x25dfdbfe, {}, [@TIPC_NLA_BEARER={0x58, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x0, 0x0, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz0\x00'}]}]}, 0x6c}}, 0x0) 102.317458ms ago: executing program 5 (id=1870): r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x781) prlimit64(0x0, 0xe, &(0x7f0000000100)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x400000, 0x0, 0xfffffeb6, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) syz_open_dev$loop(0x0, 0x3af2, 0x5000) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_MAP_FREEZE(0x16, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x12, 0x4, 0x0, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @cgroup_sock_addr=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket(0x1, 0x5, 0x0) close(r4) r5 = socket(0x28, 0x801, 0x0) connect$vsock_stream(r5, &(0x7f0000000880)={0x28, 0x0, 0x0, @local}, 0x10) r6 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f0000000500)={0x6000000d}) 0s ago: executing program 4 (id=1871): openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x143102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x1) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB=',rootmode=00000000000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r1, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r1, &(0x7f0000000040)={0x50, 0x0, r2, {0x7, 0x1f, 0x0, 0x10400, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x4}}, 0x50) syz_fuse_handle_req(r1, &(0x7f0000008380)="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc4e00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ba045abcd5dfc67d000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000230000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000209bfd66eea210560000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000040000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001354c4b600", 0x2000, &(0x7f00000062c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)={0x20, 0x0, 0x88}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_fuse_handle_req(r1, &(0x7f0000004200)="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", 0x2000, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)={0x78, 0x0, 0x0, {0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000, 0x8000}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) syz_fuse_handle_req(r1, &(0x7f0000006380)="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", 0x2000, &(0x7f0000000dc0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000340)={0x18, 0xfffffffffffffff5, 0xffffffff, {0x4}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000cc0)="e1", 0x56000}], 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18020000d600000000000010e8ffffff85000000ce0000000037292c73c007beae1f1cc52c52616d00dbe9d81a"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x42, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) umount2(&(0x7f0000000380)='./file0\x00', 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) kernel console output (not intermixed with test programs): lems! [ 85.463669][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.473093][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.482748][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 85.491887][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 85.501403][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 85.511199][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 85.538595][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.582592][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.592962][ T4277] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.603644][ T4277] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.638003][ T4277] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.658210][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 85.681165][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 85.711580][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.729587][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.749701][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.765772][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.778813][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.795055][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.807031][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.825483][ T26] audit: type=1326 audit(1781795846.905:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4360 comm="syz.0.1" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa58759ce59 code=0x0 [ 85.857033][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.877396][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.899675][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.922907][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.938990][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.955499][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.967566][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.986796][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.009065][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.019776][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.036321][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.046704][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.068754][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.087178][ T4278] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.098308][ T4278] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.124501][ T4278] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.164369][ T4278] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.187062][ T4278] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.204476][ T4278] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.215322][ T4278] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.273682][ T4364] loop1: detected capacity change from 0 to 32768 [ 86.291882][ T4364] gfs2: fsid=syz:syz: Trying to join cluster "lock_nolock", "syz:syz" [ 86.300395][ T4364] gfs2: fsid=syz:syz: Now mounting FS (format 1801)... [ 86.316674][ T4292] Bluetooth: hci2: command 0x0419 tx timeout [ 86.316692][ T4293] Bluetooth: hci3: command 0x0419 tx timeout [ 86.323953][ T4288] Bluetooth: hci4: command 0x0419 tx timeout [ 86.331633][ T4280] Bluetooth: hci0: command 0x0419 tx timeout [ 86.336589][ T4289] Bluetooth: hci1: command 0x0419 tx timeout [ 86.357081][ T4277] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.382081][ T4277] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.391815][ T4277] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.401245][ T4277] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.416398][ T4364] gfs2: fsid=syz:syz.0: journal 0 mapped with 1 extents in 0ms [ 86.420728][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.439230][ T4264] gfs2: fsid=syz:syz.0: jid=0, already locked for use [ 86.457436][ T4264] gfs2: fsid=syz:syz.0: jid=0: Looking at journal... [ 86.474541][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.522303][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 86.537443][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 86.547786][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.556191][ T4264] gfs2: fsid=syz:syz.0: jid=0: Journal head lookup took 98ms [ 86.571246][ T4264] gfs2: fsid=syz:syz.0: jid=0: Done [ 86.577521][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.586584][ T4364] gfs2: fsid=syz:syz.0: first mount done, others may mount [ 86.644736][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.696941][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.707068][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.718160][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.728232][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.738742][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.748775][ T4276] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.761083][ T4276] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.779171][ T4276] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.832171][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 86.841346][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 86.867325][ T4276] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.941220][ T4276] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.974653][ T4276] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.995700][ T4276] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.228943][ T46] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.277964][ T46] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.345048][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.394837][ T46] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.431828][ T46] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.464993][ T56] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.502707][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.538794][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.565496][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.600694][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.608711][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.677120][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 87.768365][ T4380] loop4: detected capacity change from 0 to 512 [ 87.793102][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.803664][ T4380] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 87.833009][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.854615][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.883771][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.897286][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.929057][ T4328] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 87.946631][ T4380] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 88.037465][ T4380] EXT4-fs (loop4): 1 truncate cleaned up [ 88.063814][ T4380] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 88.178379][ T4387] L1TF CPU bug present and SMT on, data leak possible. See CVE-2018-3646 and https://www.kernel.org/doc/html/latest/admin-guide/hw-vuln/l1tf.html for details. [ 88.220981][ T4380] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.278288][ T4380] EXT4-fs (loop4): Remounting filesystem read-only [ 88.309326][ T4380] EXT4-fs error (device loop4): __ext4_new_inode:1355: inode #18: comm syz.4.5: mark_inode_dirty error [ 88.405782][ T4380] EXT4-fs (loop4): Remounting filesystem read-only [ 88.435702][ T4380] EXT4-fs error (device loop4) in __ext4_new_inode:1357: Corrupt filesystem [ 88.518607][ T4380] EXT4-fs (loop4): Remounting filesystem read-only [ 88.586305][ T4380] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 88.653866][ T4380] EXT4-fs (loop4): Remounting filesystem read-only [ 88.672060][ T4380] EXT4-fs error (device loop4): ext4_evict_inode:281: inode #18: comm syz.4.5: mark_inode_dirty error [ 88.708405][ T4380] EXT4-fs (loop4): Remounting filesystem read-only [ 88.724553][ T4380] EXT4-fs warning (device loop4): ext4_evict_inode:284: couldn't mark inode dirty (err -117) [ 88.737051][ T4396] loop0: detected capacity change from 0 to 4096 [ 88.751467][ T4396] EXT4-fs: inline encryption not supported [ 88.780340][ T4401] syz.3.13 uses obsolete (PF_INET,SOCK_PACKET) [ 88.801416][ T4396] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 88.849535][ T4396] EXT4-fs (loop0): Test dummy encryption mode enabled [ 88.904706][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 88.917794][ T4396] [EXT4 FS bs=4096, gc=1, bpg=524288, ipg=32, mo=a842c198, mo2=0003] [ 88.934246][ T4396] System zones: 0-5 [ 88.962884][ T4396] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 89.127530][ T4407] Illegal XDP return value 4291420160 on prog (id 2) dev syz_tun, expect packet loss! [ 89.187111][ T4396] EXT4-fs (loop0): shut down requested (1) [ 89.230188][ T4286] usb 2-1: new high-speed USB device number 2 using dummy_hcd [ 89.311567][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 89.320507][ T11] EXT4-fs (loop0): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 89.335427][ T11] Quota error (device loop0): write_blk: dquota write failed [ 89.344102][ T11] Quota error (device loop0): free_dqentry: Can't write quota data block 5 [ 89.437794][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 89.463260][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 89.488706][ T4286] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 89.525046][ T4286] usb 2-1: New USB device found, idVendor=0a07, idProduct=00d0, bcdDevice=10.13 [ 89.576470][ T4286] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 89.627177][ T4286] usb 2-1: Product: syz [ 89.632207][ T4286] usb 2-1: Manufacturer: syz [ 89.636860][ T4286] usb 2-1: SerialNumber: syz [ 89.691334][ T4286] usb 2-1: config 0 descriptor?? [ 89.934501][ T4286] adutux 2-1:0.0: ADU208 4242424 now attached to /dev/usb/adutux0 [ 90.191843][ T4424] device veth0_macvtap left promiscuous mode [ 90.211130][ T4329] usb 2-1: USB disconnect, device number 2 [ 90.881282][ T4443] loop3: detected capacity change from 0 to 64 [ 90.972591][ T4431] loop2: detected capacity change from 0 to 32768 [ 91.013885][ T4431] ======================================================= [ 91.013885][ T4431] WARNING: The mand mount option has been deprecated and [ 91.013885][ T4431] and is ignored by this kernel. Remove the mand [ 91.013885][ T4431] option from the mount to silence this warning. [ 91.013885][ T4431] ======================================================= [ 91.286942][ T4431] XFS (loop2): Mounting V5 Filesystem [ 91.449594][ T4431] XFS (loop2): Ending clean mount [ 91.707949][ T4276] XFS (loop2): Unmounting Filesystem [ 91.763418][ T4463] XFS (loop2): SB summary counter sanity check failed [ 91.775349][ T4463] XFS (loop2): Metadata corruption detected at xfs_sb_write_verify+0x109/0x2d0, xfs_sb block 0x0 [ 91.837938][ T4463] XFS (loop2): Unmount and run xfs_repair [ 91.853016][ T4463] XFS (loop2): First 128 bytes of corrupted metadata buffer: [ 91.868469][ T4463] 00000000: 58 46 53 42 00 00 10 00 00 00 00 00 00 00 10 00 XFSB............ [ 91.896447][ T127] cfg80211: failed to load regulatory.db [ 91.914483][ T4463] 00000010: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ................ [ 91.950912][ T4463] 00000020: c4 96 e0 5e 54 0d 4c 72 b5 91 04 d7 9d 8b 4e eb ...^T.Lr......N. [ 91.977481][ T4463] 00000030: 00 00 00 00 00 00 00 06 00 00 00 00 00 00 11 40 ...............@ [ 92.027470][ T4463] 00000040: 00 00 00 00 00 00 11 41 00 00 00 00 00 00 11 42 .......A.......B [ 92.059727][ T4463] 00000050: 00 00 00 01 00 00 10 00 00 00 00 01 00 00 00 00 ................ [ 92.088035][ T4463] 00000060: 00 00 04 3e b4 b5 02 00 04 00 00 04 00 00 00 00 ...>............ [ 92.113841][ T4463] 00000070: 00 00 00 00 00 00 00 00 0c 09 0a 02 0c 00 00 0a ................ [ 92.136457][ T4463] XFS (loop2): Corruption of in-memory data (0x8) detected at _xfs_buf_ioapply+0x20c/0x670 (fs/xfs/xfs_buf.c:1553). Shutting down filesystem. [ 92.176940][ T4463] XFS (loop2): Please unmount the filesystem and rectify the problem(s) [ 92.983011][ T4477] netlink: 24 bytes leftover after parsing attributes in process `syz.2.33'. [ 93.091016][ T3935] device veth0_macvtap entered promiscuous mode [ 93.882786][ T4498] overlayfs: failed to clone upperpath [ 93.918918][ T4492] loop0: detected capacity change from 0 to 8192 [ 93.976401][ T4492] REISERFS warning: read_super_block: reiserfs filesystem is deprecated and scheduled to be removed from the kernel in 2025 [ 94.010234][ T4492] REISERFS (device loop0): found reiserfs format "3.5" with non-standard journal [ 94.019610][ T4492] REISERFS (device loop0): using ordered data mode [ 94.130747][ T4492] reiserfs: using flush barriers [ 94.166144][ T4508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.43'. [ 94.176367][ T4492] REISERFS (device loop0): journal params: device loop0, size 512, journal first block 18, max trans len 256, max batch 225, max commit age 30, max trans age 30 [ 94.250152][ T4492] REISERFS (device loop0): checking transaction log (loop0) [ 94.303733][ T4492] REISERFS (device loop0): Using r5 hash to sort names [ 94.361049][ T4492] REISERFS (device loop0): Created .reiserfs_priv - reserved for xattr storage. [ 94.611756][ T26] audit: type=1800 audit(1781795855.695:3): pid=4492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.40" name="bus" dev="loop0" ino=6 res=0 errno=0 [ 94.862878][ T4525] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.871723][ T4525] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.880457][ T2192] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 94.997979][ T4526] device bridge_slave_1 left promiscuous mode [ 95.080432][ T2192] usb 5-1: Using ep0 maxpacket: 8 [ 95.089461][ T2192] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.113668][ T2192] usb 5-1: New USB device found, idVendor=1345, idProduct=3008, bcdDevice= 0.00 [ 95.123237][ T2192] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.133236][ T4526] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.145012][ T2192] usb 5-1: config 0 descriptor?? [ 95.171009][ T2192] usbhid 5-1:0.0: fixing wrong optional hid class descriptors count [ 95.215393][ T4526] device bridge_slave_0 left promiscuous mode [ 95.246855][ T4526] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.350437][ T4329] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 95.542212][ T4329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 95.569774][ T4329] usb 1-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 95.588739][ T2192] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 95.615452][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 95.624014][ T2192] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 95.640189][ T2192] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 95.651733][ T4329] usb 1-1: config 0 descriptor?? [ 95.678721][ T2192] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 95.697689][ T2192] sony 0003:1345:3008.0001: unknown main item tag 0x0 [ 95.733570][ T2192] sony 0003:1345:3008.0001: unbalanced collection at end of report description [ 95.745610][ T2192] sony 0003:1345:3008.0001: parse failed [ 95.781617][ T2192] sony: probe of 0003:1345:3008.0001 failed with error -22 [ 95.901245][ T4329] usbhid 1-1:0.0: can't add hid device: -71 [ 95.923794][ T4329] usbhid: probe of 1-1:0.0 failed with error -71 [ 95.967926][ T4329] usb 1-1: USB disconnect, device number 2 [ 96.049431][ T4545] fuse: Bad value for 'fd' [ 96.351007][ T4322] usb 5-1: USB disconnect, device number 2 [ 96.506037][ T4559] loop4: detected capacity change from 0 to 512 [ 96.546201][ T4329] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 96.552770][ T4559] EXT4-fs: Ignoring removed mblk_io_submit option [ 96.600800][ T4559] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 96.670318][ T4559] EXT4-fs error (device loop4): ext4_free_branches:1030: inode #16: comm syz.4.59: invalid indirect mapped block 83886080 (level 1) [ 96.769817][ T4559] EXT4-fs (loop4): Remounting filesystem read-only [ 96.782523][ T4329] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 96.800095][ T4329] usb 1-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 96.819420][ T4329] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 96.831892][ T4559] EXT4-fs (loop4): 1 orphan inode deleted [ 96.837700][ T4559] EXT4-fs (loop4): 1 truncate cleaned up [ 96.849217][ T4329] usb 1-1: config 0 descriptor?? [ 96.874132][ T4559] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 97.043799][ T4339] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 97.080919][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 97.250053][ T4339] usb 4-1: Using ep0 maxpacket: 16 [ 97.362365][ T4529] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 97.375375][ T4339] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 97.416520][ T4529] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 97.425573][ T4339] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 97.474176][ T4339] usb 4-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 97.494113][ T4575] loop4: detected capacity change from 0 to 32768 [ 97.508527][ T4575] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop4 scanned by syz.4.64 (4575) [ 97.536665][ T4339] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 97.565754][ T4339] usb 4-1: Product: syz [ 97.579653][ T4339] usb 4-1: Manufacturer: syz [ 97.586963][ T4339] usb 4-1: SerialNumber: syz [ 97.624560][ T4575] BTRFS info (device loop4): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 97.635188][ T4575] BTRFS info (device loop4): using crc32c (crc32c-intel) checksum algorithm [ 97.644879][ T4575] BTRFS info (device loop4): turning on sync discard [ 97.653478][ T4575] BTRFS info (device loop4): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 97.663278][ T4575] BTRFS info (device loop4): use zstd compression, level 3 [ 97.670570][ T4575] BTRFS info (device loop4): turning on async discard [ 97.677586][ T4575] BTRFS warning (device loop4): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 97.688382][ T4575] BTRFS info (device loop4): trying to use backup root at mount time [ 97.696551][ T4575] BTRFS info (device loop4): enabling auto defrag [ 97.703165][ T4575] BTRFS info (device loop4): using free space tree [ 97.800234][ T4328] BTRFS warning (device loop4): checksum verify failed on logical 5337088 mirror 1 wanted 0xe63dbdda found 0xc926492d level 0 [ 97.823601][ T4339] usb 4-1: 0:2 : does not exist [ 97.849577][ T4339] usb 4-1: 5:0: failed to get current value for ch 0 (-22) [ 97.866505][ T4575] BTRFS error (device loop4): failed to load root extent [ 97.873717][ T4575] BTRFS warning (device loop4): try to load backup roots slot 1 [ 97.881895][ T4330] BTRFS warning (device loop4): checksum verify failed on logical 5324800 mirror 1 wanted 0x9f73850b found 0x80379423 level 0 [ 97.911376][ T4329] aiptek 1-1:0.0: Aiptek using 400 ms programming speed [ 97.939045][ T4329] input: Aiptek as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input5 [ 97.950295][ T4575] BTRFS warning (device loop4): couldn't read tree root [ 97.957795][ T4575] BTRFS warning (device loop4): try to load backup roots slot 2 [ 97.966847][ T4575] BTRFS error (device loop4): parent transid verify failed on logical 5255168 mirror 1 wanted 5 found 7 [ 97.979197][ T4575] BTRFS warning (device loop4): couldn't read tree root [ 97.986306][ T4575] BTRFS warning (device loop4): try to load backup roots slot 3 [ 98.042628][ T4339] usb 4-1: USB disconnect, device number 2 [ 98.050569][ T4575] BTRFS info (device loop4): enabling ssd optimizations [ 98.060394][ T4575] BTRFS info (device loop4): rebuilding free space tree [ 98.109277][ T4575] BTRFS info (device loop4): checking UUID tree [ 98.301820][ T26] audit: type=1800 audit(1781795859.385:4): pid=4575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.64" name="file1" dev="loop4" ino=257 res=0 errno=0 [ 98.382960][ T127] usb 1-1: USB disconnect, device number 3 [ 98.389067][ C0] aiptek 1-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 98.407435][ T4356] udevd[4356]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 99.198880][ T4278] BTRFS info (device loop4): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.928814][ T4637] loop0: detected capacity change from 0 to 32768 [ 99.964834][ T4637] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.76 (4637) [ 99.982934][ T4637] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 99.993229][ T4637] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 100.002467][ T4637] BTRFS info (device loop0): setting nodatasum [ 100.008975][ T4637] BTRFS info (device loop0): force zlib compression, level 3 [ 100.016482][ T4637] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_LZO (0x8) [ 100.025837][ T4637] BTRFS info (device loop0): use lzo compression, level 0 [ 100.033078][ T4637] BTRFS info (device loop0): turning on flush-on-commit [ 100.040268][ T4637] BTRFS info (device loop0): enabling auto defrag [ 100.046936][ T4637] BTRFS info (device loop0): max_inline at 4096 [ 100.053312][ T4637] BTRFS info (device loop0): using free space tree [ 100.215226][ T4620] loop3: detected capacity change from 0 to 8192 [ 100.438091][ T4657] fuse: Bad value for 'fd' [ 100.483984][ T4657] process 'syz.1.79' launched './file0' with NULL argv: empty string added [ 100.490493][ T4637] BTRFS info (device loop0): enabling ssd optimizations [ 100.845687][ T4279] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 101.617216][ T4689] af_packet: tpacket_rcv: packet too big, clamped from 4083 to 4294967272. macoff=96 [ 102.433490][ T4691] loop0: detected capacity change from 0 to 32768 [ 102.446094][ T4691] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop0 scanned by syz.0.87 (4691) [ 102.498438][ T4691] BTRFS info (device loop0): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 102.554243][ T4691] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 102.579075][ T4691] BTRFS info (device loop0): enabling disk space caching [ 102.601140][ T4691] BTRFS info (device loop0): force clearing of disk cache [ 102.622429][ T4691] BTRFS info (device loop0): setting incompat feature flag for COMPRESS_ZSTD (0x10) [ 102.649317][ T4691] BTRFS info (device loop0): use zstd compression, level 3 [ 102.675695][ T4691] BTRFS info (device loop0): disk space caching is enabled [ 102.855968][ T4691] BTRFS info (device loop0): enabling ssd optimizations [ 102.894653][ T4691] BTRFS info (device loop0): rebuilding free space tree [ 102.995095][ T4691] BTRFS info (device loop0): disabling free space tree [ 103.010283][ T4691] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 103.063705][ T4691] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 103.484273][ T4279] BTRFS info (device loop0): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 103.765843][ T4718] loop0: detected capacity change from 0 to 64 [ 103.809594][ T4720] overlayfs: failed to clone upperpath [ 105.636983][ T4684] device syzkaller1 entered promiscuous mode [ 106.032126][ T4749] loop0: detected capacity change from 0 to 512 [ 106.090954][ T4749] EXT4-fs (loop0): encrypted files will use data=ordered instead of data journaling mode [ 106.201453][ T4749] EXT4-fs (loop0): 1 truncate cleaned up [ 106.207276][ T4749] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: none. [ 106.452504][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 106.905678][ T4286] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 106.918050][ T4752] loop2: detected capacity change from 0 to 32768 [ 106.950353][ T4752] BTRFS: device fsid 24c7a497-3402-47dd-bef8-82358f5f30e0 devid 1 transid 8 /dev/loop2 scanned by syz.2.104 (4752) [ 107.015899][ T4752] BTRFS info (device loop2): first mount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 107.052136][ T4752] BTRFS info (device loop2): using crc32c (crc32c-intel) checksum algorithm [ 107.080087][ T4752] BTRFS info (device loop2): using free space tree [ 107.100352][ T4286] usb 1-1: Using ep0 maxpacket: 32 [ 107.114090][ T4286] usb 1-1: New USB device found, idVendor=06a2, idProduct=0003, bcdDevice=b4.8c [ 107.195268][ T4286] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 107.245930][ T4286] usb 1-1: Product: syz [ 107.270108][ T4286] usb 1-1: Manufacturer: syz [ 107.275575][ T4286] usb 1-1: SerialNumber: syz [ 107.333121][ T4286] usb 1-1: config 0 descriptor?? [ 107.358489][ T4286] gspca_main: gspca_topro-2.14.0 probing 06a2:0003 [ 107.476750][ T4752] BTRFS info (device loop2): enabling ssd optimizations [ 107.548982][ T26] audit: type=1800 audit(1781795868.625:5): pid=4752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.104" name="file1" dev="loop2" ino=260 res=0 errno=0 [ 107.880261][ T7] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 108.081092][ T7] usb 5-1: Using ep0 maxpacket: 8 [ 108.118830][ T7] usb 5-1: unable to get BOS descriptor or descriptor too short [ 108.147077][ T7] usb 5-1: unable to read config index 0 descriptor/start: -71 [ 108.177578][ T7] usb 5-1: can't read configurations, error -71 [ 108.201492][ T4276] BTRFS info (device loop2): last unmount of filesystem 24c7a497-3402-47dd-bef8-82358f5f30e0 [ 108.441612][ T4813] comedi comedi0: Cannot bond this driver to itself! [ 108.459054][ T4813] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.764635][ T4817] loop2: detected capacity change from 0 to 128 [ 108.777482][ T4286] gspca_topro: Sensor cx0342 [ 108.882619][ T4817] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 108.959062][ T4817] ext4 filesystem being mounted at /20/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 108.986330][ T127] usb 1-1: USB disconnect, device number 4 [ 109.073422][ T4817] syz.2.110 (pid 4817) is setting deprecated v1 encryption policy; recommend upgrading to v2. [ 109.298495][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 109.991823][ T127] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 110.190108][ T127] usb 5-1: Using ep0 maxpacket: 32 [ 110.197175][ T127] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 110.227913][ T127] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 110.246209][ T127] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 110.265189][ T127] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 110.280369][ T127] usb 5-1: Product: syz [ 110.284613][ T127] usb 5-1: Manufacturer: syz [ 110.289241][ T127] usb 5-1: SerialNumber: syz [ 110.320872][ T127] usb 5-1: config 0 descriptor?? [ 110.343299][ T4834] loop2: detected capacity change from 0 to 32768 [ 110.481573][ T4834] XFS (loop2): Mounting V5 Filesystem [ 110.636313][ T4834] XFS (loop2): Ending clean mount [ 110.689400][ T4834] XFS (loop2): Quotacheck needed: Please wait. [ 110.817866][ T4834] XFS (loop2): Quotacheck: Done. [ 110.870951][ T22] usb 5-1: USB disconnect, device number 5 [ 110.939181][ T26] audit: type=1800 audit(1781795872.015:6): pid=4834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.115" name="file1" dev="loop2" ino=9286 res=0 errno=0 [ 111.387679][ T4276] XFS (loop2): Unmounting Filesystem [ 111.423432][ T4884] netlink: 4 bytes leftover after parsing attributes in process `syz.0.132'. [ 111.723729][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 111.743023][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.801536][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.847062][ T4892] bond0: (slave bond_slave_0): Releasing backup interface [ 111.893621][ T4892] bond0: (slave bond_slave_1): Releasing backup interface [ 112.041654][ T4892] team0: Port device team_slave_0 removed [ 112.078912][ T4892] team0: Port device team_slave_1 removed [ 112.089034][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.114696][ T4892] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.142840][ T4892] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.183623][ T4892] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.347389][ T4893] team0: Port device xfrm0 added [ 112.462134][ T4912] loop4: detected capacity change from 0 to 64 [ 112.726305][ T4922] loop3: detected capacity change from 0 to 256 [ 112.771818][ T4922] exfat: Deprecated parameter 'utf8' [ 112.785730][ T4922] exfat: Deprecated parameter 'utf8' [ 112.837981][ T4927] fuse: Bad value for 'fd' [ 112.864345][ T4922] exFAT-fs (loop3): failed to load upcase table (idx : 0x00010000, chksum : 0x11bbdf60, utbl_chksum : 0xe619d30d) [ 113.203489][ T26] audit: type=1326 audit(1781795874.285:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=4933 comm="syz.1.151" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7faabb99ce59 code=0x0 [ 113.363725][ T4938] loop4: detected capacity change from 0 to 4096 [ 113.394690][ T4938] ntfs3: loop4: Different NTFS' sector size (1024) and media sector size (512) [ 113.538064][ T4938] ntfs3: loop4: Mark volume as dirty due to NTFS errors [ 113.630956][ T7] usb 1-1: new full-speed USB device number 5 using dummy_hcd [ 113.847584][ T7] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 113.868072][ T7] usb 1-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 113.890116][ T7] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 113.920575][ T7] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 113.950663][ T7] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 113.959037][ T7] usb 1-1: Product: syz [ 113.963823][ T7] usb 1-1: Manufacturer: syz [ 113.968471][ T7] usb 1-1: SerialNumber: syz [ 113.984598][ T7] usb 1-1: config 0 descriptor?? [ 113.999160][ T7] radio-si470x 1-1:0.0: could not find interrupt in endpoint [ 114.012755][ T7] radio-si470x: probe of 1-1:0.0 failed with error -5 [ 114.020964][ T7] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 114.214349][ T4339] usb 1-1: USB disconnect, device number 5 [ 114.708171][ T4974] loop3: detected capacity change from 0 to 64 [ 114.841953][ T26] audit: type=1800 audit(1781795875.915:8): pid=4974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.167" name="file1" dev="loop3" ino=23 res=0 errno=0 [ 115.340162][ T4339] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 115.386181][ T4991] loop2: detected capacity change from 0 to 512 [ 115.421027][ T4991] EXT4-fs (loop2): encrypted files will use data=ordered instead of data journaling mode [ 115.460280][ T4991] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c118, mo2=0002] [ 115.499096][ T4991] System zones: 1-12 [ 115.506143][ T4991] EXT4-fs error (device loop2): ext4_orphan_get:1431: comm syz.2.175: bad orphan inode 131072 [ 115.546749][ T4991] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: none. [ 115.557167][ T4339] usb 1-1: Using ep0 maxpacket: 32 [ 115.575260][ T4339] usb 1-1: config 0 has an invalid interface number: 184 but max is 0 [ 115.607276][ T4339] usb 1-1: config 0 has no interface number 0 [ 115.634344][ T4339] usb 1-1: config 0 interface 184 has no altsetting 0 [ 115.674254][ T4339] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 115.704048][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 115.730402][ T4339] usb 1-1: Product: syz [ 115.734798][ T4339] usb 1-1: Manufacturer: syz [ 115.739451][ T4339] usb 1-1: SerialNumber: syz [ 115.758002][ T4339] usb 1-1: config 0 descriptor?? [ 115.782112][ T4339] smsc75xx v1.0.0 [ 115.800700][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 116.288865][ T5015] netlink: 80 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.300189][ T127] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 116.309246][ T5015] netlink: 80 bytes leftover after parsing attributes in process `syz.1.185'. [ 116.395951][ T4339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 116.417247][ T4339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 116.498671][ T127] usb 4-1: config 0 has no interfaces? [ 116.504362][ T127] usb 4-1: New USB device found, idVendor=0b05, idProduct=17e0, bcdDevice= 0.00 [ 116.536048][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 116.580559][ T127] usb 4-1: config 0 descriptor?? [ 116.655037][ T5010] loop2: detected capacity change from 0 to 32768 [ 116.733316][ T5010] XFS (loop2): Mounting V5 Filesystem [ 116.811493][ T5010] XFS (loop2): Ending clean mount [ 117.021681][ T127] usb 4-1: USB disconnect, device number 3 [ 117.230345][ T4276] XFS (loop2): Unmounting Filesystem [ 117.239685][ T4339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 117.258135][ T4339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 117.268042][ T4339] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 117.284186][ T4339] smsc75xx: probe of 1-1:0.184 failed with error -71 [ 117.297440][ T4339] usb 1-1: USB disconnect, device number 6 [ 117.440139][ T22] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 117.631908][ T22] usb 5-1: config 0 has no interfaces? [ 117.637543][ T22] usb 5-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 117.667407][ T22] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 117.695209][ T22] usb 5-1: config 0 descriptor?? [ 117.948872][ T4320] usb 5-1: USB disconnect, device number 6 [ 118.884611][ T5071] loop4: detected capacity change from 0 to 4096 [ 118.987170][ T5071] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 119.121805][ T5071] EXT4-fs error (device loop4): ext4_read_inode_bitmap:140: comm syz.4.203: Invalid inode bitmap blk 8300641293951616947 in block_group 0 [ 119.214311][ T5057] loop3: detected capacity change from 0 to 32768 [ 119.252059][ T5057] gfs2: Bad value for 'quota' [ 119.380995][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 119.391566][ T4278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 14354974002772888955 in block_group 0 [ 119.459716][ T4278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 119.492230][ T4278] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #3: comm syz-executor: mark_inode_dirty error [ 119.542067][ T4278] EXT4-fs error (device loop4): __ext4_get_inode_loc:4520: comm syz-executor: Invalid inode table block 14354974002772888955 in block_group 0 [ 119.566653][ T5077] netlink: 'syz.0.205': attribute type 39 has an invalid length. [ 119.587895][ T4278] EXT4-fs error (device loop4) in ext4_reserve_inode_write:5952: Corrupt filesystem [ 119.630358][ T4278] EXT4-fs error (device loop4): ext4_quota_off:7147: inode #4: comm syz-executor: mark_inode_dirty error [ 120.249607][ T5090] Zero length message leads to an empty skb [ 120.511103][ T5081] loop4: detected capacity change from 0 to 32768 [ 120.563898][ T5081] XFS (loop4): Mounting V5 Filesystem [ 120.610400][ T5081] XFS (loop4): Ending clean mount [ 121.056717][ T5081] syz.4.206 (5081) used greatest stack depth: 20656 bytes left [ 121.075996][ T4278] XFS (loop4): Unmounting Filesystem [ 121.310235][ T4339] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 121.499384][ T5120] loop3: detected capacity change from 0 to 64 [ 121.522642][ T4339] usb 1-1: unable to get BOS descriptor or descriptor too short [ 121.544713][ T4339] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 121.576483][ T4339] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 121.601743][ T4339] usb 1-1: too many endpoints for config 1 interface 1 altsetting 76: 188, using maximum allowed: 30 [ 121.633936][ T4339] usb 1-1: config 1 interface 1 altsetting 76 has 0 endpoint descriptors, different from the interface descriptor's value: 188 [ 121.666122][ T4339] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 121.680109][ T4320] usb 3-1: new full-speed USB device number 2 using dummy_hcd [ 121.697828][ T4339] usb 1-1: config 1 interface 1 has no altsetting 0 [ 121.723401][ T4339] usb 1-1: string descriptor 0 read error: -22 [ 121.750336][ T4339] usb 1-1: New USB device found, idVendor=21b4, idProduct=0081, bcdDevice= 0.40 [ 121.759551][ T4339] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 121.878074][ T4320] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 121.896306][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 121.926977][ T4320] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 121.953929][ T4320] usb 3-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 121.979358][ T5126] set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 121.979432][ T4320] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 122.031583][ T4320] usb 3-1: Product: syz [ 122.035835][ T4320] usb 3-1: Manufacturer: syz [ 122.056323][ T4320] usb 3-1: SerialNumber: syz [ 122.071699][ T4320] usb 3-1: config 0 descriptor?? [ 122.102049][ T4320] radio-si470x 3-1:0.0: could not find interrupt in endpoint [ 122.116621][ T4320] radio-si470x: probe of 3-1:0.0 failed with error -5 [ 122.130982][ T4320] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 122.157647][ T4288] Bluetooth: hci0: Unknown advertising packet type: 0x11 [ 122.157750][ T4288] Bluetooth: hci0: Unknown advertising packet type: 0x17 [ 122.331248][ T7] usb 3-1: USB disconnect, device number 2 [ 122.630110][ T4320] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 122.654715][ T5148] loop4: detected capacity change from 0 to 128 [ 122.757032][ T5148] syz.4.233: attempt to access beyond end of device [ 122.757032][ T5148] loop4: rw=2049, sector=145, nr_sectors = 896 limit=128 [ 122.831321][ T4320] usb 4-1: Using ep0 maxpacket: 8 [ 122.847126][ T4320] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 122.868564][ T4320] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 122.877233][ T5150] overlayfs: failed to clone upperpath [ 122.879113][ T4320] usb 4-1: Product: syz [ 122.893135][ T4320] usb 4-1: Manufacturer: syz [ 122.897796][ T4320] usb 4-1: SerialNumber: syz [ 122.909305][ T4320] usb 4-1: config 0 descriptor?? [ 122.914112][ T4339] usb 1-1: 2:0: failed to get current value for ch 1 (-71) [ 122.944667][ T4339] usb 1-1: Warning! Unlikely big volume range (=25831), cval->res is probably wrong. [ 122.964712][ T4339] usb 1-1: [2] FU [Speaker Playback Volume] ch = 1, val = -25831/0/1 [ 123.051823][ T4339] usb 1-1: USB disconnect, device number 7 [ 123.135311][ T4320] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 123.371180][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 124.341253][ T5173] Invalid argument reading file caps for ./file0 [ 124.431567][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028bea000: rx timeout, send abort [ 124.527179][ T5177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.243'. [ 124.581460][ T4320] dvb_usb_rtl28xxu: probe of 4-1:0.0 failed with error -71 [ 124.612158][ T4320] usb 4-1: USB disconnect, device number 4 [ 124.931654][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028be9000: rx timeout, send abort [ 124.950313][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028bea000: abort rx timeout. Force session deactivation [ 125.019747][ T5193] loop0: detected capacity change from 0 to 512 [ 125.089049][ T5193] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 125.110259][ T5193] ext4 filesystem being mounted at /40/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 125.372827][ T4279] EXT4-fs (loop0): unmounting filesystem. [ 125.440460][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028be8800: rx timeout, send abort [ 125.449374][ C1] vcan0: j1939_tp_rxtimer: 0xffff888028be9000: abort rx timeout. Force session deactivation [ 125.469735][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888028be8800: 0x3f002: (3) A timeout occurred and this is the connection abort to close the session. [ 125.880298][ T4339] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 125.939591][ T5224] IPv6: ADDRCONF(NETDEV_CHANGE): gre1: link becomes ready [ 126.092206][ T4339] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 126.134672][ T4339] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 126.176631][ T4339] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 126.199421][ T4339] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 126.225943][ T4339] usb 3-1: SerialNumber: syz [ 126.308285][ T5234] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 126.337996][ T5234] device batadv_slave_1 entered promiscuous mode [ 126.484583][ T4339] usb 3-1: 0:2 : does not exist [ 126.575212][ T4339] usb 3-1: USB disconnect, device number 3 [ 126.639120][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 127.486751][ T5250] loop0: detected capacity change from 0 to 40427 [ 127.564372][ T5250] F2FS-fs (loop0): Invalid log_blocksize (268), supports only 12 [ 127.612763][ T5250] F2FS-fs (loop0): Can't find valid F2FS filesystem in 1th superblock [ 127.657820][ T5272] loop2: detected capacity change from 0 to 512 [ 127.666052][ T5250] F2FS-fs (loop0): invalid crc value [ 127.742644][ T5250] F2FS-fs (loop0): Found nat_bits in checkpoint [ 127.964675][ T5250] F2FS-fs (loop0): Try to recover 1th superblock, ret: 0 [ 127.976203][ T5250] F2FS-fs (loop0): Mounted with checkpoint version = 48b305e5 [ 128.029152][ T5272] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.278: corrupted inode contents [ 128.117548][ T5272] EXT4-fs error (device loop2): ext4_dirty_inode:6156: inode #16: comm syz.2.278: mark_inode_dirty error [ 128.177518][ T5272] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.278: corrupted inode contents [ 128.201969][ T26] audit: type=1800 audit(1781795889.285:9): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.270" name="bus" dev="loop0" ino=10 res=0 errno=0 [ 128.248310][ T5272] EXT4-fs error (device loop2): __ext4_ext_dirty:202: inode #16: comm syz.2.278: mark_inode_dirty error [ 128.270138][ T127] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 128.306399][ T5272] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.278: corrupted inode contents [ 128.356453][ T26] audit: type=1804 audit(1781795889.435:10): pid=5250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.270" name="/newroot/43/bus/bus" dev="loop0" ino=10 res=1 errno=0 [ 128.378931][ T5250] syz.0.270: attempt to access beyond end of device [ 128.378931][ T5250] loop0: rw=10241, sector=45096, nr_sectors = 8 limit=40427 [ 128.400493][ T5272] EXT4-fs error (device loop2) in ext4_orphan_del:303: Corrupt filesystem [ 128.433364][ T5272] EXT4-fs error (device loop2): ext4_do_update_inode:5279: inode #16: comm syz.2.278: corrupted inode contents [ 128.476338][ T5250] syz.0.270: attempt to access beyond end of device [ 128.476338][ T5250] loop0: rw=2049, sector=45104, nr_sectors = 8 limit=40427 [ 128.503712][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 128.524204][ T5272] EXT4-fs error (device loop2): ext4_truncate:4325: inode #16: comm syz.2.278: mark_inode_dirty error [ 128.538770][ T127] usb 4-1: New USB device found, idVendor=0926, idProduct=3333, bcdDevice= 0.40 [ 128.554512][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 128.579202][ T5272] EXT4-fs error (device loop2) in ext4_process_orphan:345: Corrupt filesystem [ 128.595120][ T127] usb 4-1: config 0 descriptor?? [ 128.607588][ T5272] EXT4-fs (loop2): 1 truncate cleaned up [ 128.619092][ T5272] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 128.648166][ T46] Quota error (device loop2): do_check_range: Getting dqdh_entries 15 out of range 0-14 [ 128.658892][ T5272] ext4 filesystem being mounted at /45/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.678429][ T46] EXT4-fs error (device loop2): ext4_release_dquot:6877: comm kworker/u4:3: Failed to release dquot type 1 [ 128.832505][ T127] usbhid 4-1:0.0: can't add hid device: -71 [ 128.838574][ T127] usbhid: probe of 4-1:0.0 failed with error -71 [ 128.894235][ T127] usb 4-1: USB disconnect, device number 5 [ 128.976990][ T4276] EXT4-fs (loop2): unmounting filesystem. [ 129.113292][ T5297] loop4: detected capacity change from 0 to 512 [ 129.148924][ T5297] EXT4-fs (loop4): invalid first ino: 0 [ 129.398781][ T127] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 129.554822][ T5310] loop4: detected capacity change from 0 to 512 [ 129.561951][ T5306] IPVS: rr: SCTP 172.20.20.187:0 - no destination available [ 129.581550][ T5310] EXT4-fs (loop4): encrypted files will use data=ordered instead of data journaling mode [ 129.607841][ T127] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.629688][ T127] usb 4-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.40 [ 129.649691][ T127] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.693381][ T127] usb 4-1: config 0 descriptor?? [ 129.700152][ T5310] EXT4-fs error (device loop4): ext4_iget_extra_inode:4763: inode #17: comm syz.4.288: corrupted in-inode xattr [ 129.775866][ T5310] EXT4-fs error (device loop4): ext4_orphan_get:1410: comm syz.4.288: couldn't read orphan inode 17 (err -117) [ 129.802290][ T5310] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 129.923209][ T5281] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 129.972702][ T5281] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 130.646162][ T127] aiptek 4-1:0.0: Aiptek using 400 ms programming speed [ 130.671887][ T127] input: Aiptek as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input6 [ 130.768367][ T5337] netlink: 8 bytes leftover after parsing attributes in process `syz.1.298'. [ 130.789459][ T4278] EXT4-fs (loop4): unmounting filesystem. [ 131.027196][ T127] usb 4-1: USB disconnect, device number 6 [ 131.033301][ C0] aiptek 4-1:0.0: aiptek_irq - usb_submit_urb failed with result -19 [ 131.080117][ T4286] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 131.196149][ T5335] loop0: detected capacity change from 0 to 32768 [ 131.210255][ T4320] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 131.225003][ T5335] BTRFS: device fsid e417788f-7a09-42b2-9266-8ddc5d5d35d2 devid 1 transid 8 /dev/loop0 scanned by syz.0.297 (5335) [ 131.242709][ T5347] overlayfs: failed to clone upperpath [ 131.256834][ T5335] BTRFS info (device loop0): first mount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 131.267582][ T5335] BTRFS info (device loop0): using xxhash64 (xxhash64-generic) checksum algorithm [ 131.277348][ T5335] BTRFS info (device loop0): force zlib compression, level 3 [ 131.286720][ T5335] BTRFS info (device loop0): force clearing of disk cache [ 131.294301][ T5335] BTRFS info (device loop0): setting nodatasum [ 131.301596][ T5335] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 131.303141][ T4286] usb 3-1: Using ep0 maxpacket: 32 [ 131.313752][ T5335] BTRFS info (device loop0): trying to use backup root at mount time [ 131.327251][ T5335] BTRFS info (device loop0): allowing degraded mounts [ 131.334693][ T5335] BTRFS info (device loop0): enabling disk space caching [ 131.343015][ T4286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.354110][ T5335] BTRFS info (device loop0): disk space caching is enabled [ 131.363186][ T4286] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.374191][ T4286] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 131.383639][ T4286] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.394174][ T4286] usb 3-1: config 0 descriptor?? [ 131.402690][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.405869][ T4286] hub 3-1:0.0: USB hub found [ 131.430960][ T4320] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.441834][ T4320] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 131.451249][ T4320] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 131.463179][ T4320] usb 5-1: config 0 descriptor?? [ 131.488661][ T5335] BTRFS info (device loop0): enabling ssd optimizations [ 131.508074][ T5335] BTRFS info (device loop0): rebuilding free space tree [ 131.530301][ T5335] BTRFS info (device loop0): disabling free space tree [ 131.537566][ T5335] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE (0x1) [ 131.548400][ T5335] BTRFS info (device loop0): clearing compat-ro feature flag for FREE_SPACE_TREE_VALID (0x2) [ 131.607858][ T4286] hub 3-1:0.0: 26 ports detected [ 131.618486][ T4286] hub 3-1:0.0: insufficient power available to use all downstream ports [ 131.665072][ T5335] BTRFS error (device loop0): balance: invalid convert data profile raid6 [ 131.811030][ T4279] BTRFS info (device loop0): last unmount of filesystem e417788f-7a09-42b2-9266-8ddc5d5d35d2 [ 131.823197][ T4286] hub 3-1:0.0: hub_hub_status failed (err = -71) [ 131.860046][ T4286] hub 3-1:0.0: config failed, can't get hub status (err -71) [ 131.888038][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 131.916444][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 131.926947][ T4286] usbhid 3-1:0.0: can't add hid device: -71 [ 131.939223][ T4286] usbhid: probe of 3-1:0.0 failed with error -71 [ 131.944775][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 131.982707][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 132.000423][ T4286] usb 3-1: USB disconnect, device number 4 [ 132.017453][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 132.040150][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 132.090769][ T4320] cp2112 0003:10C4:EA90.0002: unknown main item tag 0x0 [ 132.220694][ T4320] cp2112 0003:10C4:EA90.0002: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 132.336487][ T4320] cp2112 0003:10C4:EA90.0002: Part Number: 0x00 Device Version: 0x00 [ 132.855774][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.862798][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.876911][ T5341] cp2112 0003:10C4:EA90.0002: Error starting transaction: -38 [ 132.912288][ T4320] cp2112 0003:10C4:EA90.0002: error reading lock byte: -71 [ 132.952500][ T4320] usb 5-1: USB disconnect, device number 7 [ 133.216195][ T5390] fido_id[5390]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 133.620029][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 133.640026][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 133.650020][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 133.670031][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 133.680014][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 133.974123][ T5394] loop3: detected capacity change from 0 to 32768 [ 134.076719][ T5394] XFS (loop3): Mounting V5 Filesystem [ 134.144139][ T5394] XFS (loop3): Ending clean mount [ 134.392551][ T4277] XFS (loop3): Unmounting Filesystem [ 135.326802][ T5453] loop3: detected capacity change from 0 to 512 [ 135.348868][ T5453] EXT4-fs: inline encryption not supported [ 135.423618][ T5453] EXT4-fs error (device loop3): ext4_get_branch:178: inode #13: block 2: comm syz.3.325: invalid block [ 135.437565][ T4286] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 135.510639][ T5453] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.325: invalid indirect mapped block 10 (level 1) [ 135.524558][ T5453] EXT4-fs error (device loop3): ext4_free_branches:1030: inode #13: comm syz.3.325: invalid indirect mapped block 8 (level 1) [ 135.550969][ T5453] EXT4-fs (loop3): 1 truncate cleaned up [ 135.556700][ T5453] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 135.642091][ T4286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 135.660558][ T4286] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 135.680110][ T4286] usb 5-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.80 [ 135.690229][ T4286] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 135.725315][ T4286] usb 5-1: config 0 descriptor?? [ 135.776184][ T5464] loop2: detected capacity change from 0 to 8 [ 135.871734][ T5464] SQUASHFS error: Unable to read directory block [631:72] [ 135.888104][ T5380] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 135.896296][ T5464] SQUASHFS error: Unable to read directory block [631:72] [ 136.101802][ T5380] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 136.112571][ T5380] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 136.123636][ T5380] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 136.134228][ T5380] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 136.151929][ T5380] usb 4-1: SerialNumber: syz [ 136.158920][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.171832][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.180477][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.188910][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.196427][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.203567][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.212802][ T4286] cp2112 0003:10C4:EA90.0003: unknown main item tag 0x0 [ 136.236030][ T4286] cp2112 0003:10C4:EA90.0003: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.4-1/input0 [ 136.348334][ T4286] cp2112 0003:10C4:EA90.0003: Part Number: 0x00 Device Version: 0x00 [ 136.395036][ T5380] usb 4-1: 0:2 : does not exist [ 136.428071][ T5380] usb 4-1: USB disconnect, device number 7 [ 136.957696][ T4286] cp2112 0003:10C4:EA90.0003: error reading lock byte: -71 [ 136.962655][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 136.977663][ T4286] usb 5-1: USB disconnect, device number 8 [ 137.065564][ T4569] udevd[4569]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 137.262529][ T5481] fido_id[5481]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 137.406398][ T5485] fuse: root generation should be zero [ 138.208528][ T5515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.344'. [ 138.584295][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce48400: rx timeout, send abort [ 138.628342][ T5523] loop2: detected capacity change from 0 to 4096 [ 138.797891][ T26] audit: type=1800 audit(1781795899.875:11): pid=5523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.347" name="file1" dev="loop2" ino=33 res=0 errno=0 [ 139.052923][ T27] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 139.084400][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce49000: rx timeout, send abort [ 139.093094][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce48400: abort rx timeout. Force session deactivation [ 139.240299][ T27] usb 4-1: Using ep0 maxpacket: 8 [ 139.257409][ T27] usb 4-1: unable to get BOS descriptor or descriptor too short [ 139.281522][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 139.328387][ T27] usb 4-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 139.350124][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 128, changing to 7 [ 139.378943][ T27] usb 4-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 139.417507][ T27] usb 4-1: New USB device found, idVendor=17cc, idProduct=1011, bcdDevice= 0.40 [ 139.447503][ T27] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 139.467808][ T27] usb 4-1: Product: syz [ 139.472113][ T27] usb 4-1: Manufacturer: syz [ 139.476791][ T27] usb 4-1: SerialNumber: syz [ 139.585132][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce49800: rx timeout, send abort [ 139.594270][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce49000: abort rx timeout. Force session deactivation [ 139.746310][ T27] usb 4-1: unable to issue vendor read request (ret = -71) [ 139.764327][ T27] usb 4-1: unable to issue vendor read request (ret = -71) [ 139.781460][ T27] usb 4-1: unable to issue vendor read request (ret = -71) [ 139.799582][ T27] usb 4-1: unable to issue vendor read request (ret = -71) [ 139.870441][ T27] usb 4-1: USB disconnect, device number 8 [ 140.093641][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802ce49800: abort rx timeout. Force session deactivation [ 140.428681][ T5536] loop0: detected capacity change from 0 to 32768 [ 140.556543][ T5556] serio: Serial port ttyS3 [ 140.607947][ T5536] XFS (loop0): Mounting V5 Filesystem [ 140.794607][ T5536] XFS (loop0): Ending clean mount [ 140.860637][ T5536] XFS (loop0): Quotacheck needed: Please wait. [ 140.944896][ T5536] XFS (loop0): Quotacheck: Done. [ 141.213258][ T4279] XFS (loop0): Unmounting Filesystem [ 141.332015][ T4320] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 141.462509][ T5570] kvm: vcpu 2: requested lapic timer restore with starting count register 0x390=198462431 (396924862 ns) > initial count (148514 ns). Using initial count to start timer. [ 141.530183][ T4320] usb 5-1: Using ep0 maxpacket: 8 [ 141.562235][ T4320] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 141.582975][ T4320] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 141.641450][ T4320] usb 5-1: New USB device found, idVendor=0e41, idProduct=4249, bcdDevice= 0.40 [ 141.680179][ T4320] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 141.718736][ T4320] usb 5-1: Product: syz [ 141.728857][ T4320] usb 5-1: Manufacturer: syz [ 141.749139][ T4320] usb 5-1: SerialNumber: syz [ 141.818031][ T5562] loop3: detected capacity change from 0 to 40427 [ 141.863853][ T5562] F2FS-fs (loop3): Invalid log_blocksize (268), supports only 12 [ 141.893706][ T5562] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 141.924603][ T5562] F2FS-fs (loop3): invalid crc value [ 141.976598][ T5562] F2FS-fs (loop3): Found nat_bits in checkpoint [ 142.017925][ T4320] usb 5-1: unit 0 not found! [ 142.057284][ T4320] usb 5-1: USB disconnect, device number 9 [ 142.165158][ T5562] F2FS-fs (loop3): Try to recover 1th superblock, ret: 0 [ 142.186699][ T5562] F2FS-fs (loop3): Mounted with checkpoint version = 48b305e5 [ 142.204803][ T5380] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 142.295439][ T4369] udevd[4369]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 142.414679][ T5380] usb 1-1: Using ep0 maxpacket: 32 [ 142.426440][ T5380] usb 1-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 142.477663][ T5380] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.505411][ T5380] usb 1-1: config 0 descriptor?? [ 142.545341][ T5380] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 143.022496][ T5588] loop3: detected capacity change from 0 to 4096 [ 143.175958][ T5590] loop4: detected capacity change from 0 to 256 [ 143.221963][ T26] audit: type=1800 audit(1781795904.305:12): pid=5588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.363" name="file1" dev="loop3" ino=33 res=0 errno=0 [ 143.258123][ T5590] exfat: Unknown parameter 'ÿÿÐS”ºÌ  [ 143.258123][ T5590] ž­¨Sì°ÎBïxz:ºþžIµ)od&[&BF~™þ¸ðØ…ß7]1k:ÏË©õ€Œ ûXÉi£Í£Øßéä^+ü>¹b'ôôOtö@' [ 143.343259][ T5380] gspca_vc032x: reg_w err -71 [ 143.348026][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.373894][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.379263][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.410102][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.432821][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.451790][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.479306][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.509771][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.515431][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.530031][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.535535][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.546685][ T5584] loop2: detected capacity change from 0 to 32768 [ 143.553381][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.558897][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.570026][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.575377][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.605931][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.620281][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.630211][ T5380] gspca_vc032x: I2c Bus Busy Wait 00 [ 143.643548][ T5380] gspca_vc032x: Unknown sensor... [ 143.658912][ T5380] vc032x: probe of 1-1:0.0 failed with error -22 [ 143.691634][ T5380] usb 1-1: USB disconnect, device number 8 [ 144.292165][ T5607] input: syz0 as /devices/virtual/input/input7 [ 144.979026][ T5627] overlayfs: fs on './bus' does not support file handles, falling back to index=off,nfs_export=off. [ 144.995480][ T5624] loop3: detected capacity change from 0 to 512 [ 145.002239][ T5627] overlayfs: upperdir is in-use as upperdir/workdir of another mount, accessing files from both mounts will result in undefined behavior. [ 145.032000][ T5624] EXT4-fs (loop3): VFS: Can't find ext4 filesystem [ 145.054755][ T5621] loop4: detected capacity change from 0 to 4096 [ 145.582432][ T26] audit: type=1800 audit(1781795906.655:13): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.380" name="file1" dev="loop4" ino=34 res=0 errno=0 [ 145.640249][ T4286] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 145.862709][ T4286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 145.876111][ T4286] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 145.897373][ T4286] usb 4-1: New USB device found, idVendor=0a46, idProduct=9621, bcdDevice=4f.32 [ 145.912532][ T4286] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 145.925307][ T4286] usb 4-1: Product: syz [ 145.932965][ T4286] usb 4-1: Manufacturer: syz [ 145.941211][ T4286] usb 4-1: SerialNumber: syz [ 145.959091][ T4286] usb 4-1: config 0 descriptor?? [ 145.971902][ T5624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 145.996905][ T5624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.218982][ T5624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.241168][ T5624] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 146.561068][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880557aa800: rx timeout, send abort [ 146.569774][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880557aa800: 0x20000: (3) A timeout occurred and this is the connection abort to close the session. [ 146.644697][ T5646] loop0: detected capacity change from 0 to 32768 [ 146.667899][ T5646] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 8 /dev/loop0 scanned by syz.0.389 (5646) [ 146.695155][ T5646] BTRFS info (device loop0): first mount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 146.708074][ T5646] BTRFS info (device loop0): using crc32c (crc32c-intel) checksum algorithm [ 146.726202][ T5646] BTRFS info (device loop0): allowing degraded mounts [ 146.733406][ T5646] BTRFS info (device loop0): turning on flush-on-commit [ 146.740761][ T5646] BTRFS info (device loop0): max_inline at 0 [ 146.746810][ T5646] BTRFS info (device loop0): setting nodatasum [ 146.754799][ T5646] BTRFS info (device loop0): turning on sync discard [ 146.764821][ T5646] BTRFS warning (device loop0): 'usebackuproot' is deprecated, use 'rescue=usebackuproot' instead [ 146.778823][ T5646] BTRFS info (device loop0): trying to use backup root at mount time [ 146.792329][ T5646] BTRFS info (device loop0): using free space tree [ 146.825255][ T5646] BTRFS info (device loop0): enabling ssd optimizations [ 146.943233][ T26] audit: type=1800 audit(1781795908.025:14): pid=5669 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.389" name="file1" dev="loop0" ino=260 res=0 errno=0 [ 147.286855][ T4286] dm9601 4-1:0.0 (unnamed net_device) (uninitialized): MDIO read error: -71 [ 147.373465][ T4286] dm9601 4-1:0.0 eth1: register 'dm9601' at usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet, e6:2a:1b:e1:6d:df [ 147.409361][ T4279] BTRFS info (device loop0): last unmount of filesystem c9fe44da-de57-406a-8241-57ec7d4412cf [ 147.455782][ T4286] usb 4-1: USB disconnect, device number 9 [ 147.462775][ T4286] dm9601 4-1:0.0 eth1: unregister 'dm9601' usb-dummy_hcd.3-1, Davicom DM96xx USB 10/100 Ethernet [ 147.693624][ T4369] BTRFS: device fsid c9fe44da-de57-406a-8241-57ec7d4412cf devid 1 transid 11 /dev/loop0 scanned by udevd (4369) [ 148.164594][ T5688] [U] ÿŸ9€ [ 148.262913][ T5692] loop2: detected capacity change from 0 to 2364 [ 149.096961][ T5712] overlayfs: failed to clone upperpath [ 149.114392][ T5713] netlink: 20 bytes leftover after parsing attributes in process `syz.4.407'. [ 149.177628][ T5716] tipc: Started in network mode [ 149.189788][ T5716] tipc: Node identity 824fc2c7312f, cluster identity 4711 [ 149.206298][ T5716] tipc: Enabled bearer , priority 0 [ 149.349839][ T5716] device syzkaller0 entered promiscuous mode [ 149.364623][ T5716] tipc: Resetting bearer [ 149.420340][ T5715] tipc: Resetting bearer [ 149.612930][ T5731] overlayfs: failed to clone upperpath [ 150.114855][ T5744] netlink: 4 bytes leftover after parsing attributes in process `syz.2.418'. [ 152.746778][ T5765] overlayfs: failed to clone upperpath [ 152.813006][ T5715] tipc: Disabling bearer [ 152.889376][ T4286] tipc: Node number set to 3009462983 [ 153.214138][ T5778] fuse: Bad value for 'fd' [ 153.877576][ T5812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.456'. [ 153.896452][ T5808] loop3: detected capacity change from 0 to 1764 [ 154.843018][ T5841] netlink: 4 bytes leftover after parsing attributes in process `syz.1.459'. [ 155.126617][ T5845] 0x0000fffffffd-0x00010000fffd : "" [ 155.149739][ T5845] mtd: partition "" is out of reach -- disabled [ 155.191502][ T5845] ftl_cs: FTL header not found. [ 156.566772][ T5858] loop4: detected capacity change from 0 to 16 [ 156.677989][ T5858] erofs: (device loop4): mounted with root inode @ nid 36. [ 156.728181][ T5858] erofs: (device loop4): z_erofs_extent_lookback: bogus lookback distance @ nid 36 [ 156.795702][ T5858] erofs: (device loop4): z_erofs_lz4_decompress_mem: failed to decompress -19 in[52, 4044] out[1851] [ 156.835496][ T5858] erofs: (device loop4): z_erofs_read_folio: failed to read, err [-117] [ 156.858385][ T5861] loop0: detected capacity change from 0 to 4096 [ 157.089659][ T26] audit: type=1800 audit(1781795918.165:15): pid=5861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.466" name="file1" dev="loop0" ino=33 res=0 errno=0 [ 157.502027][ T5886] capability: warning: `syz.2.476' uses 32-bit capabilities (legacy support in use) [ 157.813635][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.928567][ T5891] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.000403][ T5900] overlayfs: failed to clone upperpath [ 158.206241][ T5913] overlayfs: failed to clone upperpath [ 158.310206][ T4286] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 158.513461][ T4286] usb 4-1: config 0 has no interfaces? [ 158.519215][ T4286] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 158.556436][ T4286] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 158.603787][ T4286] usb 4-1: config 0 descriptor?? [ 158.705421][ T5928] loop4: detected capacity change from 0 to 16 [ 158.745485][ T5928] erofs: (device loop4): mounted with root inode @ nid 36. [ 158.840463][ T5905] netlink: 'syz.3.484': attribute type 1 has an invalid length. [ 158.936326][ T5905] device bond0 entered promiscuous mode [ 158.946866][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.019739][ T5905] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.029630][ T5905] bond0: (slave vti0): The slave device specified does not support setting the MAC address [ 159.041042][ T5905] bond0: (slave vti0): Setting fail_over_mac to active for active-backup mode [ 159.059240][ T5905] bond0: (slave vti0): making interface the new active one [ 159.074740][ T5905] device vti0 entered promiscuous mode [ 159.096057][ T5905] bond0: (slave vti0): Enslaving as an active interface with an up link [ 159.148007][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 159.170881][ T5380] usb 4-1: USB disconnect, device number 10 [ 159.559784][ T5947] loop4: detected capacity change from 0 to 128 [ 159.592146][ T5947] FAT-fs (loop4): bogus number of reserved sectors [ 159.605658][ T5947] FAT-fs (loop4): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 159.615815][ T5947] FAT-fs (loop4): Can't find a valid FAT filesystem [ 160.247338][ T30] bond0: (slave vti0): Releasing backup interface [ 160.259683][ T30] device vti0 left promiscuous mode [ 160.282379][ T30] bond0: Destroying bond [ 161.168364][ T30] bond0 (unregistering): Released all slaves [ 162.024239][ T5980] loop4: detected capacity change from 0 to 40427 [ 162.068448][ T5980] F2FS-fs (loop4): invalid crc value [ 162.121817][ T5980] F2FS-fs (loop4): Found nat_bits in checkpoint [ 162.219873][ T6007] lo speed is unknown, defaulting to 1000 [ 162.226302][ T6007] lo speed is unknown, defaulting to 1000 [ 162.237712][ T6007] lo speed is unknown, defaulting to 1000 [ 162.248127][ T6007] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 162.260626][ T6007] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 162.289467][ T6007] lo speed is unknown, defaulting to 1000 [ 162.297381][ T6007] lo speed is unknown, defaulting to 1000 [ 162.304081][ T6007] lo speed is unknown, defaulting to 1000 [ 162.310800][ T6007] lo speed is unknown, defaulting to 1000 [ 162.317225][ T6007] lo speed is unknown, defaulting to 1000 [ 162.510363][ T5980] F2FS-fs (loop4): Mounted with checkpoint version = 48b305e5 [ 163.754300][ T5980] syz.4.508: attempt to access beyond end of device [ 163.754300][ T5980] loop4: rw=2049, sector=40960, nr_sectors = 16 limit=40427 [ 164.001418][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.052283][ T6032] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.307957][ T26] audit: type=1326 audit(1781795925.385:16): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6040 comm="syz.0.527" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa58759ce59 code=0x0 [ 164.553848][ T6052] netlink: 4 bytes leftover after parsing attributes in process `syz.4.530'. [ 165.145428][ T6070] loop3: detected capacity change from 0 to 512 [ 165.519842][ T6070] EXT4-fs (loop3): Test dummy encryption mode enabled [ 165.530210][ T6070] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 165.596849][ T6070] EXT4-fs error (device loop3): ext4_orphan_get:1431: comm syz.3.538: bad orphan inode 131083 [ 165.631311][ T6070] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: none. [ 166.147875][ T6070] fscrypt: AES-256-CTS-CBC using implementation "cts-cbc-aes-aesni" [ 166.283846][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 167.824345][ T6153] fuse: Bad value for 'fd' [ 167.962124][ T6157] fuse: Bad value for 'fd' [ 168.914437][ T6190] netlink: 4 bytes leftover after parsing attributes in process `syz.0.583'. [ 169.150465][ T6190] device hsr_slave_1 left promiscuous mode [ 169.489733][ T6215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 169.504893][ T6215] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.514402][ T6215] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.523242][ T6215] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.532471][ T6215] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 169.547607][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.1.593'. [ 170.375995][ T6237] tipc: Enabling of bearer rejected, failed to enable media [ 170.566187][ T6249] netlink: 64 bytes leftover after parsing attributes in process `syz.0.606'. [ 175.075065][ T6409] netlink: 64 bytes leftover after parsing attributes in process `syz.1.665'. [ 176.321217][ T4675] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 176.520225][ T4675] usb 4-1: Using ep0 maxpacket: 32 [ 176.528164][ T4675] usb 4-1: config 0 has an invalid interface number: 184 but max is 0 [ 176.557432][ T4675] usb 4-1: config 0 has no interface number 0 [ 176.570540][ T4675] usb 4-1: config 0 interface 184 has no altsetting 0 [ 176.590420][ T4675] usb 4-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 176.611214][ T4675] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 176.619304][ T4675] usb 4-1: Product: syz [ 176.634827][ T4675] usb 4-1: Manufacturer: syz [ 176.639636][ T4675] usb 4-1: SerialNumber: syz [ 176.651035][ T6479] overlayfs: failed to clone upperpath [ 176.680771][ T4675] usb 4-1: config 0 descriptor?? [ 176.713695][ T4675] smsc75xx v1.0.0 [ 177.296266][ T4675] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000040: -32 [ 177.323220][ T4675] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 177.513515][ T6509] netlink: 40 bytes leftover after parsing attributes in process `syz.2.706'. [ 177.968356][ T6533] netlink: 'syz.4.715': attribute type 1 has an invalid length. [ 178.065036][ T6533] 8021q: adding VLAN 0 to HW filter on device bond1 [ 178.179607][ T6537] bond1: (slave vlan2): making interface the new active one [ 178.234586][ T6537] bond1: (slave vlan2): Enslaving as an active interface with an up link [ 178.250282][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 178.352528][ T4675] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 178.385863][ T4675] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): Failed to write PMT_CTL: -71 [ 178.417996][ T4675] smsc75xx 4-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 178.447295][ T4675] smsc75xx: probe of 4-1:0.184 failed with error -71 [ 178.475886][ T4675] usb 4-1: USB disconnect, device number 11 [ 179.914508][ T6592] overlayfs: failed to clone upperpath [ 180.839500][ T6624] netlink: 60 bytes leftover after parsing attributes in process `syz.4.751'. [ 180.916297][ T6626] tipc: Enabling of bearer rejected, failed to enable media [ 181.902974][ T6664] overlayfs: failed to clone upperpath [ 185.777333][ T6708] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.785010][ T6708] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.745088][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.848384][ T6708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.573647][ T6708] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.588927][ T6708] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.598565][ T6708] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.622089][ T6708] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.000440][ T6708] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.009450][ T6708] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.018994][ T6708] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.028005][ T6708] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 188.070297][ T6768] netlink: 'syz.3.802': attribute type 1 has an invalid length. [ 188.136530][ T4288] Bluetooth: hci3: Malformed MSFT vendor event: 0x02 [ 188.214633][ T6768] 8021q: adding VLAN 0 to HW filter on device bond1 [ 188.271677][ T6769] bond1: (slave geneve2): making interface the new active one [ 188.303172][ T6769] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 188.341756][ T6769] syz.3.802 (6769) used greatest stack depth: 20624 bytes left [ 188.360278][ T6776] netlink: 'syz.4.805': attribute type 1 has an invalid length. [ 188.403638][ T6788] overlayfs: failed to clone upperpath [ 188.449596][ T6776] 8021q: adding VLAN 0 to HW filter on device bond2 [ 188.457828][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 188.561067][ T6785] bond2: (slave geneve2): making interface the new active one [ 188.598615][ T6785] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 188.687873][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 188.749453][ T6785] syz.4.805 (6785) used greatest stack depth: 19960 bytes left [ 189.562891][ T6825] netlink: 12 bytes leftover after parsing attributes in process `syz.1.820'. [ 189.771594][ T6830] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 189.829905][ T6830] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 189.992990][ T6825] device macvlan2 entered promiscuous mode [ 190.039314][ T6825] bond1: (slave macvlan2): Error -98 calling set_mac_address [ 191.075865][ T6868] netlink: 36 bytes leftover after parsing attributes in process `syz.3.833'. [ 191.456552][ T6878] netlink: 'syz.0.838': attribute type 3 has an invalid length. [ 191.466000][ T6878] netlink: 16 bytes leftover after parsing attributes in process `syz.0.838'. [ 191.730970][ T6886] tipc: Failed to remove unknown binding: 66,0,0/0:3479596523/3479596524 [ 191.795199][ T6882] netlink: 24 bytes leftover after parsing attributes in process `syz.0.840'. [ 192.731002][ T6915] netlink: 12 bytes leftover after parsing attributes in process `syz.4.851'. [ 194.294211][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.300882][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.468397][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 194.499583][ T6989] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.508801][ T6989] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.517980][ T6989] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.527072][ T6989] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 194.547238][ T6989] netlink: 4 bytes leftover after parsing attributes in process `syz.0.867'. [ 196.249143][ T7031] overlayfs: failed to clone upperpath [ 196.498398][ T7037] overlayfs: failed to clone upperpath [ 197.710910][ T7075] futex_wake_op: syz.1.894 tries to shift op by 144; fix this program [ 199.260400][ T7122] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.705037][ T7137] loop3: detected capacity change from 0 to 512 [ 199.737929][ T7137] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 199.752963][ T7137] ext4 filesystem being mounted at /143/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 200.529424][ T7171] capability: warning: `syz.4.932' uses deprecated v2 capabilities in a way that may be insecure [ 200.552895][ T7178] netlink: 4 bytes leftover after parsing attributes in process `syz.0.930'. [ 200.936005][ T4277] EXT4-fs (loop3): unmounting filesystem. [ 201.199896][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.475363][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.490312][ T4292] Bluetooth: hci2: command 0x0406 tx timeout [ 201.496448][ T4292] Bluetooth: hci0: command 0x0406 tx timeout [ 201.503103][ T4288] Bluetooth: hci3: command 0x0406 tx timeout [ 201.503134][ T4289] Bluetooth: hci4: command 0x0406 tx timeout [ 201.509151][ T4288] Bluetooth: hci1: command 0x0406 tx timeout [ 201.522672][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.553824][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.599715][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.640634][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.661465][ T7203] netlink: 12 bytes leftover after parsing attributes in process `syz.1.940'. [ 201.690864][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.715996][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.746387][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 201.766411][ T7188] kvm [7186]: vcpu0, guest rIP: 0x0 Unhandled WRMSR(0x1d9) = 0xd [ 202.434976][ T7235] netlink: 'syz.2.949': attribute type 1 has an invalid length. [ 202.620822][ T7235] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.691389][ T7240] bond1: (slave ip6gretap1): making interface the new active one [ 202.708405][ T7240] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 202.719149][ T5161] IPv6: ADDRCONF(NETDEV_CHANGE): bond1: link becomes ready [ 202.899740][ T7244] overlayfs: failed to clone upperpath [ 203.356007][ T7265] overlayfs: failed to clone upperpath [ 204.470091][ T4675] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 204.660067][ T4675] usb 4-1: Using ep0 maxpacket: 8 [ 204.677227][ T4675] usb 4-1: config index 0 descriptor too short (expected 301, got 45) [ 204.689083][ T4675] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 204.719758][ T4675] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 204.735655][ T4675] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 204.757712][ T4675] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 204.800033][ T4675] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 204.836402][ T4675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 205.082807][ T4675] usb 4-1: GET_CAPABILITIES returned 0 [ 205.088487][ T4675] usbtmc 4-1:16.0: can't read capabilities [ 205.367334][ T5373] usb 4-1: USB disconnect, device number 12 [ 205.864182][ T7319] overlayfs: failed to clone upperpath [ 206.578507][ T7322] loop3: detected capacity change from 0 to 32768 [ 206.604101][ T7322] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 206.993853][ T7303] BTRFS error: device /dev/loop3 already registered with a higher generation, found 8 expect 11 [ 207.750199][ T7351] input: syz1 as /devices/virtual/input/input8 [ 208.360439][ T7379] overlayfs: failed to clone upperpath [ 208.505527][ T2192] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 208.700216][ T2192] usb 4-1: Using ep0 maxpacket: 16 [ 208.707427][ T2192] usb 4-1: config 0 has no interfaces? [ 208.722631][ T2192] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 208.744117][ T2192] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.771351][ T2192] usb 4-1: Product: syz [ 208.786193][ T2192] usb 4-1: Manufacturer: syz [ 208.803264][ T2192] usb 4-1: SerialNumber: syz [ 208.824862][ T2192] usb 4-1: config 0 descriptor?? [ 209.360182][ T2192] usb 4-1: USB disconnect, device number 13 [ 211.450114][ T4631] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 211.795393][ T4631] usb 4-1: config 36 has an invalid descriptor of length 0, skipping remainder of the config [ 211.806443][ T4631] usb 4-1: config 36 has 0 interfaces, different from the descriptor's value: 1 [ 211.819010][ T4631] usb 4-1: New USB device found, idVendor=6993, idProduct=b001, bcdDevice=3d.29 [ 211.829097][ T4631] usb 4-1: New USB device strings: Mfr=244, Product=0, SerialNumber=16 [ 211.837736][ T4631] usb 4-1: Manufacturer: syz [ 211.842627][ T4631] usb 4-1: SerialNumber: syz [ 212.158880][ T7476] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 212.171345][ T7476] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 212.893248][ T4631] usb 4-1: USB disconnect, device number 14 [ 213.019424][ T7478] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1040'. [ 213.629331][ T7499] binder: 7497:7499 ioctl c0306201 200000001ac0 returned -14 [ 213.998125][ T7511] 9pnet: p9_errstr2errno: server reported unknown error 000000000000000000000100xffffffffffffffff [ 214.543818][ T7517] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1057'. [ 214.749435][ T7523] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1057'. [ 214.830034][ T7523] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1057'. [ 214.953647][ T7523] bond3: (slave veth3): Enslaving as an active interface with an up link [ 217.149999][ T0] NOHZ tick-stop error: local softirq work is pending, handler #02!!! [ 217.160002][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.169981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.179983][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.189981][ T0] NOHZ tick-stop error: local softirq work is pending, handler #82!!! [ 217.856328][ T7566] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1073'. [ 217.897943][ T7566] l2tp_ppp: sess 2/0: no socket in recv [ 218.040170][ T4675] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 218.240040][ T4675] usb 4-1: Using ep0 maxpacket: 8 [ 218.247110][ T4675] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 218.279330][ T4675] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 218.309277][ T4675] usb 4-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 218.330022][ T4675] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.358236][ T4675] usb 4-1: config 0 descriptor?? [ 219.120261][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.243500][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.639220][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.646947][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.655061][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.662391][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.669500][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.677868][ T4675] lenovo 0003:17EF:6047.0004: unknown main item tag 0x0 [ 219.689366][ T4675] lenovo 0003:17EF:6047.0004: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.3-1/input0 [ 220.339324][ T4264] usb 4-1: USB disconnect, device number 15 [ 221.847307][ T7627] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1095'. [ 223.429657][ T7647] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 224.100287][ T7674] Cannot find add_set index 0 as target [ 224.420616][ T7682] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1114'. [ 224.488231][ T7682] bridge1: port 1(veth3) entered blocking state [ 224.499452][ T7682] bridge1: port 1(veth3) entered disabled state [ 224.509771][ T7682] device veth3 entered promiscuous mode [ 224.526114][ T7682] bridge1: port 2(veth0_to_bond) entered blocking state [ 224.533510][ T7682] bridge1: port 2(veth0_to_bond) entered disabled state [ 224.555357][ T7682] device veth0_to_bond entered promiscuous mode [ 224.575558][ T7682] bridge1: port 2(veth0_to_bond) entered blocking state [ 224.582731][ T7682] bridge1: port 2(veth0_to_bond) entered forwarding state [ 225.162906][ T7705] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1123'. [ 226.174571][ T7705] bond1: (slave veth5): Enslaving as an active interface with an up link [ 226.467084][ T7721] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1128'. [ 226.641112][ T7725] bond2: (slave ip_vti0): The slave device specified does not support setting the MAC address [ 226.731917][ T7725] bond2: (slave ip_vti0): Error -95 calling set_mac_address [ 227.319806][ C0] sched: RT throttling activated [ 227.822543][ T7748] netlink: 'syz.1.1133': attribute type 49 has an invalid length. [ 228.048483][ T7748] device ip6gretap0 entered promiscuous mode [ 228.108993][ T7761] tipc: Enabling of bearer rejected, failed to enable media [ 228.487204][ T7775] tipc: Enabling of bearer rejected, failed to enable media [ 230.389384][ T7813] overlayfs: failed to clone upperpath [ 233.890901][ T26] audit: type=1326 audit(1781795994.975:17): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7fc00000 [ 233.995671][ T26] audit: type=1326 audit(1781795994.975:18): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=7847 comm="syz.2.1155" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7f0a51f9ce59 code=0x7fc00000 [ 236.063653][ T7883] sch_tbf: burst 1023 is lower than device lo mtu (65550) ! [ 239.156353][ T7915] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 239.423205][ T7926] overlayfs: failed to clone upperpath [ 239.606013][ T7934] tipc: Started in network mode [ 239.617973][ T7934] tipc: Node identity 4, cluster identity 4711 [ 239.629263][ T7934] tipc: Node number set to 4 [ 239.715500][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 239.726932][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'. [ 239.746800][ T7938] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.755967][ T7938] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.764858][ T7938] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.773952][ T7938] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 239.866465][ T7938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1187'. [ 239.878801][ T7938] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1187'. [ 242.633412][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 242.708304][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 242.906774][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 242.990310][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 243.070857][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 243.131301][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 243.223363][ T7981] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 243.446846][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1205'. [ 245.555819][ T8052] tipc: Enabling of bearer rejected, failed to enable media [ 246.627659][ T8073] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1229'. [ 249.231588][ T8125] netlink: 'syz.0.1241': attribute type 1 has an invalid length. [ 249.306368][ T8134] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1239'. [ 249.371905][ T8125] 8021q: adding VLAN 0 to HW filter on device bond2 [ 249.432012][ T8133] bond2: (slave gretap1): making interface the new active one [ 249.446561][ T8133] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 249.455969][ T8132] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1242'. [ 249.551248][ T5162] IPv6: ADDRCONF(NETDEV_CHANGE): bond2: link becomes ready [ 249.628005][ T8137] bond2: (slave veth7): Enslaving as an active interface with a down link [ 249.757831][ T8140] device bond2 entered promiscuous mode [ 249.834622][ T8125] device veth0_virt_wifi entered promiscuous mode [ 249.873644][ T8125] bond2: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 250.844901][ T8161] bridge0: port 3(macvlan2) entered blocking state [ 250.879111][ T8161] bridge0: port 3(macvlan2) entered disabled state [ 250.920154][ T8161] device macvlan2 entered promiscuous mode [ 250.935830][ T8161] bridge0: port 3(macvlan2) entered blocking state [ 250.942603][ T8161] bridge0: port 3(macvlan2) entered forwarding state [ 251.898029][ T8203] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1258'. [ 256.072056][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.078654][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.345097][ T8244] "syz.4.1269" (8244) uses obsolete ecb(arc4) skcipher [ 257.474774][ T8254] netlink: 'syz.2.1272': attribute type 1 has an invalid length. [ 257.617859][ T8254] 8021q: adding VLAN 0 to HW filter on device bond2 [ 257.684449][ T8263] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1271'. [ 257.738480][ T8259] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1272'. [ 257.796608][ T8259] device bond2 entered promiscuous mode [ 257.846296][ T8268] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 257.872975][ T8268] CIFS mount error: No usable UNC path provided in device string! [ 257.872975][ T8268] [ 257.883315][ T8268] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 258.032134][ T8264] bond2: (slave dummy0): making interface the new active one [ 258.081808][ T8264] device dummy0 entered promiscuous mode [ 258.119623][ T8264] bond2: (slave dummy0): Enslaving as an active interface with an up link [ 259.452146][ T8300] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1282'. [ 262.987647][ T8348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 262.996262][ T8348] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 263.664487][ T8353] netlink: 'syz.4.1299': attribute type 1 has an invalid length. [ 263.865688][ T8353] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.105487][ T8354] bond4: (slave gretap1): making interface the new active one [ 264.185605][ T8354] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 264.433657][ T8377] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1301'. [ 265.192527][ T8354] syz.4.1299 (8354) used greatest stack depth: 19376 bytes left [ 265.239643][ T8358] bond4: (slave veth5): Enslaving as an active interface with a down link [ 265.269122][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): bond4: link becomes ready [ 265.299478][ T8365] netlink: 'syz.1.1311': attribute type 12 has an invalid length. [ 265.321675][ T8353] device veth0_virt_wifi entered promiscuous mode [ 265.357223][ T8353] bond4: (slave veth0_virt_wifi): Enslaving as an active interface with an up link [ 265.435964][ T8383] tipc: Enabling of bearer rejected, failed to enable media [ 265.862622][ T8396] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1308'. [ 267.461903][ T8426] netlink: 'syz.1.1316': attribute type 1 has an invalid length. [ 267.640519][ T8437] overlayfs: failed to clone lowerpath [ 267.664804][ T8426] 8021q: adding VLAN 0 to HW filter on device bond3 [ 267.691588][ T8429] netlink: 'syz.2.1319': attribute type 12 has an invalid length. [ 267.816522][ T8432] bond3: (slave gretap1): making interface the new active one [ 267.927126][ T8432] bond3: (slave gretap1): Enslaving as an active interface with an up link [ 268.076916][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): bond3: link becomes ready [ 268.142251][ T8435] bond3: (slave veth3): Enslaving as an active interface with a down link [ 268.196660][ T8426] device veth0_virt_wifi entered promiscuous mode [ 268.248444][ T8426] bond3: (slave veth0_virt_wifi): Enslaving as an active interface with a down link [ 270.880976][ T8476] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1334'. [ 279.293737][ T8579] xt_bpf: check failed: parse error [ 279.362370][ T8582] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1359'. [ 279.859256][ T8582] 8021q: adding VLAN 0 to HW filter on device bond3 [ 279.960182][ T8583] device gretap2 entered promiscuous mode [ 280.178903][ T8585] device macvlan2 entered promiscuous mode [ 280.230303][ T8585] device bond3 entered promiscuous mode [ 280.236439][ T8585] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 280.249461][ T8585] device bond3 left promiscuous mode [ 281.502860][ T8611] tipc: Enabling of bearer rejected, failed to enable media [ 292.032015][ T8716] MPTCP: kernel_bind error, err=-98 [ 292.602507][ T8725] fuse: Bad value for 'fd' [ 301.013226][ T8829] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1422'. [ 311.680865][ T26] audit: type=1326 audit(1781796072.440:19): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8931 comm="syz.1.1451" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7faabb99ce59 code=0x0 [ 313.393522][ T8969] tipc: Enabling of bearer rejected, failed to enable media [ 316.517074][ T8998] overlayfs: failed to clone lowerpath [ 317.185869][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453222][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.822533][ T9049] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 323.874728][ T9066] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1485'. [ 324.121974][ T9066] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 324.131802][ T9066] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 324.141438][ T9066] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 324.232298][ T26] audit: type=1800 audit(1781796085.211:20): pid=9066 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.1485" name="regulatory.db" dev="sda1" ino=448 res=0 errno=0 [ 332.356180][ T9161] tipc: Started in network mode [ 332.361147][ T9161] tipc: Node identity 4, cluster identity 4711 [ 332.374271][ T9161] tipc: Node number set to 4 [ 333.065051][ T9171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1517'. [ 342.633921][ T9257] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1549'. [ 343.737102][ T9262] overlayfs: failed to clone lowerpath [ 355.872240][ T9350] device bridge0 entered promiscuous mode [ 374.412114][ T9550] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 374.641242][ T9555] netlink: 'syz.4.1615': attribute type 4 has an invalid length. [ 377.427460][ T9585] tipc: New replicast peer: 255.255.255.255 [ 377.447312][ T9585] tipc: Enabled bearer , priority 10 [ 378.675433][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.682240][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.796782][ T9600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1627'. [ 389.952441][ T9681] xt_ecn: cannot match TCP bits for non-tcp packets [ 390.483736][ T9687] virtio-fs: tag not found [ 391.307804][ T26] audit: type=1326 audit(1781796151.574:21): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58759ce59 code=0x7ffc0000 [ 391.440965][ T26] audit: type=1326 audit(1781796151.574:22): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58759ce59 code=0x7ffc0000 [ 391.515732][ T26] audit: type=1326 audit(1781796151.594:23): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7fa58759ce59 code=0x7ffc0000 [ 392.338572][ T26] audit: type=1326 audit(1781796151.594:24): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58759ce59 code=0x7ffc0000 [ 393.237851][ T9705] syz.2.1642 (9705) used greatest stack depth: 16888 bytes left [ 393.254688][ T26] audit: type=1326 audit(1781796151.594:25): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9685 comm="syz.0.1652" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa58759ce59 code=0x7ffc0000 [ 394.914428][ T9728] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 397.045457][ T9752] tipc: Enabling of bearer rejected, failed to enable media [ 398.935102][ T9774] overlayfs: missing 'lowerdir' [ 407.185657][ T9835] netlink: 'syz.2.1679': attribute type 4 has an invalid length. [ 408.201287][ T9839] netlink: 'syz.2.1679': attribute type 4 has an invalid length. [ 412.066531][ T9874] virtio-fs: tag not found [ 412.869375][ T26] audit: type=1326 audit(1781796173.165:26): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.2.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 413.072231][ T26] audit: type=1326 audit(1781796173.165:27): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.2.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 413.177793][ T26] audit: type=1326 audit(1781796173.265:28): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.2.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=132 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 413.378023][ T26] audit: type=1326 audit(1781796173.265:29): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.2.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 413.841239][ T26] audit: type=1326 audit(1781796173.265:30): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=9873 comm="syz.2.1701" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 420.487227][ T9949] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1715'. [ 430.787048][ T4289] Bluetooth: hci4: unexpected event 0x2f length: 509 > 260 [ 432.246899][T10037] xt_connbytes: Forcing CT accounting to be enabled [ 432.261339][T10037] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 432.273882][T10037] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 433.163098][T10039] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1736'. [ 435.219372][T10057] overlayfs: missing 'lowerdir' [ 440.539117][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.548050][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 446.831303][ T4293] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 446.842866][ T4293] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 446.852487][ T4293] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 446.881357][ T4293] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 446.897456][ T4293] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 446.905083][ T4293] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 449.184872][ T4289] Bluetooth: hci5: command 0x0409 tx timeout [ 449.457744][T10139] chnl_net:caif_netlink_parms(): no params data found [ 449.509427][T10182] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1766'. [ 449.862304][T10139] bridge0: port 1(bridge_slave_0) entered blocking state [ 449.938732][T10139] bridge0: port 1(bridge_slave_0) entered disabled state [ 449.999153][T10139] device bridge_slave_0 entered promiscuous mode [ 450.069103][T10139] bridge0: port 2(bridge_slave_1) entered blocking state [ 450.105840][T10139] bridge0: port 2(bridge_slave_1) entered disabled state [ 450.615576][T10139] device bridge_slave_1 entered promiscuous mode [ 450.653104][T10139] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 450.665192][T10139] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 450.799709][T10139] team0: Port device team_slave_0 added [ 450.811798][T10139] team0: Port device team_slave_1 added [ 450.919218][T10197] IPVS: set_ctl: invalid protocol: 2 0.0.0.0:0 [ 451.092066][T10139] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 451.201933][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 451.289336][ T4289] Bluetooth: hci5: command 0x041b tx timeout [ 451.591647][T10139] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 451.612699][T10139] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 451.621201][T10139] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 452.441310][T10139] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 452.907587][T10139] device hsr_slave_0 entered promiscuous mode [ 452.914775][T10139] device hsr_slave_1 entered promiscuous mode [ 453.080585][T10139] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.088322][T10139] Cannot create hsr debugfs directory [ 453.448036][ T4293] Bluetooth: hci5: command 0x040f tx timeout [ 455.181714][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.190400][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.206977][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.279006][T10231] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 455.609295][ T4289] Bluetooth: hci5: command 0x0419 tx timeout [ 455.615941][ T26] audit: type=1326 audit(1781796221.059:31): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 455.975668][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.983197][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.990919][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 455.998523][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.006100][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.013515][T10231] virt_wifi0 speed is unknown, defaulting to 1000 [ 456.916729][ T26] audit: type=1326 audit(1781796221.059:32): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 457.076796][ T26] audit: type=1326 audit(1781796221.059:33): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=133 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 457.101601][ T26] audit: type=1326 audit(1781796221.059:34): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 457.709224][ T26] audit: type=1326 audit(1781796221.059:35): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 457.879477][ T26] audit: type=1326 audit(1781796221.059:36): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=235 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 457.958233][T10139] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 458.100040][ T26] audit: type=1326 audit(1781796221.059:37): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 458.160320][ T26] audit: type=1326 audit(1781796221.059:38): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 459.140090][T10139] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 459.199872][T10139] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 459.237795][ T26] audit: type=1326 audit(1781796221.059:39): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=20 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 459.272569][ T26] audit: type=1326 audit(1781796221.059:40): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10226 comm="syz.2.1775" exe="/root/ci2-linux-6-1-kasan/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f0a51f9ce59 code=0x7ffc0000 [ 460.022429][T10139] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 460.391611][T10139] 8021q: adding VLAN 0 to HW filter on device bond0 [ 460.444223][T10279] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1786'. [ 460.470234][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 460.479109][ T9507] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 460.502347][T10139] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.530232][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 460.547728][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 460.559252][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.566500][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.639077][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 460.670308][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 460.721251][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 460.762758][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.769970][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.829168][ T11] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 462.819521][T10139] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 462.902608][T10139] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 463.097803][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 463.109606][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 463.122232][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 463.151681][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 463.163601][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 463.202197][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 463.245247][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 463.288186][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 463.322096][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 463.370249][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 463.429080][ T8293] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 463.498233][T10297] tipc: Enabling of bearer rejected, failed to enable media [ 466.052341][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 466.068804][ T4330] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 466.091532][T10139] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.644416][T10362] rdma_op ffff8880750e01f0 conn xmit_rdma 0000000000000000 [ 467.988885][T10358] ceph: No mds server is up or the cluster is laggy [ 468.004152][ T4630] libceph: connect (1)[c::]:6789 error -101 [ 468.011451][ T4630] libceph: mon0 (1)[c::]:6789 connect error [ 468.439676][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 468.469514][ T5160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 468.564196][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 468.732612][T10381] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1804'. [ 469.766944][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 469.836951][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 469.895511][ T4606] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 470.114240][T10139] device veth0_vlan entered promiscuous mode [ 470.133736][T10139] device veth1_vlan entered promiscuous mode [ 470.407581][T10393] overlayfs: failed to clone lowerpath [ 471.011449][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 471.092999][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 471.298686][T10139] device veth0_macvtap entered promiscuous mode [ 471.371887][T10139] device veth1_macvtap entered promiscuous mode [ 471.655041][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.741169][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 471.823933][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 471.987978][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.016133][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 472.075972][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.105542][T10139] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.144256][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 472.193756][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 472.236318][ T4605] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 472.301744][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.322444][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.336933][T10139] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 472.364518][T10139] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 472.578423][T10139] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.596384][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 472.667234][ T30] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 473.053952][T10139] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.208068][T10139] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.288576][T10139] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.344931][T10139] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 474.339449][ T9310] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.382540][ T9310] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.426415][T10422] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 474.522854][ T9507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.531529][ T9507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.730577][T10444] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 477.173559][T10453] overlayfs: failed to clone lowerpath [ 480.556638][T10473] virt_wifi0 speed is unknown, defaulting to 1000 [ 481.674518][T10471] virt_wifi0 speed is unknown, defaulting to 1000 [ 482.132895][T10482] tipc: Started in network mode [ 482.488133][T10482] tipc: Node identity c66163040569, cluster identity 4711 [ 483.802213][T10482] tipc: Enabled bearer , priority 0 [ 483.825301][T10487] device syzkaller0 entered promiscuous mode [ 483.968038][T10491] sch_tbf: burst 255 is lower than device syzkaller0 mtu (1514) ! [ 484.338630][T10482] tipc: Resetting bearer [ 484.360786][T10496] ceph: No mds server is up or the cluster is laggy [ 484.389645][ T2192] libceph: connect (1)[c::]:6789 error -22 [ 484.395654][ T2192] libceph: mon0 (1)[c::]:6789 connect error [ 485.428861][ T2192] libceph: connect (1)[c::]:6789 error -22 [ 485.450990][ T2192] libceph: mon0 (1)[c::]:6789 connect error [ 485.611120][T10481] tipc: Resetting bearer [ 485.696405][T10507] xt_connbytes: Forcing CT accounting to be enabled [ 485.703189][T10507] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 485.743914][T10481] tipc: Disabling bearer [ 485.758919][ T4321] tipc: Node number set to 3272106756 [ 487.051836][T10519] netlink: 96 bytes leftover after parsing attributes in process `syz.5.1833'. [ 490.568551][T10522] virt_wifi0 speed is unknown, defaulting to 1000 [ 491.992739][T10546] ipt_CLUSTERIP: ipt_CLUSTERIP is deprecated and it will removed soon, use xt_cluster instead [ 492.003637][T10546] xt_CT: You must specify a L4 protocol and not use inversions on it [ 493.372729][T10558] xt_connbytes: Forcing CT accounting to be enabled [ 493.388434][T10558] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 495.674743][T10586] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 499.006738][T10590] loop5: detected capacity change from 0 to 128 [ 499.072241][T10590] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 499.142478][T10590] ext4 filesystem being mounted at /8/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 499.481036][T10600] tipc: Enabling of bearer rejected, failed to enable media [ 500.976049][T10139] EXT4-fs (loop5): unmounting filesystem. [ 501.693159][T10622] xt_connbytes: Forcing CT accounting to be enabled [ 501.700154][T10622] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 502.201789][ T1279] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.208210][ T1279] ieee802154 phy1 wpan1: encryption failed: -22 [ 504.615719][T10631] loop5: detected capacity change from 0 to 128 [ 504.664259][T10631] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: none. [ 504.702638][T10631] ext4 filesystem being mounted at /10/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 506.023936][T10139] EXT4-fs (loop5): unmounting filesystem. [ 508.044317][T10663] CUSE: unknown device info "" [ 508.049469][T10663] CUSE: unknown device info "Ö" [ 508.054649][T10663] CUSE: unknown device info "" [ 508.059859][T10663] CUSE: unknown device info "" [ 508.065040][T10663] CUSE: unknown device info "" [ 508.070018][T10663] CUSE: unknown device info "" [ 508.075025][T10663] CUSE: unknown device info "ðÿÿÿ" [ 508.080334][T10663] CUSE: unknown device info "" [ 508.085569][T10663] CUSE: unknown device info "" [ 508.090579][T10663] CUSE: unknown device info "" [ 508.096073][T10663] CUSE: unknown device info "" [ 508.101216][T10663] CUSE: unknown device info "r" [ 508.106412][T10663] CUSE: unknown device info "ýÿÿÿÿÿÿÿ#Û" [ 508.112292][T10663] CUSE: unknown device info "ÿÿÿÿ" [ 508.117759][T10663] CUSE: unknown device info "" [ 508.122857][T10663] CUSE: unknown device info "€" [ 508.127999][T10663] CUSE: DEVNAME unspecified [ 509.561902][T10674] tipc: Started in network mode [ 509.569929][T10674] tipc: Node identity 7f000001, cluster identity 4711 [ 509.579294][T10674] tipc: Enabled bearer , priority 10 [ 509.855033][T10422] [ 509.857443][T10422] ============================================ [ 509.863617][T10422] WARNING: possible recursive locking detected [ 509.869896][T10422] syzkaller #0 Not tainted [ 509.874336][T10422] -------------------------------------------- [ 509.880506][T10422] kworker/u4:17/10422 is trying to acquire lock: [ 509.886861][T10422] ffffe8ffffd8e4f0 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x62b/0xaa0 [ 509.896710][T10422] [ 509.896710][T10422] but task is already holding lock: [ 509.904100][T10422] ffffe8ffffd8e540 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 509.913378][T10422] [ 509.913378][T10422] other info that might help us debug this: [ 509.921468][T10422] Possible unsafe locking scenario: [ 509.921468][T10422] [ 509.928950][T10422] CPU0 [ 509.932250][T10422] ---- [ 509.935565][T10422] lock(&pd_list->lock); [ 509.939929][T10422] lock(&pd_list->lock); [ 509.944289][T10422] [ 509.944289][T10422] *** DEADLOCK *** [ 509.944289][T10422] [ 509.952460][T10422] May be due to missing lock nesting notation [ 509.952460][T10422] [ 509.960806][T10422] 3 locks held by kworker/u4:17/10422: [ 509.966299][T10422] #0: ffff888144a46138 ((wq_completion)pencrypt_parallel){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 509.977756][T10422] #1: ffffc900038e7d00 ((work_completion)(&pw->pw_work)){+.+.}-{0:0}, at: process_one_work+0x7b0/0x1160 [ 509.989039][T10422] #2: ffffe8ffffd8e540 (&pd_list->lock){+...}-{2:2}, at: padata_do_serial+0x4c2/0xaa0 [ 509.998752][T10422] [ 509.998752][T10422] stack backtrace: [ 510.004689][T10422] CPU: 1 PID: 10422 Comm: kworker/u4:17 Not tainted syzkaller #0 [ 510.012529][T10422] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 510.022901][T10422] Workqueue: pencrypt_parallel padata_parallel_worker [ 510.029730][T10422] Call Trace: [ 510.033123][T10422] [ 510.036165][T10422] dump_stack_lvl+0x188/0x24e [ 510.040983][T10422] ? show_regs_print_info+0x12/0x12 [ 510.046436][T10422] ? load_image+0x400/0x400 [ 510.051004][T10422] __lock_acquire+0x123e/0x7d10 [ 510.055968][T10422] ? mark_lock+0x94/0x320 [ 510.060344][T10422] ? verify_lock_unused+0x140/0x140 [ 510.065585][T10422] ? lockdep_hardirqs_on_prepare+0x409/0x770 [ 510.071614][T10422] ? lock_chain_count+0x20/0x20 [ 510.076513][T10422] ? asm_sysvec_apic_timer_interrupt+0x16/0x20 [ 510.082811][T10422] ? lockdep_hardirqs_on+0x94/0x140 [ 510.088053][T10422] lock_acquire+0x1bb/0x4a0 [ 510.092611][T10422] ? padata_do_serial+0x62b/0xaa0 [ 510.097674][T10422] ? queue_work_on+0x196/0x1f0 [ 510.102477][T10422] ? queue_work_on+0x1a0/0x1f0 [ 510.107300][T10422] ? read_lock_is_recursive+0x10/0x10 [ 510.112728][T10422] ? wq_worker_last_func+0x40/0x40 [ 510.118142][T10422] ? __rwlock_init+0x140/0x140 [ 510.122967][T10422] ? _find_next_bit+0x87/0x130 [ 510.128005][T10422] _raw_spin_lock+0x2a/0x40 [ 510.132563][T10422] ? padata_do_serial+0x62b/0xaa0 [ 510.137730][T10422] padata_do_serial+0x62b/0xaa0 [ 510.142631][T10422] ? padata_parallel_worker+0x40/0x1c0 [ 510.148134][T10422] padata_parallel_worker+0x6b/0x1c0 [ 510.153470][T10422] ? process_one_work+0x7b0/0x1160 [ 510.158655][T10422] process_one_work+0x8a2/0x1160 [ 510.163663][T10422] ? worker_detach_from_pool+0x240/0x240 [ 510.169347][T10422] ? _raw_spin_lock_irq+0xb7/0xf0 [ 510.174444][T10422] ? _raw_spin_lock_irqsave+0x100/0x100 [ 510.180042][T10422] ? kthread_data+0x4b/0xc0 [ 510.184716][T10422] worker_thread+0xaa2/0x1270 [ 510.189458][T10422] ? _raw_spin_unlock_irqrestore+0xbc/0x120 [ 510.195588][T10422] ? __kthread_parkme+0x162/0x1c0 [ 510.200759][T10422] kthread+0x29d/0x330 [ 510.204867][T10422] ? worker_clr_flags+0x1a0/0x1a0 [ 510.209948][T10422] ? kthread_blkcg+0xd0/0xd0 [ 510.214580][T10422] ret_from_fork+0x1f/0x30 [ 510.219134][T10422] [ 510.681679][ T4629] tipc: Node number set to 2130706433