last executing test programs: 2m49.043746335s ago: executing program 0 (id=3774): mkdir(&(0x7f0000000000)='./cgroup/../file0\x00', 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) r1 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) socket(0x40000000015, 0x5, 0x0) fsopen(0x0, 0x0) syz_open_dev$vcsn(0x0, 0xe82e, 0x100) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x19) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb49, 0x6, 0x8, 0x0, 0x3}, 0x0) execveat(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x1000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x1, 0xbf27, 0x500}, 0x48) mmap(&(0x7f0000fa2000/0x3000)=nil, 0x3000, 0x3, 0x13, r5, 0x0) mremap(&(0x7f0000fa4000/0x2000)=nil, 0x2000, 0x1000, 0x3, &(0x7f0000fa2000/0x1000)=nil) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x40, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x18, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r7 = fsopen(&(0x7f00000000c0)='ecryptfs\x00', 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) 2m41.577337104s ago: executing program 0 (id=3790): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x12, r0, 0x0) times(&(0x7f00000001c0)) 2m41.216424349s ago: executing program 0 (id=3792): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x4a, 0x0, 0x0) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, &(0x7f0000000240)={'nat\x00', 0x5, "7f80a53b67"}, 0x0) setsockopt$inet6_int(r0, 0x29, 0x42, &(0x7f0000000100)=0x5, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 2m40.219036511s ago: executing program 0 (id=3796): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x0, 0x0, 0x2}]}, &(0x7f0000000100)='GPL\x00', 0x5, 0xd2, &(0x7f00000002c0)=""/210, 0x0, 0x5}, 0x94) 2m40.044264544s ago: executing program 0 (id=3797): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x44000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x5}, 0x0) 2m37.857514746s ago: executing program 0 (id=3800): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 2m22.759531697s ago: executing program 32 (id=3800): syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) io_setup(0x2, &(0x7f0000000000)=0x0) r1 = eventfd(0x0) io_submit(r0, 0x2, &(0x7f0000000200)=[&(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xc2, r1, &(0x7f0000000180)="0100fd6400000000", 0x8, 0x36}, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x8, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x1, r1}]) syz_clone3(&(0x7f0000001e80)={0x166002400, 0x0, 0x0, 0x0, {0xa}, 0x0, 0x0, 0x0, 0x0}, 0x58) 48.702646086s ago: executing program 5 (id=4091): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000140000e5b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000000c0)='percpu_alloc_percpu\x00', r2}, 0x10) syz_io_uring_setup(0x111, &(0x7f00000003c0)={0x0, 0x11, 0x2, 0x2, 0x4000}, 0x0, 0x0) 47.297606911s ago: executing program 5 (id=4097): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0200000004000000080000000c"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0xd) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9e, 0x17, 0x36, 0x10, 0x17ef, 0x721e, 0xde06, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x2, 0x6}}]}}]}}, 0x0) 45.668491065s ago: executing program 5 (id=4102): socket$nl_netfilter(0x10, 0x3, 0xc) syz_usb_connect(0x1, 0xfffffffffffffd22, 0x0, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) r1 = eventfd(0xc) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000240)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000140)={0x0, 0x0, 0x0, &(0x7f0000000500)=""/67, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000180)={0x1, 0x1, &(0x7f0000000580)=""/247, &(0x7f00000000c0)=""/85, &(0x7f0000000480)=""/74}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000000a40)) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f0000000000)=0x1) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004}, 0x0) 42.675655982s ago: executing program 5 (id=4109): r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000840)={'sit0\x00', &(0x7f0000000740)={'sit0\x00', 0x0, 0x700, 0x80, 0x67, 0x0, {{0x5, 0x4, 0x1, 0x11, 0x14, 0x67, 0x0, 0xa, 0x29, 0x0, @multicast2, @remote}}}}) 42.488308083s ago: executing program 5 (id=4112): mount$9p_fd(0x0, &(0x7f0000000340)='.\x00', 0x0, 0x6, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000002c0)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002040)=ANY=[@ANYBLOB='@\r\x00\x00', @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2, @ANYBLOB="24000300000000000000000000000000000000000000000000000000000000000000000024000300a05ca84f6c9c8e3853e2fd7a7cae0fb20fa152600cb00845174f08076f8d7843080007"], 0xd40}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x90000000}, 0xc, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x81}, 0x4000) 41.835653026s ago: executing program 5 (id=4114): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000080)='./file0\x00', 0x21c91c, &(0x7f0000000640)={[{@inode_readahead_blks={'inode_readahead_blks', 0x3d, 0x2000000}}, {@noblock_validity}, {@mblk_io_submit}, {@jqfmt_vfsold}, {@jqfmt_vfsold}, {@nomblk_io_submit}, {@debug}, {@minixdf}, {@resgid, 0x32}]}, 0x1e, 0x506, &(0x7f0000000100)="$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") 22.078160649s ago: executing program 1 (id=4160): r0 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$TCSETSF2(r0, 0x402c542d, &(0x7f00000000c0)={0x6, 0x88, 0x2, 0x3ff, 0xcb, "0982aa400000000000e6ffffab5b00", 0x5, 0x1}) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0xff) 21.736518015s ago: executing program 1 (id=4162): mkdir(&(0x7f0000000440)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x1, 0xc, 0x9}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f0000000180)='kmem_cache_free\x00'}, 0x10) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x1, &(0x7f0000000040)=[{0x200000000006, 0x0, 0x0, 0x7ffc0002}]}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000380), 0x84, r2}, 0x38) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='9p_protocol_dump\x00', r4}, 0x10) mount$9p_fd(0x0, &(0x7f0000000300)='./file0\x00', &(0x7f0000000280), 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1]) 18.079243491s ago: executing program 1 (id=4170): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000030000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x44}) readv(r3, &(0x7f0000002140)=[{&(0x7f00000000c0)=""/4096, 0x1000}], 0x1) 17.088147828s ago: executing program 6 (id=4173): r0 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000080)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000000c0)=0x9) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x7f) 16.147437818s ago: executing program 4 (id=4175): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) write(r5, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) connect$inet(r4, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 16.140370812s ago: executing program 6 (id=4176): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, 0x0, 0x0) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_SPORT={0x6, 0x11, 0x4e22}, @IFLA_IPTUN_ENCAP_DPORT={0x6, 0x12, 0x4e20}]}}}]}, 0x44}}, 0x0) 16.088620244s ago: executing program 1 (id=4177): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x0, 0x0}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000001b40)='sched_switch\x00', r4}, 0x10) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r7 = syz_open_dev$tty20(0xc, 0x4, 0x0) ioctl$TCSETSW(r7, 0x5403, 0x0) ioctl$TIOCL_GETMOUSEREPORTING(r7, 0x5412, &(0x7f0000000040)=0xa) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000180)='/sys/kernel/address_bits', 0x141b82, 0x180) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = dup(r6) mount$9p_fd(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r5, @ANYBLOB=',wfdno=', @ANYRESHEX=r8]) 12.370590476s ago: executing program 4 (id=4179): syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000080)='./file0\x00', 0x301c40a, &(0x7f0000000ac0)=ANY=[@ANYBLOB="726f6469722c7379735f696d6d757461626c652c6e6f6e756d7461696c3d302c757466383d302c696f636861727365743d63703836362c696f636861727365743d63703836362c756e695f786c6174653d302c73686f72746e616d653d6d697865642c73686f72746e616d653d6c6f7765722c636f6465706167653d3835322c756e695f786c6174653d312c757466383d302c756e695f786c6174653d302c726f6469722c696f636861727365743d6b6f69382d722c6572726f72733d636f6e74696e75652c747a3d5554432c73686f72746e616d653d77696e39352c00a00a0cd39f36d6b13ea19f07b37c61c4cf4ebfcb3df05994c20b6e4aaf23620b4cc18ae687df50c7079c24b6115418d83b45e9eeca405cd5d311a10231ee3d6c8d6b8f5c2509c98010751480ddcc0b6d6dd3c7b4df119719a21f887458644c085b43c0c5e06375dc26c7444fc499f4d0e888683e864bc9a2e359756312102a0a492d23f790e5a2a9e539d2c328e973e85c53802527c1d237445a1abab1908ffdd9057f6272d8b377baa22675d9f1db55e5407fc6690f3fc15b929ef7279054d9e55a"], 0x6, 0x2d5, &(0x7f0000000680)="$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") gettid() timer_create(0x0, 0x0, &(0x7f0000bbdffc)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff8000}]}) timer_delete(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0700000004000000080000000100000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB], 0x50) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000000000), 0x10) socket$tipc(0x1e, 0x5, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000300)='./bus\x00', 0x3000009, 0x0, 0x0, 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000b80), 0x8, &(0x7f0000000180)={[{@upperdir={'upperdir', 0x3d, './file0'}}, {@lowerdir={'lowerdir', 0x3d, '.'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) r4 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x80) getdents64(r4, &(0x7f0000000000)=""/39, 0x27) syz_open_dev$tty1(0xc, 0x4, 0x1) 12.261940558s ago: executing program 6 (id=4180): syz_usb_connect(0x0, 0x6b, &(0x7f0000000c80)=ANY=[@ANYBLOB="1201000385352608f20446b76e8e01020301090259000104e9000909049300000e0100ff0a240102000502010209240703040001a53011240606040508000400050006000100050924030506030501f909240702020005cbad0924030601010303df092402010303"], &(0x7f0000001240)={0x0, 0x0, 0x0, 0x0}) 11.952357511s ago: executing program 3 (id=4181): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3d0, 0x0, 0x3a0, 0x2a8, 0x2a8, 0xc0, 0x490, 0x490, 0x490, 0x490, 0x490, 0x6, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28, 'DSCP\x00', 0x0, {0x9}}}, {{@ip={@private=0xa010102, @local, 0xffffffff, 0xffffff00, 'lo\x00', 'veth1_to_bond\x00', {0xff}, {}, 0x3c, 0x3}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @multicast, 0x8, 0x5, [0x40, 0x1b, 0x9, 0x8, 0x2d, 0x7, 0x14, 0x16, 0xe, 0x3b, 0xe, 0x6, 0x2a, 0x19, 0x2a, 0xd], 0x0, 0xf17e, 0x2}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x3, 0x3}}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0x0, 'bridge_slave_1\x00', 'pim6reg1\x00', {0xff}, {0xff}, 0x1d, 0x4, 0x1}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7f, 0xf, @multicast2, 0x4e23}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x430) 11.950796487s ago: executing program 1 (id=4182): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0/file0\x00', 0xee01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 10.321742089s ago: executing program 3 (id=4183): socket$inet6(0xa, 0x1, 0x8010000000000084) r0 = openat$sndtimer(0xffffffffffffff9c, 0x0, 0x101402) ioctl$SNDRV_TIMER_IOCTL_NEXT_DEVICE(r0, 0xc0145401, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, 0x0, 0x0) syz_emit_ethernet(0x52, 0x0, 0x0) fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x24004000, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) socket$netlink(0x10, 0x3, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[], 0x0) 9.413752231s ago: executing program 6 (id=4187): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000100)=0x50044) ioctl$PPPIOCSFLAGS1(r3, 0x40047459, &(0x7f0000000040)=0x102094) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$inet(0x2, 0x4000000000000001, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000740)={@multicast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x44}, @val={@void, {0x8100, 0x4, 0x1, 0x4}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @dev={0xac, 0x14, 0x14, 0x26}, @broadcast, @private=0xa010102}}}}, &(0x7f00000007c0)={0x0, 0x1, [0x79, 0x62e, 0x458, 0x4e7]}) syz_mount_image$erofs(&(0x7f0000000180), &(0x7f00000001c0)='./file1\x00', 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="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"], 0x1, 0x17d, &(0x7f00000004c0)="$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") r5 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file2\x00', 0x80000, 0x0) read$FUSE(r5, &(0x7f00000020c0)={0x2020}, 0x2020) ptrace$setsig(0x4203, r0, 0x6, &(0x7f0000000300)={0x2b, 0x7fff, 0x200}) remap_file_pages(&(0x7f00002ec000/0x200000)=nil, 0x200000, 0x0, 0x0, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, &(0x7f0000000ac0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x110, 0x110, 0x110, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000800), {[{{@arp={@dev={0xac, 0x14, 0x14, 0x21}, @rand_addr=0x64010100, 0xffffff00, 0xffffff00, 0x6, 0x6, {@empty, {[0xff, 0x0, 0xff]}}, {@empty, {[0x660934d4dbb84bcc, 0xff, 0xff]}}, 0x2, 0x4, 0x2, 0x0, 0x1, 0x1, 'vcan0\x00', 'xfrm0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@broadcast, @mac, @multicast1, @loopback, 0x7, 0x1}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @empty, @multicast1, 0x2}}}, {{@arp={@local, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffff00, 0xffffffff, 0x4, 0x8, {@mac=@random="15d197f069f5", {[0xff, 0xff, 0x0, 0xff, 0xff, 0xff]}}, {@mac=@multicast, {[0xff, 0xff, 0xff, 0xff, 0x0, 0xff]}}, 0x7, 0x7f, 0x7fff, 0x6, 0x4, 0x6bd, 'batadv_slave_0\x00', 'macvlan1\x00', {0xff}}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 7.263148656s ago: executing program 4 (id=4189): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) r0 = syz_open_dev$loop(&(0x7f0000000140), 0x75f, 0xa382) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYRES32=0x0], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x101042, 0x45) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r5, 0x303, 0x4, 0x0, {0x2a}}, 0x14}, 0x1, 0x0, 0x0, 0x4004044}, 0x4004) r6 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_int(r6, 0x29, 0x48, 0x0, &(0x7f00007d0000)) fcntl$getownex(r6, 0x10, &(0x7f0000000000)={0x0, 0x0}) syz_open_procfs(r7, &(0x7f0000000040)='timers\x00') r8 = memfd_create(&(0x7f0000000880)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc90\xb9voI\xa5/\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\x81\x00V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93\x9c5\xcf\t\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\x01\x04\x00\x00\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\x94\x13^\x13\xaf\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="5500000020007fafb72d13b2a4a2719302000000030b43026c26236925000400fe7f0000bd2dca8a9848a3c728f138d509000000000100005ae583de0dd7d8319f98af84fda542e718f94b929ade5b175c0a9b2ce9", 0x55}], 0x1}, 0x0) write(r4, &(0x7f0000000040)="2400000021002551241c0165ff00fc020200000000100f000ee1000c08000b0000000000", 0x24) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000001640)=@mangle={'mangle\x00', 0x44, 0x6, 0x510, 0x3a8, 0x210, 0x210, 0x0, 0x138, 0x478, 0x478, 0x478, 0x478, 0x478, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x11000000, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00', {}, {}, 0x11}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@loopback, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x0, 'system_u:object_r:dbusd_etc_t:s0\x00'}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x570) connect$inet(r3, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) 6.894421754s ago: executing program 6 (id=4191): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001700)=ANY=[@ANYBLOB="160000000000000061b1000002"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x8000000000002) sched_setscheduler(r3, 0x2, &(0x7f0000000240)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000070000007b8af8ff00000000bfa200000000000007020000f8ffff000085000000820000009500"/72], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x95) socket$inet6(0xa, 0x1, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r6, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x200, 0xfffffffd}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000140)={0x42, 0xf5, 0x1}, 0x10) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000040)={0x4000000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xf, 0x8, 0x0, 0x14, 0x0, 0x2, 0x25dfdbfe, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x4e20, 0xe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x19}}, 0x9}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x2, 0x0, 0x0, 0x0, {0x6, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x18}}}, @sadb_address={0x5, 0x6, 0x0, 0x20, 0x0, @in6={0xa, 0x4e21, 0xe28, @rand_addr=' \x01\x00', 0x9}}]}, 0xa0}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r1, 0xffffffffffffffff}, 0x0, &(0x7f0000000040)}, 0x20) bpf$MAP_LOOKUP_ELEM(0x15, &(0x7f0000000200)={r8, 0x0, &(0x7f0000001780)=""/4096}, 0x20) socket$inet6(0xa, 0x1, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0xc, &(0x7f0000000100)=ANY=[@ANYBLOB="180200000400000000000000fcffff0185000000bc0000001801000020646c2400000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000f000000850000000600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0xe, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0xdc0, 0x0, &(0x7f0000000100), 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) 6.869515894s ago: executing program 2 (id=4192): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000900)=@updsa={0x138, 0x1a, 0xffffffffffffffff, 0x4070bd28, 0x3, {{@in=@private=0xa010101, @in6=@mcast2, 0x0, 0x0, 0x4e24, 0x0, 0x0, 0x20, 0xa0, 0x11}, {@in=@multicast1, 0x84d4, 0x6c}, @in=@broadcast, {0x100000000, 0x0, 0x3d0c, 0xfffffffffffffffd, 0x7ff, 0xfffffffffffffffc, 0xfffffffffffffffd}, {0xffffffff, 0x0, 0xfffffffffffffffc, 0xa3}, {0x936d, 0x3d49, 0x4000}, 0x3, 0x3503, 0xa, 0x1, 0x4, 0x60}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4084}, 0x0) 6.869039872s ago: executing program 3 (id=4193): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x15) fcntl$lock(r0, 0x25, &(0x7f0000000180)={0x2, 0x5, 0x3, 0x6}) 6.484633195s ago: executing program 3 (id=4194): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000400000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000010c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000600)="c9f7b98600"/14, 0x0, 0x7ffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.529965496s ago: executing program 6 (id=4195): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(0xffffffffffffffff, 0xc0984124, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x5, 0x0, 0x0, 0xb49, 0x9, 0x8, 0x7, 0x81}, 0x0) r3 = syz_mount_image$fuse(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$FS_IOC_RESVSP(r3, 0x80086601, 0x0) fsopen(&(0x7f0000000000)='ufs\x00', 0x1) r6 = fsopen(&(0x7f00000003c0)='cgroup2\x00', 0x0) r7 = fsmount(r6, 0x0, 0x0) r8 = openat$cgroup_pressure(r7, &(0x7f0000000080)='cpu.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r8, &(0x7f0000000040)={'some', 0x20, 0x17e, 0x20, 0x100002}, 0x2f) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000380)=0x14) r10 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x141a82, 0x0) write$cgroup_int(r10, &(0x7f0000000040)=0x900, 0x12) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000003c0)={'gretap0\x00', &(0x7f0000000440)={'erspan0\x00', r9, 0x10, 0x80, 0xdd7, 0x2, {{0xa, 0x4, 0x1, 0x9, 0x28, 0x66, 0x0, 0x2, 0x4, 0x0, @local, @rand_addr=0x64010101, {[@timestamp_prespec={0x44, 0xc, 0x9, 0x3, 0x9, [{@multicast1, 0x2}]}, @rr={0x7, 0x7, 0xe0, [@initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x9, @private2={0xfc, 0x2, '\x00', 0x1}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0x103, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f0000000400)=[{&(0x7f00000001c0)='f', 0x1}], 0x1}}], 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn:Dd', 0x0) 4.529484527s ago: executing program 4 (id=4196): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x77, 0x29, 0x4, 0x20, 0x424, 0x9901, 0xc257, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x43, 0x0, 0x2, 0x31, 0x7d, 0x55, 0x0, [], [{{0x9, 0x5, 0x2, 0x2, 0x200, 0x2}}, {{0x9, 0x5, 0x82, 0x2, 0x200}}]}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000400)={0x44, &(0x7f0000000200)=ANY=[@ANYBLOB="401504"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000640)={0x20, 0x3, 0x4, "5905d900"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000140)={0x0, 0xf}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000680)={0x2c, &(0x7f0000000340)={0x20, 0x3, 0x4, "a13b1f21"}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) 4.35983383s ago: executing program 2 (id=4197): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x6) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000802000074"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000040000850000001b000000b70000000000000095"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = getpid() sched_setscheduler(r2, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0xfffffffffffffdd0, 0x0, 0x41000}, 0x94) setgroups(0x4000000000000190, &(0x7f0000000080)) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r6}, 0x10) set_tid_address(0x0) 4.088541191s ago: executing program 3 (id=4198): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002900)={0x11, 0xc, &(0x7f0000000200)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x10) ioctl$PTP_EXTTS_REQUEST(0xffffffffffffffff, 0x40103d02, 0x0) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x15) madvise(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3) socket$nl_generic(0x10, 0x3, 0x10) 3.237473427s ago: executing program 2 (id=4199): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_IPSEC_POLICY(r0, 0x29, 0x22, &(0x7f00000002c0)={{{@in6=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4e24, 0x3, 0x4e24, 0x0, 0x2, 0x60, 0xa0, 0x1d}, {0x87e8, 0x40, 0xff, 0x7, 0x6, 0x7, 0x7f, 0x7fffffff}, {0x6, 0x5b, 0x0, 0x8}, 0x4, 0x0, 0x2, 0x1, 0x2, 0x3}, {{@in6=@private0, 0x4d3, 0x2b}, 0xb, @in6=@remote, 0x3502, 0x1, 0x0, 0x5, 0xac5, 0x7, 0xffffffff}}, 0xe8) 2.066363221s ago: executing program 2 (id=4200): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000100)={0x0, 0x2800, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0100000000000000000003000000400001802c0004001400010002000000ac14140f00000000000000001400020002000000ffffffff00000000000000000d0001007564703a73797a3200000000"], 0x54}}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010009bd7000fbdbdf2505000000200001800d0001007564703a73797a32000000000c0002800800010013000000"], 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) write$FUSE_BMAP(0xffffffffffffffff, 0x0, 0x0) write$FUSE_NOTIFY_RETRIEVE(0xffffffffffffffff, &(0x7f00000000c0)={0x14c}, 0x137) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_IP_XFRM_POLICY(r6, 0x0, 0x11, &(0x7f0000000300)={{{@in=@broadcast, @in=@broadcast, 0x4e24, 0x0, 0x4e21, 0xb, 0x2, 0x20, 0x80, 0x29}, {0x0, 0x3, 0x7, 0x8, 0x10000, 0x60000000, 0xe04d, 0x2}, {0x200000000, 0x1, 0x8, 0x4}, 0x3ff, 0x6e6bb2, 0x2, 0x0, 0x1, 0x2}, {{@in6=@empty, 0x4d5, 0x33}, 0xd, @in=@local, 0x3505, 0x0, 0x1, 0xff, 0x2, 0x8, 0x10001}}, 0xe8) r7 = syz_open_dev$usbmon(&(0x7f0000000900), 0x7, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4008891, 0x0, 0x0) ioctl$MON_IOCX_MFETCH(r7, 0xc0109207, &(0x7f0000000080)={0x0}) ioctl$MON_IOCH_MFLUSH(r7, 0x9208, 0x1000000000) r8 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x12, 0x6, 0x4, 0x12}, 0x50) close(r8) 2.064426547s ago: executing program 3 (id=4201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x8, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) lchown(&(0x7f0000000000)='./file0/file0\x00', 0xee01, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000680)={0x20, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}]}]}, 0x20}}, 0x0) 416.888376ms ago: executing program 2 (id=4202): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="05000000040000000800000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x4, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000000000)) 266.528303ms ago: executing program 4 (id=4203): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x48840) sendmsg$NFQNL_MSG_VERDICT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x20, 0x3, 0x3, 0x401, 0x0, 0x0, {}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffc, 0x8}}]}, 0x20}}, 0x4) 88.467855ms ago: executing program 2 (id=4204): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r2, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000004c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r2], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0x90646}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0xa, 0x1}, @IFLA_BOND_PRIMARY={0x8, 0xb, r5}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x600}, 0x8080) 0s ago: executing program 4 (id=4205): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1) timer_settime(r0, 0x1, &(0x7f0000000040)={{0x77359400}}, 0x0) mmap(&(0x7f0000000000/0x200000)=nil, 0x200000, 0x300000b, 0x204031, 0xffffffffffffffff, 0xec776000) r1 = timerfd_create(0x8, 0x0) read(r1, &(0x7f00000000c0)=""/252, 0xfc) timerfd_settime(r1, 0x3, &(0x7f0000000080)={{0x0, 0x3938700}, {0x0, 0x989680}}, 0x0) kernel console output (not intermixed with test programs): ve_1: entered allmulticast mode [ 1032.609495][T17192] 8021q: adding VLAN 0 to HW filter on device team0 [ 1032.623269][T17192] dummy0: entered promiscuous mode [ 1032.628792][T17192] dummy0: entered allmulticast mode [ 1032.645513][T17192] nlmon0: entered promiscuous mode [ 1032.650683][T17192] nlmon0: entered allmulticast mode [ 1033.090770][ T30] audit: type=1326 audit(1780170297.936:343): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=317 compat=0 ip=0x7fe63978f6c9 code=0x7ffc0000 [ 1033.136072][T17192] caif0: entered promiscuous mode [ 1033.143437][T17192] caif0: entered allmulticast mode [ 1033.148577][T17192] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1033.175370][ T30] audit: type=1326 audit(1780170297.936:344): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63978f6c9 code=0x7ffc0000 [ 1033.240155][T17197] loop2: detected capacity change from 0 to 512 [ 1033.280618][T17197] ext2: Unknown parameter 'permit_directio' [ 1033.381317][ T30] audit: type=1326 audit(1780170297.936:345): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe63978f6c9 code=0x7ffc0000 [ 1033.459335][ T30] audit: type=1326 audit(1780170297.946:346): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=436 compat=0 ip=0x7fe63978f6c9 code=0x7ffc0000 [ 1033.600086][ T30] audit: type=1326 audit(1780170297.946:347): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17183 comm="syz.0.3514" exe="/root/syz-executor" sig=0 arch=c000003e syscall=231 compat=0 ip=0x7fe63978f6c9 code=0x7ffc0000 [ 1033.730417][T17212] netlink: 'syz.3.3523': attribute type 4 has an invalid length. [ 1033.778849][T17212] netlink: 3657 bytes leftover after parsing attributes in process `syz.3.3523'. [ 1033.834293][T17215] netlink: 'syz.5.3524': attribute type 12 has an invalid length. [ 1033.846082][T17215] netlink: 'syz.5.3524': attribute type 29 has an invalid length. [ 1033.899818][T17215] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3524'. [ 1034.250693][T17223] lo: Caught tx_queue_len zero misconfig [ 1036.770241][T17251] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1037.192832][T17262] netlink: 'syz.5.3542': attribute type 12 has an invalid length. [ 1037.218020][T17262] netlink: 'syz.5.3542': attribute type 29 has an invalid length. [ 1037.254438][T17262] netlink: 148 bytes leftover after parsing attributes in process `syz.5.3542'. [ 1037.475471][T12010] usb 4-1: new high-speed USB device number 82 using dummy_hcd [ 1037.596990][T17268] cgroup: Bad value for 'name' [ 1037.644197][T12010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1037.688933][T12010] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1037.702824][T12010] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 1037.723451][T12010] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 1037.774789][T12010] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1037.800765][T12010] usb 4-1: config 0 descriptor?? [ 1037.942856][T17278] x_tables: unsorted underflow at hook 3 [ 1038.910599][T16727] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1038.919700][T16727] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1038.927702][T16727] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1039.068267][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1039.863493][T16727] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1040.090149][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.118475][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.134244][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.331638][T16727] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1040.360583][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.421746][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.429160][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.467852][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.498171][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.528783][T12010] plantronics 0003:047F:FFFF.0032: unknown main item tag 0x0 [ 1040.582022][T12010] plantronics 0003:047F:FFFF.0032: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 1040.645137][T12010] usb 4-1: USB disconnect, device number 82 [ 1040.764385][T17295] fido_id[17295]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/4-1/report_descriptor': No such file or directory [ 1041.374125][T17302] netlink: 'syz.0.3554': attribute type 4 has an invalid length. [ 1041.381963][T17302] netlink: 17 bytes leftover after parsing attributes in process `syz.0.3554'. [ 1042.450929][T16727] Bluetooth: hci1: command tx timeout [ 1042.937258][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.497929][T17328] netlink: 52 bytes leftover after parsing attributes in process `syz.3.3562'. [ 1043.514405][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1043.577620][T17329] bridge_slave_1: left allmulticast mode [ 1043.594079][T17329] bridge_slave_1: left promiscuous mode [ 1043.618842][T17329] bridge0: port 2(bridge_slave_1) entered disabled state [ 1043.657152][T17329] bridge_slave_0: left allmulticast mode [ 1043.672731][T17329] bridge_slave_0: left promiscuous mode [ 1043.688819][T17329] bridge0: port 1(bridge_slave_0) entered disabled state [ 1044.490913][T16727] Bluetooth: hci1: command tx timeout [ 1045.894205][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.046215][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1046.570975][T16727] Bluetooth: hci1: command tx timeout [ 1048.132706][ T30] audit: type=1326 audit(1780170313.986:348): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17352 comm="syz.2.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1048.321618][ T30] audit: type=1326 audit(1780170313.986:349): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17352 comm="syz.2.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1048.350959][ T30] audit: type=1326 audit(1780170313.986:350): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17352 comm="syz.2.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=430 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1049.033738][T16727] Bluetooth: hci1: command tx timeout [ 1049.053036][T17358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1049.061008][ T30] audit: type=1326 audit(1780170313.986:351): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=17352 comm="syz.2.3571" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1049.093274][T17358] netlink: 64 bytes leftover after parsing attributes in process `syz.0.3572'. [ 1050.456931][ T13] bridge_slave_1: left promiscuous mode [ 1050.485117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 1050.512787][ T13] bridge_slave_0: left allmulticast mode [ 1050.531481][ T24] usb 2-1: new high-speed USB device number 73 using dummy_hcd [ 1050.544580][ T13] bridge_slave_0: left promiscuous mode [ 1050.571234][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 1050.725760][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1050.742122][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 255, changing to 7 [ 1050.754085][ T24] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0xA has invalid maxpacket 59391, setting to 1024 [ 1050.777238][T17386] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3580'. [ 1050.795248][ T24] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1050.805549][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1050.814491][ T24] usb 2-1: Product: syz [ 1050.818793][ T24] usb 2-1: Manufacturer: syz [ 1050.824299][ T24] usb 2-1: SerialNumber: syz [ 1050.833826][ T24] usb 2-1: config 0 descriptor?? [ 1050.848455][ T24] usb 2-1: 0:0 : invalid sync pipe. bmAttributes e5, bLength 9, bSynchAddress ff [ 1051.021460][ T13] bond1 (unregistering): (slave gretap1): Releasing active interface [ 1051.103656][ T24] usb 2-1: USB disconnect, device number 73 [ 1051.165048][ T9530] udevd[9530]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1051.792845][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1051.804792][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1051.816151][ T13] bond0 (unregistering): Released all slaves [ 1051.896733][ T13] bond1 (unregistering): Released all slaves [ 1051.931631][ T5920] usb 2-1: new high-speed USB device number 74 using dummy_hcd [ 1051.988827][ T13] bond2 (unregistering): Released all slaves [ 1052.013512][T17366] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1052.126482][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1052.161287][ T5920] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1052.194405][ T5920] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1052.230868][ T5920] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1052.275774][ T5920] usb 2-1: config 0 descriptor?? [ 1053.495465][T17286] chnl_net:caif_netlink_parms(): no params data found [ 1053.682606][ T5920] hid_parser_main: 4 callbacks suppressed [ 1053.682632][ T5920] cp2112 0003:10C4:EA90.0033: unknown main item tag 0x0 [ 1053.711409][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1053.841239][ T5920] cp2112 0003:10C4:EA90.0033: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1054.620694][ T5920] cp2112 0003:10C4:EA90.0033: Part Number: 0x82 Device Version: 0xFE [ 1054.651055][ T5920] cp2112 0003:10C4:EA90.0033: error requesting SMBus config [ 1054.670053][ T5920] cp2112 0003:10C4:EA90.0033: probe with driver cp2112 failed with error -5 [ 1054.771005][ T13] hsr_slave_0: left promiscuous mode [ 1054.799824][ T13] hsr_slave_1: left promiscuous mode [ 1054.810286][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1054.842817][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1054.894150][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1054.942102][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1055.036152][ T5967] usb 2-1: USB disconnect, device number 74 [ 1055.065274][ T13] veth1_vlan: left promiscuous mode [ 1055.091103][ T13] veth0_vlan: left promiscuous mode [ 1057.081215][ T5967] usb 2-1: new low-speed USB device number 75 using dummy_hcd [ 1057.553142][ T5967] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 1057.584353][ T5967] usb 2-1: config 9 has no interface number 0 [ 1057.599399][ T5967] usb 2-1: config 9 interface 1 has no altsetting 0 [ 1057.630176][ T5967] usb 2-1: string descriptor 0 read error: -22 [ 1057.681492][ T5967] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1057.730880][ T5967] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1057.806964][ T5967] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1057.836458][ T5967] cx231xx 2-1:9.1: Not found matching IAD interface [ 1058.103391][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1058.193462][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3599'. [ 1058.205287][ T13] team0 (unregistering): Port device team_slave_1 removed [ 1058.326088][ T13] team0 (unregistering): Port device team_slave_0 removed [ 1059.663917][T17286] bridge0: port 1(bridge_slave_0) entered blocking state [ 1059.672296][T12010] usb 2-1: USB disconnect, device number 75 [ 1059.691016][T17286] bridge0: port 1(bridge_slave_0) entered disabled state [ 1059.707586][T17286] bridge_slave_0: entered allmulticast mode [ 1059.719620][T17286] bridge_slave_0: entered promiscuous mode [ 1059.825392][T17286] bridge0: port 2(bridge_slave_1) entered blocking state [ 1059.840076][T17286] bridge0: port 2(bridge_slave_1) entered disabled state [ 1059.871672][T17286] bridge_slave_1: entered allmulticast mode [ 1059.895306][T17286] bridge_slave_1: entered promiscuous mode [ 1059.930747][T17492] loop3: detected capacity change from 0 to 128 [ 1060.823001][T17286] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1060.870420][T17286] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1061.162745][T17286] team0: Port device team_slave_0 added [ 1061.215612][T17286] team0: Port device team_slave_1 added [ 1061.532112][T17286] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1061.539082][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1061.780264][T17286] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1062.681314][T17286] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1062.732983][T17286] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1062.815817][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1062.888371][T17286] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1063.035632][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1063.272015][T17286] hsr_slave_0: entered promiscuous mode [ 1063.287383][T17286] hsr_slave_1: entered promiscuous mode [ 1063.307115][T17286] debugfs: 'hsr0' already exists in 'hsr' [ 1063.328285][T17286] Cannot create hsr debugfs directory [ 1063.341533][T17543] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3614'. [ 1063.966227][T17566] loop2: detected capacity change from 0 to 256 [ 1064.639281][T17566] vfat: Bad value for 'fmask' [ 1065.421866][T17583] loop2: detected capacity change from 0 to 256 [ 1065.451298][T17583] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1065.490404][T17583] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1065.557325][T17583] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xe62de5da, utbl_chksum : 0xe619d30d) [ 1065.587181][T17583] exFAT-fs (loop2): failed to load alloc-bitmap [ 1065.596768][T17583] exFAT-fs (loop2): failed to recognize exfat type [ 1065.654776][T17588] bridge0: port 3(vlan3) entered blocking state [ 1065.676300][T17588] bridge0: port 3(vlan3) entered disabled state [ 1065.676561][T17588] vlan3: entered allmulticast mode [ 1065.862188][T17588] vlan3: left allmulticast mode [ 1066.890294][T17603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3629'. [ 1067.006559][T17607] loop2: detected capacity change from 0 to 1024 [ 1067.036387][T17607] ext4: Unknown parameter 'smackfshat' [ 1067.366989][T17286] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1067.453567][T17286] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1067.555963][T17286] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1067.621180][T17286] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1067.771357][T17623] loop3: detected capacity change from 0 to 2048 [ 1067.859851][T17623] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1068.166274][T17286] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1068.261050][T17286] 8021q: adding VLAN 0 to HW filter on device team0 [ 1068.338140][T13136] bridge0: port 1(bridge_slave_0) entered blocking state [ 1068.345364][T13136] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1068.606519][ T5848] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1068.658294][T17647] tipc: Started in network mode [ 1068.696637][T17647] tipc: Node identity 7f000001, cluster identity 4711 [ 1068.731145][T17647] tipc: Enabled bearer , priority 10 [ 1068.971979][T13136] bridge0: port 2(bridge_slave_1) entered blocking state [ 1068.979133][T13136] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1069.772479][T17668] loop3: detected capacity change from 0 to 1024 [ 1069.779869][T17668] ext4: Unknown parameter 'smackfshat' [ 1070.682665][ T24] tipc: Node number set to 2130706433 [ 1071.073040][T17680] syz.1.3644 calls setitimer() with new_value NULL pointer. Misfeature support will be removed [ 1072.044653][T17286] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1073.142334][T17286] veth0_vlan: entered promiscuous mode [ 1073.179081][T17286] veth1_vlan: entered promiscuous mode [ 1073.255514][T17286] veth0_macvtap: entered promiscuous mode [ 1073.270853][T17719] xt_bpf: check failed: parse error [ 1073.275982][T17286] veth1_macvtap: entered promiscuous mode [ 1073.345970][T17286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1073.387657][T17286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1073.409101][ T5913] usb 2-1: new low-speed USB device number 76 using dummy_hcd [ 1073.488251][T13130] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.521138][T13130] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.551447][T13130] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.582734][ T5913] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 1073.594230][ T5913] usb 2-1: config 9 has no interface number 0 [ 1073.611207][T13130] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1073.629015][ T5913] usb 2-1: config 9 interface 1 has no altsetting 0 [ 1073.657126][ T5913] usb 2-1: string descriptor 0 read error: -22 [ 1073.673728][ T5913] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1073.712470][ T5913] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1073.776279][ T5913] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1073.828654][ T5913] cx231xx 2-1:9.1: Not found matching IAD interface [ 1073.879094][T13141] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1073.904143][T13141] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.030436][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1074.085989][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1074.378140][T17731] loop2: detected capacity change from 0 to 1024 [ 1074.392665][T17731] EXT4-fs: Ignoring removed bh option [ 1074.398656][T17731] EXT4-fs: inline encryption not supported [ 1074.437524][T17731] EXT4-fs (loop2): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 1074.555087][T17731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 2: comm syz.2.3653: lblock 2 mapped to illegal pblock 2 (length 1) [ 1074.575196][T17731] Quota error (device loop2): qtree_write_dquot: dquota write failed [ 1074.583881][T17731] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 48: comm syz.2.3653: lblock 0 mapped to illegal pblock 48 (length 1) [ 1074.606793][T17731] Quota error (device loop2): v2_write_file_info: Can't write info structure [ 1074.616009][T17731] EXT4-fs error (device loop2): ext4_acquire_dquot:6945: comm syz.2.3653: Failed to acquire dquot type 0 [ 1074.636689][T17731] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1074.652599][T17731] EXT4-fs error (device loop2): ext4_evict_inode:254: inode #11: comm syz.2.3653: mark_inode_dirty error [ 1074.667800][T17731] EXT4-fs warning (device loop2): ext4_evict_inode:257: couldn't mark inode dirty (err -117) [ 1074.679792][T17731] EXT4-fs (loop2): 1 orphan inode deleted [ 1074.700835][T17731] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1074.919948][T15024] EXT4-fs error (device loop2): ext4_map_blocks:778: inode #3: block 1: comm kworker/u8:21: lblock 1 mapped to illegal pblock 1 (length 1) [ 1075.278293][T15024] Quota error (device loop2): remove_tree: Can't read quota data block 1 [ 1075.286797][T15024] EXT4-fs error (device loop2): ext4_release_dquot:6981: comm kworker/u8:21: Failed to release dquot type 0 [ 1076.349612][T17736] netlink: 'syz.4.3539': attribute type 4 has an invalid length. [ 1076.357432][T17736] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3539'. [ 1076.457546][ T5831] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1076.505609][ T5831] EXT4-fs error (device loop2): __ext4_get_inode_loc:4832: comm syz-executor: Invalid inode table block 1 in block_group 0 [ 1076.619578][ T5831] EXT4-fs error (device loop2) in ext4_reserve_inode_write:6313: Corrupt filesystem [ 1076.668395][ T5831] EXT4-fs error (device loop2): ext4_quota_off:7229: inode #3: comm syz-executor: mark_inode_dirty error [ 1076.680123][ T24] usb 2-1: USB disconnect, device number 76 [ 1076.902414][T17745] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3654'. [ 1077.843912][T17760] netlink: 180 bytes leftover after parsing attributes in process `syz.4.3655'. [ 1078.853956][T17763] overlayfs: failed to resolve './bus': -2 [ 1083.126819][T17795] netlink: 'syz.0.3667': attribute type 4 has an invalid length. [ 1083.146838][T17795] netlink: 3657 bytes leftover after parsing attributes in process `syz.0.3667'. [ 1084.368743][T11985] usb 2-1: new low-speed USB device number 77 using dummy_hcd [ 1085.281984][T11985] usb 2-1: config 9 has an invalid interface number: 1 but max is 0 [ 1085.290748][T11985] usb 2-1: config 9 has no interface number 0 [ 1085.296995][T11985] usb 2-1: config 9 interface 1 has no altsetting 0 [ 1085.328637][ T5844] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1085.345252][ T5844] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1085.357434][T11985] usb 2-1: string descriptor 0 read error: -22 [ 1085.364314][T11985] usb 2-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1085.377785][T11985] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1085.388029][ T5844] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1085.399307][ T5844] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1085.407318][ T5844] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1085.484038][T11985] cx231xx 2-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1085.505270][T11985] cx231xx 2-1:9.1: Not found matching IAD interface [ 1086.781406][T17836] netlink: 'syz.4.3674': attribute type 1 has an invalid length. [ 1087.516298][T16727] Bluetooth: hci5: command tx timeout [ 1087.712022][T11984] usb 2-1: USB disconnect, device number 77 [ 1087.831574][T17845] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1087.857582][T17845] netlink: 'syz.2.3677': attribute type 1 has an invalid length. [ 1087.908849][T17845] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3677'. [ 1088.686853][T17864] Device name cannot be null; rc = [-22] [ 1088.869209][T17814] chnl_net:caif_netlink_parms(): no params data found [ 1089.035551][ T51] bridge_slave_1: left allmulticast mode [ 1089.041431][ T51] bridge_slave_1: left promiscuous mode [ 1089.065444][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1089.138455][ T51] bridge_slave_0: left allmulticast mode [ 1089.180100][ T51] bridge_slave_0: left promiscuous mode [ 1089.220966][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1089.288213][T17876] loop5: detected capacity change from 0 to 256 [ 1089.375342][T17876] FAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1089.439814][ T51] tipc: Resetting bearer [ 1089.624435][T16727] Bluetooth: hci5: command tx timeout [ 1090.013154][T17884] overlay: filesystem on ./file0 not supported [ 1090.116394][T17885] overlay: filesystem on ./file0 not supported [ 1090.434033][ T51] tipc: Disabling bearer [ 1091.413939][T17878] loop2: detected capacity change from 0 to 40427 [ 1091.421235][T17878] f2fs: Unknown parameter 'whint_mode' [ 1092.082303][T16727] Bluetooth: hci5: command tx timeout [ 1092.991456][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1093.000471][ T51] bond_slave_0: left promiscuous mode [ 1093.006354][ T51] bond_slave_0: left allmulticast mode [ 1093.014901][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1093.024371][ T51] bond_slave_1: left promiscuous mode [ 1093.029972][ T51] bond_slave_1: left allmulticast mode [ 1093.037292][ T51] bond0 (unregistering): Released all slaves [ 1093.185272][ T51] bond1 (unregistering): Released all slaves [ 1093.445116][T17901] bridge: RTM_NEWNEIGH with invalid ether address [ 1093.465390][ T51] tipc: Left network mode [ 1094.389462][T16727] Bluetooth: hci5: command tx timeout [ 1094.776509][T17927] loop1: detected capacity change from 0 to 512 [ 1094.786036][T17927] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 1094.809099][ T5920] usb 6-1: new low-speed USB device number 90 using dummy_hcd [ 1094.820270][T17927] EXT4-fs (loop1): 1 truncate cleaned up [ 1094.827437][T17927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1095.064624][ T5920] usb 6-1: config 9 has an invalid interface number: 1 but max is 0 [ 1095.795323][ T5920] usb 6-1: config 9 has no interface number 0 [ 1095.820905][ T5920] usb 6-1: config 9 interface 1 has no altsetting 0 [ 1095.863481][ T5920] usb 6-1: string descriptor 0 read error: -22 [ 1095.884487][ T5920] usb 6-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1095.938046][ T24] usb 2-1: new full-speed USB device number 78 using dummy_hcd [ 1095.986161][ T5920] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1095.998981][T17814] bridge0: port 1(bridge_slave_0) entered blocking state [ 1096.016492][T17814] bridge0: port 1(bridge_slave_0) entered disabled state [ 1096.025423][T17814] bridge_slave_0: entered allmulticast mode [ 1096.046805][ T5920] cx231xx 6-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1096.070449][T17814] bridge_slave_0: entered promiscuous mode [ 1096.089414][T17814] bridge0: port 2(bridge_slave_1) entered blocking state [ 1096.097919][ T5920] cx231xx 6-1:9.1: Not found matching IAD interface [ 1096.122059][ T24] usb 2-1: config 0 has an invalid interface number: 239 but max is 0 [ 1096.141742][T17814] bridge0: port 2(bridge_slave_1) entered disabled state [ 1096.160758][T17814] bridge_slave_1: entered allmulticast mode [ 1096.176640][ T24] usb 2-1: config 0 has no interface number 0 [ 1096.178783][T17814] bridge_slave_1: entered promiscuous mode [ 1096.235566][ T24] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1096.255876][ T24] usb 2-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1096.294554][ T24] usb 2-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1096.319741][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1096.360163][ T24] usb 2-1: Product: syz [ 1096.374299][ T24] usb 2-1: Manufacturer: syz [ 1096.384141][ T24] usb 2-1: SerialNumber: syz [ 1096.415466][ T24] usb 2-1: config 0 descriptor?? [ 1096.844615][T17814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1097.639749][ T5920] usb 6-1: USB disconnect, device number 90 [ 1097.776761][ T24] asix 2-1:0.239: probe with driver asix failed with error -71 [ 1097.804706][ T24] usb 2-1: USB disconnect, device number 78 [ 1097.871050][T16725] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1097.955269][T17966] Device name cannot be null; rc = [-22] [ 1097.964418][ T51] hsr_slave_0: left promiscuous mode [ 1098.124490][ T51] hsr_slave_1: left promiscuous mode [ 1098.198405][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1098.273269][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1098.655843][T11984] usb 2-1: new high-speed USB device number 79 using dummy_hcd [ 1098.885381][T11984] usb 2-1: Using ep0 maxpacket: 16 [ 1098.909907][T11984] usb 2-1: unable to get BOS descriptor or descriptor too short [ 1098.959428][T11984] usb 2-1: config 13 has an invalid interface number: 50 but max is 0 [ 1098.986450][T11984] usb 2-1: config 13 has no interface number 0 [ 1099.070080][T11984] usb 2-1: config 13 interface 50 altsetting 167 bulk endpoint 0x8 has invalid maxpacket 16 [ 1099.091660][T11984] usb 2-1: config 13 interface 50 has no altsetting 0 [ 1099.149448][T11984] usb 2-1: New USB device found, idVendor=1aca, idProduct=b28e, bcdDevice=92.32 [ 1099.176047][T11984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1099.211117][T11984] usb 2-1: Product: syz [ 1099.225073][T11984] usb 2-1: Manufacturer: syz [ 1099.233114][T11984] usb 2-1: SerialNumber: syz [ 1099.267125][T17975] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 1100.468267][T11984] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 1101.357731][T11984] usb 2-1: MIDIStreaming interface descriptor not found [ 1101.474446][T11984] usb 2-1: USB disconnect, device number 79 [ 1101.721897][ T51] team_slave_1 (unregistering): left promiscuous mode [ 1101.729130][ T51] team_slave_1 (unregistering): left allmulticast mode [ 1101.739141][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1101.773902][ T51] team_slave_0 (unregistering): left promiscuous mode [ 1101.780901][ T51] team_slave_0 (unregistering): left allmulticast mode [ 1101.795335][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1102.009222][T17995] loop1: detected capacity change from 0 to 256 [ 1102.411653][T17814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1102.542353][T17973] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1102.556204][T17973] 8021q: adding VLAN 0 to HW filter on device team0 [ 1102.571435][T17973] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1102.591420][T17981] lo: entered promiscuous mode [ 1102.596360][T17981] lo: entered allmulticast mode [ 1102.603996][T17981] tunl0: entered promiscuous mode [ 1102.609089][T17981] tunl0: entered allmulticast mode [ 1102.615577][T17981] gre0: entered promiscuous mode [ 1102.620584][T17981] gre0: entered allmulticast mode [ 1102.636212][T17981] gretap0: entered promiscuous mode [ 1102.641490][T17981] gretap0: entered allmulticast mode [ 1102.649892][T17981] erspan0: entered promiscuous mode [ 1102.655218][T17981] erspan0: entered allmulticast mode [ 1102.662837][T17981] ip_vti0: entered promiscuous mode [ 1102.668098][T17981] ip_vti0: entered allmulticast mode [ 1102.674609][T17981] ip6_vti0: entered promiscuous mode [ 1102.679895][T17981] ip6_vti0: entered allmulticast mode [ 1102.687307][T17981] sit0: entered promiscuous mode [ 1102.692774][T17981] sit0: entered allmulticast mode [ 1102.702838][T17981] ip6tnl0: entered promiscuous mode [ 1102.708046][T17981] ip6tnl0: entered allmulticast mode [ 1102.715333][T17981] ip6gre0: entered promiscuous mode [ 1102.720534][T17981] ip6gre0: entered allmulticast mode [ 1102.729219][T17981] syz_tun: entered promiscuous mode [ 1102.734528][T17981] syz_tun: entered allmulticast mode [ 1102.750426][T17981] ip6gretap0: entered promiscuous mode [ 1102.755979][T17981] ip6gretap0: entered allmulticast mode [ 1102.766373][T17981] bridge0: entered promiscuous mode [ 1102.771592][T17981] bridge0: entered allmulticast mode [ 1102.777966][T17981] vcan0: entered promiscuous mode [ 1102.783649][T17981] vcan0: entered allmulticast mode [ 1102.789921][T17981] bond0: entered promiscuous mode [ 1102.795111][T17981] bond0: entered allmulticast mode [ 1102.801286][T17981] team0: entered promiscuous mode [ 1102.806363][T17981] team0: entered allmulticast mode [ 1102.812411][T17981] dummy0: entered promiscuous mode [ 1102.817522][T17981] dummy0: entered allmulticast mode [ 1102.826286][T17981] nlmon0: entered promiscuous mode [ 1102.831394][T17981] nlmon0: entered allmulticast mode [ 1102.837627][T17981] caif0: entered promiscuous mode [ 1102.843195][T17981] caif0: entered allmulticast mode [ 1102.848808][T17981] batadv0: entered promiscuous mode [ 1102.854197][T17981] batadv0: entered allmulticast mode [ 1102.859710][T17981] vxcan0: entered promiscuous mode [ 1102.864878][T17981] vxcan0: entered allmulticast mode [ 1102.870250][T17981] vxcan1: entered promiscuous mode [ 1102.875404][T17981] vxcan1: entered allmulticast mode [ 1102.880776][T17981] wg0: entered promiscuous mode [ 1102.885676][T17981] wg0: entered allmulticast mode [ 1102.890796][T17981] wg1: entered promiscuous mode [ 1102.895708][T17981] wg1: entered allmulticast mode [ 1102.900807][T17981] wg2: entered promiscuous mode [ 1102.905694][T17981] wg2: entered allmulticast mode [ 1102.910808][T17981] veth0_to_bridge: entered promiscuous mode [ 1102.916747][T17981] veth0_to_bridge: entered allmulticast mode [ 1102.922986][T17981] bridge_slave_0: entered promiscuous mode [ 1102.928791][T17981] bridge_slave_0: entered allmulticast mode [ 1102.935027][T17981] veth1_to_bridge: entered promiscuous mode [ 1102.940916][T17981] veth1_to_bridge: entered allmulticast mode [ 1102.947108][T17981] bridge_slave_1: entered promiscuous mode [ 1102.952968][T17981] bridge_slave_1: entered allmulticast mode [ 1102.959060][T17981] veth0_to_bond: entered promiscuous mode [ 1102.964815][T17981] veth0_to_bond: entered allmulticast mode [ 1102.970786][T17981] bond_slave_0: entered promiscuous mode [ 1102.976471][T17981] bond_slave_0: entered allmulticast mode [ 1102.982396][T17981] veth1_to_bond: entered promiscuous mode [ 1102.988126][T17981] veth1_to_bond: entered allmulticast mode [ 1102.994249][T17981] bond_slave_1: entered promiscuous mode [ 1102.999882][T17981] bond_slave_1: entered allmulticast mode [ 1103.005852][T17981] veth0_to_team: entered promiscuous mode [ 1103.011639][T17981] veth0_to_team: entered allmulticast mode [ 1103.017648][T17981] team_slave_0: entered promiscuous mode [ 1103.023361][T17981] team_slave_0: entered allmulticast mode [ 1103.029263][T17981] veth1_to_team: entered promiscuous mode [ 1103.035098][T17981] veth1_to_team: entered allmulticast mode [ 1103.041083][T17981] team_slave_1: entered promiscuous mode [ 1103.046927][T17981] team_slave_1: entered allmulticast mode [ 1103.052891][T17981] veth0_to_batadv: entered promiscuous mode [ 1103.058784][T17981] veth0_to_batadv: entered allmulticast mode [ 1103.064983][T17981] batadv_slave_0: entered promiscuous mode [ 1103.070789][T17981] batadv_slave_0: entered allmulticast mode [ 1103.076910][T17981] veth1_to_batadv: entered promiscuous mode [ 1103.082841][T17981] veth1_to_batadv: entered allmulticast mode [ 1103.088989][T17981] batadv_slave_1: entered promiscuous mode [ 1103.094914][T17981] batadv_slave_1: entered allmulticast mode [ 1103.100975][T17981] veth0_to_hsr: entered promiscuous mode [ 1103.106677][T17981] veth0_to_hsr: entered allmulticast mode [ 1103.112609][T17981] hsr_slave_0: entered allmulticast mode [ 1103.118468][T17981] veth1_to_hsr: entered promiscuous mode [ 1103.124170][T17981] veth1_to_hsr: entered allmulticast mode [ 1103.130052][T17981] hsr_slave_1: entered allmulticast mode [ 1103.135900][T17981] hsr0: entered promiscuous mode [ 1103.140846][T17981] hsr0: entered allmulticast mode [ 1103.146120][T17981] veth1_virt_wifi: entered promiscuous mode [ 1103.152082][T17981] veth1_virt_wifi: entered allmulticast mode [ 1103.158320][T17981] veth0_virt_wifi: entered promiscuous mode [ 1103.164284][T17981] veth0_virt_wifi: entered allmulticast mode [ 1103.170447][T17981] veth1_vlan: entered allmulticast mode [ 1103.176221][T17981] veth0_vlan: entered allmulticast mode [ 1103.181994][T17981] vlan0: entered promiscuous mode [ 1103.187212][T17981] vlan0: entered allmulticast mode [ 1103.192584][T17981] vlan1: entered promiscuous mode [ 1103.197797][T17981] vlan1: entered allmulticast mode [ 1103.203144][T17981] macvlan0: entered promiscuous mode [ 1103.208432][T17981] macvlan0: entered allmulticast mode [ 1103.214043][T17981] macvlan1: entered promiscuous mode [ 1103.219341][T17981] macvlan1: entered allmulticast mode [ 1103.224991][T17981] ipvlan0: entered promiscuous mode [ 1103.230188][T17981] ipvlan0: entered allmulticast mode [ 1103.235713][T17981] ipvlan1: entered promiscuous mode [ 1103.240933][T17981] ipvlan1: entered allmulticast mode [ 1103.246473][T17981] veth1_macvtap: entered allmulticast mode [ 1103.252500][T17981] veth0_macvtap: entered allmulticast mode [ 1103.258470][T17981] macvtap0: entered promiscuous mode [ 1103.264457][T17981] macvtap0: entered allmulticast mode [ 1103.270006][T17981] macsec0: entered promiscuous mode [ 1103.275311][T17981] macsec0: entered allmulticast mode [ 1103.280737][T17981] geneve0: entered promiscuous mode [ 1103.286520][T17981] geneve0: entered allmulticast mode [ 1103.292053][T17981] geneve1: entered promiscuous mode [ 1103.297252][T17981] geneve1: entered allmulticast mode [ 1103.303310][T17981] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 1103.310635][T17981] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1103.318269][T17981] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 1103.326123][T17981] netdevsim netdevsim2 netdevsim1: entered allmulticast mode [ 1103.334501][T17981] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 1103.342344][T17981] netdevsim netdevsim2 netdevsim2: entered allmulticast mode [ 1103.349900][T17981] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 1103.357280][T17981] netdevsim netdevsim2 netdevsim3: entered allmulticast mode [ 1103.365496][T17981] mac80211_hwsim hwsim12 wlan0: entered promiscuous mode [ 1103.382756][T17981] mac80211_hwsim hwsim12 wlan0: entered allmulticast mode [ 1103.389572][ T30] audit: type=1326 audit(1780172947.289:352): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.390072][T17981] mac80211_hwsim hwsim13 wlan1: entered promiscuous mode [ 1103.420114][T17981] mac80211_hwsim hwsim13 wlan1: entered allmulticast mode [ 1103.427525][T17981] vlan2: entered promiscuous mode [ 1103.433623][T17981] vlan2: entered allmulticast mode [ 1103.438928][T17981] geneve2: entered promiscuous mode [ 1103.444246][T17981] geneve2: entered allmulticast mode [ 1103.449749][T17981] bridge1: entered promiscuous mode [ 1103.455218][ T30] audit: type=1326 audit(1780172947.289:353): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455279][ T30] audit: type=1326 audit(1780172947.319:354): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455331][ T30] audit: type=1326 audit(1780172947.319:355): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455399][ T30] audit: type=1326 audit(1780172947.319:356): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455450][ T30] audit: type=1326 audit(1780172947.319:357): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455503][ T30] audit: type=1326 audit(1780172947.319:358): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455555][ T30] audit: type=1326 audit(1780172947.319:359): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.455608][ T30] audit: type=1326 audit(1780172947.319:360): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.478148][T17981] bridge1: entered allmulticast mode [ 1103.478341][T17981] bridge2: entered promiscuous mode [ 1103.646045][T17981] bridge2: entered allmulticast mode [ 1103.649442][ T30] audit: type=1326 audit(1780172947.339:361): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18004 comm="syz.1.3713" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1103.651644][T17981] bridge3: entered promiscuous mode [ 1103.679584][T17981] bridge3: entered allmulticast mode [ 1103.685181][T17981] bridge4: entered promiscuous mode [ 1103.690385][T17981] bridge4: entered allmulticast mode [ 1103.696364][T17981] bridge5: entered promiscuous mode [ 1103.701689][T17981] bridge5: entered allmulticast mode [ 1103.707128][T17981] bridge6: entered promiscuous mode [ 1103.723083][T17981] bridge6: entered allmulticast mode [ 1103.728535][T17981] gretap1: entered promiscuous mode [ 1103.734593][T17981] gretap1: entered allmulticast mode [ 1103.740082][T17981] bond1: entered promiscuous mode [ 1103.745781][T17981] bond1: entered allmulticast mode [ 1103.751678][T17981] syztnl1: entered promiscuous mode [ 1103.756874][T17981] syztnl1: entered allmulticast mode [ 1103.762304][T17981] syztnl0: entered promiscuous mode [ 1103.767489][T17981] syztnl0: entered allmulticast mode [ 1103.773852][T17981] gre1: entered promiscuous mode [ 1103.778775][T17981] gre1: entered allmulticast mode [ 1103.784733][T17981] veth2: entered promiscuous mode [ 1103.789757][T17981] veth2: entered allmulticast mode [ 1103.795026][T17981] veth3: entered promiscuous mode [ 1103.800034][T17981] veth3: entered allmulticast mode [ 1103.807620][T17981] bond2: entered promiscuous mode [ 1103.812746][T17981] bond2: entered allmulticast mode [ 1103.818479][T17981] veth4: entered promiscuous mode [ 1103.823660][T17981] veth4: entered allmulticast mode [ 1103.828928][T17981] veth5: entered promiscuous mode [ 1103.834656][T17981] veth5: entered allmulticast mode [ 1103.840401][T17981] bond3: entered promiscuous mode [ 1103.845469][T17981] bond3: entered allmulticast mode [ 1103.851346][T17981] veth0: entered promiscuous mode [ 1103.857014][T17981] veth0: entered allmulticast mode [ 1103.862296][T17981] veth1: entered promiscuous mode [ 1103.867331][T17981] veth1: entered allmulticast mode [ 1105.022501][T17814] team0: Port device team_slave_0 added [ 1105.095793][T18014] faux_driver regulatory: loading /lib/firmware/regulatory.db failed with error -12 [ 1105.105571][T18014] faux_driver regulatory: Direct firmware load for regulatory.db failed with error -12 [ 1105.115545][T18014] faux_driver regulatory: Falling back to sysfs fallback for: regulatory.db [ 1105.260609][T17814] team0: Port device team_slave_1 added [ 1105.619133][T17814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1105.632619][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1105.743200][T17814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1105.848157][T18031] Device name cannot be null; rc = [-22] [ 1106.975739][T18012] loop2: detected capacity change from 0 to 16 [ 1107.968271][T17814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.999512][T17814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1108.244136][T17814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1108.625748][T17814] hsr_slave_0: entered promiscuous mode [ 1108.651756][T17814] hsr_slave_1: entered promiscuous mode [ 1108.716949][T17814] debugfs: 'hsr0' already exists in 'hsr' [ 1108.742575][T17814] Cannot create hsr debugfs directory [ 1108.895474][T18041] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 1114.005980][ T51] IPVS: stop unused estimator thread 0... [ 1114.218866][T18096] bridge0: port 3(syz_tun) entered disabled state [ 1115.086963][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1115.658723][T18112] lo: Caught tx_queue_len zero misconfig [ 1118.969142][T17814] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1119.089146][T17814] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1119.142016][T17814] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1119.239125][T17814] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1119.409512][T18140] Device name cannot be null; rc = [-22] [ 1119.482282][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 1119.482304][ T30] audit: type=1326 audit(1780172963.354:369): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1119.763978][ T30] audit: type=1326 audit(1780172963.354:370): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1119.915209][ T30] audit: type=1326 audit(1780172963.444:371): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1120.098822][ T30] audit: type=1326 audit(1780172963.504:372): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1120.199014][ T30] audit: type=1326 audit(1780172963.504:373): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1120.308911][ T30] audit: type=1326 audit(1780172963.504:374): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18148 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f7369dc1f85 code=0x7ffc0000 [ 1120.362081][ T30] audit: type=1326 audit(1780172963.514:375): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1120.593827][ T30] audit: type=1326 audit(1780172963.514:376): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1121.585182][ T30] audit: type=1326 audit(1780172963.514:377): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1121.608531][ T30] audit: type=1326 audit(1780172963.554:378): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18137 comm="syz.2.3748" exe="/root/syz-executor" sig=0 arch=c000003e syscall=61 compat=0 ip=0x7f7369d8f6c9 code=0x7ffc0000 [ 1121.676545][T17814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1121.813727][T17814] 8021q: adding VLAN 0 to HW filter on device team0 [ 1121.889725][T13141] bridge0: port 1(bridge_slave_0) entered blocking state [ 1121.896977][T13141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1121.980783][T13141] bridge0: port 2(bridge_slave_1) entered blocking state [ 1121.988021][T13141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1122.352379][T16727] Bluetooth: hci0: command 0x0406 tx timeout [ 1126.633606][T17814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1126.884783][T17814] veth0_vlan: entered promiscuous mode [ 1127.055529][T17814] veth1_vlan: entered promiscuous mode [ 1128.151987][T17814] veth0_macvtap: entered promiscuous mode [ 1128.278078][T17814] veth1_macvtap: entered promiscuous mode [ 1128.300111][ T30] kauditd_printk_skb: 3 callbacks suppressed [ 1128.300130][ T30] audit: type=1326 audit(1780172972.221:382): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18207 comm="syz.0.3761" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fe63978f6c9 code=0x0 [ 1128.505646][T17814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1128.580388][ T24] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 1128.594230][T17814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1128.644894][ T51] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.677516][ T51] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.741756][ T51] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.761571][ T24] usb 3-1: config 9 has an invalid interface number: 1 but max is 0 [ 1128.773366][ T51] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1128.894398][ T24] usb 3-1: config 9 has no interface number 0 [ 1128.907851][ T24] usb 3-1: config 9 interface 1 has no altsetting 0 [ 1128.939947][ T24] usb 3-1: string descriptor 0 read error: -22 [ 1128.958886][ T24] usb 3-1: New USB device found, idVendor=2040, idProduct=b140, bcdDevice=75.36 [ 1128.996898][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1129.086710][ T24] cx231xx 3-1:9.1: New device @ 1.5 Mbps (2040:b140) with 1 interfaces [ 1129.147510][ T24] cx231xx 3-1:9.1: Not found matching IAD interface [ 1129.639565][T18234] loop5: detected capacity change from 0 to 256 [ 1130.553241][T18234] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xbe66f6fd, utbl_chksum : 0xe619d30d) [ 1135.735908][T18260] loop4: detected capacity change from 0 to 128 [ 1137.741785][T11984] usb 3-1: USB disconnect, device number 64 [ 1138.265244][T13136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1138.310005][T13136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1140.899532][T18299] Device name cannot be null; rc = [-22] [ 1140.915455][ T30] audit: type=1326 audit(1780172984.832:383): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1141.055296][ T30] audit: type=1326 audit(1780172984.842:384): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1141.188928][ T30] audit: type=1326 audit(1780172984.902:385): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1141.477443][ T30] audit: type=1326 audit(1780172984.902:386): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1141.590146][T18318] netlink: 180 bytes leftover after parsing attributes in process `syz.2.3783'. [ 1142.214769][ T30] audit: type=1326 audit(1780172984.902:387): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.322498][ T30] audit: type=1326 audit(1780172984.922:388): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=49 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.407903][ T30] audit: type=1326 audit(1780172984.922:389): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.541995][ T30] audit: type=1326 audit(1780172984.922:390): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.641239][ T30] audit: type=1326 audit(1780172984.922:391): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=50 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.646462][T18321] loop2: detected capacity change from 0 to 256 [ 1142.725836][T18324] loop1: detected capacity change from 0 to 256 [ 1142.764520][ T30] audit: type=1326 audit(1780172984.922:392): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18304 comm="syz.1.3779" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1142.799300][T18324] exFAT-fs (loop1): bogus number of FAT structure [ 1142.805720][T18324] exFAT-fs (loop1): failed to read boot sector [ 1142.828694][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1142.847553][T18324] exFAT-fs (loop1): failed to recognize exfat type [ 1142.848398][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1142.867823][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1143.144751][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1143.158935][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1143.299947][T18321] FAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1143.504256][T18333] overlay: filesystem on ./file0 not supported [ 1143.518781][T18333] overlay: filesystem on ./file0 not supported [ 1145.295153][T16727] Bluetooth: hci6: command tx timeout [ 1145.872202][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.050517][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1147.393388][T16727] Bluetooth: hci6: command tx timeout [ 1147.470747][T18327] chnl_net:caif_netlink_parms(): no params data found [ 1147.565808][T18370] netlink: 'syz.2.3793': attribute type 4 has an invalid length. [ 1147.573762][T18370] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3793'. [ 1148.684553][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 1148.684576][ T30] audit: type=1326 audit(1780172992.608:395): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.4.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685c18f6c9 code=0x7ffc0000 [ 1149.230138][ T30] audit: type=1326 audit(1780172992.608:396): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18361 comm="syz.4.3795" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f685c18f6c9 code=0x7ffc0000 [ 1149.438415][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1149.451932][T16727] Bluetooth: hci6: command tx timeout [ 1149.694483][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1150.113533][T18401] loop2: detected capacity change from 0 to 256 [ 1150.196460][T18401] FAT-fs (loop2): Directory bread(block 64) failed [ 1150.214467][T18401] FAT-fs (loop2): Directory bread(block 65) failed [ 1150.226004][T18401] FAT-fs (loop2): Directory bread(block 66) failed [ 1150.233636][T18401] FAT-fs (loop2): Directory bread(block 67) failed [ 1150.240804][T18401] FAT-fs (loop2): Directory bread(block 68) failed [ 1150.249139][T18401] FAT-fs (loop2): Directory bread(block 69) failed [ 1150.256290][T18401] FAT-fs (loop2): Directory bread(block 70) failed [ 1150.264897][T18401] FAT-fs (loop2): Directory bread(block 71) failed [ 1150.271846][T18401] FAT-fs (loop2): Directory bread(block 72) failed [ 1150.278401][T18401] FAT-fs (loop2): Directory bread(block 73) failed [ 1150.589703][T18327] bridge0: port 1(bridge_slave_0) entered blocking state [ 1150.597226][T18327] bridge0: port 1(bridge_slave_0) entered disabled state [ 1150.607564][T18327] bridge_slave_0: entered allmulticast mode [ 1150.616910][T18327] bridge_slave_0: entered promiscuous mode [ 1150.627558][T18327] bridge0: port 2(bridge_slave_1) entered blocking state [ 1150.640816][T18327] bridge0: port 2(bridge_slave_1) entered disabled state [ 1150.654787][T18327] bridge_slave_1: entered allmulticast mode [ 1150.672967][T18327] bridge_slave_1: entered promiscuous mode [ 1151.530414][T16727] Bluetooth: hci6: command tx timeout [ 1151.590630][ T51] bridge_slave_1: left allmulticast mode [ 1151.616084][ T51] bridge_slave_1: left promiscuous mode [ 1151.626414][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 1151.741077][ T51] bridge_slave_0: left allmulticast mode [ 1151.763884][ T51] bridge_slave_0: left promiscuous mode [ 1151.830399][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 1156.116766][T18435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1156.124573][T18435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 1156.133482][T18435] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 1156.141406][T18435] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 1157.981829][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1158.021509][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1158.057560][ T51] bond0 (unregistering): Released all slaves [ 1158.310932][ T5967] usb 6-1: new high-speed USB device number 91 using dummy_hcd [ 1158.481066][T18445] loop4: detected capacity change from 0 to 256 [ 1158.500221][T18327] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1158.534610][ T5967] usb 6-1: Using ep0 maxpacket: 32 [ 1158.541972][ T5967] usb 6-1: config 2 has an invalid interface number: 45 but max is 0 [ 1158.552226][ T5967] usb 6-1: config 2 has no interface number 0 [ 1158.585708][ T5967] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 7 [ 1158.607429][T18445] FAT-fs (loop4): Directory bread(block 64) failed [ 1158.613945][T18445] FAT-fs (loop4): Directory bread(block 65) failed [ 1158.626092][ T5967] usb 6-1: config 2 interface 45 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 1158.637990][T18445] FAT-fs (loop4): Directory bread(block 66) failed [ 1158.648266][T18445] FAT-fs (loop4): Directory bread(block 67) failed [ 1158.658938][ T5967] usb 6-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=82.92 [ 1158.668395][T18445] FAT-fs (loop4): Directory bread(block 68) failed [ 1158.676395][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1158.695063][T18445] FAT-fs (loop4): Directory bread(block 69) failed [ 1158.706221][T18445] FAT-fs (loop4): Directory bread(block 70) failed [ 1158.726777][ T5967] usb 6-1: Product: syz [ 1158.730947][ T5967] usb 6-1: Manufacturer: syz [ 1158.735678][T18327] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1158.745562][T18445] FAT-fs (loop4): Directory bread(block 71) failed [ 1158.752133][T18445] FAT-fs (loop4): Directory bread(block 72) failed [ 1158.761614][ T5967] usb 6-1: SerialNumber: syz [ 1158.767059][T18445] FAT-fs (loop4): Directory bread(block 73) failed [ 1158.788799][ T5967] kobil_sct 6-1:2.45: KOBIL USB smart card terminal converter detected [ 1158.828757][ T5967] usb 6-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 1158.957447][T18451] loop2: detected capacity change from 0 to 128 [ 1159.439390][T18327] team0: Port device team_slave_0 added [ 1159.567660][T18327] team0: Port device team_slave_1 added [ 1159.678785][ T51] hsr_slave_0: left promiscuous mode [ 1159.730655][ T51] hsr_slave_1: left promiscuous mode [ 1159.791790][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1159.846326][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1159.907663][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1160.005486][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1160.244861][ T51] veth1_macvtap: left promiscuous mode [ 1160.257657][ T51] veth0_macvtap: left promiscuous mode [ 1160.266916][ T51] veth1_vlan: left promiscuous mode [ 1160.274053][ T51] veth0_vlan: left promiscuous mode [ 1160.390494][T18473] Device name cannot be null; rc = [-22] [ 1161.616010][ T5967] usb 6-1: USB disconnect, device number 91 [ 1161.625654][ T5967] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 1161.771095][T18486] loop4: detected capacity change from 0 to 256 [ 1162.619642][ T5967] kobil_sct 6-1:2.45: device disconnected [ 1162.835150][T18486] FAT-fs (loop4): Directory bread(block 64) failed [ 1162.842182][T18486] FAT-fs (loop4): Directory bread(block 65) failed [ 1162.849503][T18486] FAT-fs (loop4): Directory bread(block 66) failed [ 1162.856437][T18486] FAT-fs (loop4): Directory bread(block 67) failed [ 1162.864439][T18486] FAT-fs (loop4): Directory bread(block 68) failed [ 1162.871871][T18486] FAT-fs (loop4): Directory bread(block 69) failed [ 1162.879389][T18486] FAT-fs (loop4): Directory bread(block 70) failed [ 1162.886210][T18486] FAT-fs (loop4): Directory bread(block 71) failed [ 1162.894324][T18486] FAT-fs (loop4): Directory bread(block 72) failed [ 1162.901055][T18486] FAT-fs (loop4): Directory bread(block 73) failed [ 1163.241114][T16727] Bluetooth: hci1: command 0x0406 tx timeout [ 1164.288321][ T51] team0 (unregistering): Port device team_slave_1 removed [ 1164.335209][ T51] team0 (unregistering): Port device team_slave_0 removed [ 1165.243256][T16727] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1165.254018][T16727] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1165.262427][T16727] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1165.272007][T16727] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1165.281003][T16727] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1165.309225][T18508] loop4: detected capacity change from 0 to 256 [ 1165.415030][T18508] FAT-fs (loop4): Directory bread(block 64) failed [ 1165.442294][T18508] FAT-fs (loop4): Directory bread(block 65) failed [ 1165.469099][T18508] FAT-fs (loop4): Directory bread(block 66) failed [ 1165.482122][T18508] FAT-fs (loop4): Directory bread(block 67) failed [ 1165.498742][T18508] FAT-fs (loop4): Directory bread(block 68) failed [ 1165.505480][T18508] FAT-fs (loop4): Directory bread(block 69) failed [ 1165.524493][T18508] FAT-fs (loop4): Directory bread(block 70) failed [ 1165.535486][T18508] FAT-fs (loop4): Directory bread(block 71) failed [ 1165.545421][T18508] FAT-fs (loop4): Directory bread(block 72) failed [ 1165.555466][T18508] FAT-fs (loop4): Directory bread(block 73) failed [ 1166.183975][T18327] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1166.295953][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.315491][T18518] Device name cannot be null; rc = [-22] [ 1166.322058][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.348462][T18327] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1166.453621][T18327] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1166.464565][T18327] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1166.490511][ C1] vkms_vblank_simulate: vblank timer overrun [ 1166.497616][T18327] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1166.715444][T18327] hsr_slave_0: entered promiscuous mode [ 1166.723111][T18327] hsr_slave_1: entered promiscuous mode [ 1166.734169][T18327] debugfs: 'hsr0' already exists in 'hsr' [ 1166.757701][T18327] Cannot create hsr debugfs directory [ 1167.017010][T18529] input: syz0 as /devices/virtual/input/input52 [ 1167.326402][T18536] loop4: detected capacity change from 0 to 256 [ 1167.357161][T16727] Bluetooth: hci5: command tx timeout [ 1167.419859][T18536] FAT-fs (loop4): Directory bread(block 64) failed [ 1167.488482][T18536] FAT-fs (loop4): Directory bread(block 65) failed [ 1167.527359][T18536] FAT-fs (loop4): Directory bread(block 66) failed [ 1167.574458][T18536] FAT-fs (loop4): Directory bread(block 67) failed [ 1167.602728][T18536] FAT-fs (loop4): Directory bread(block 68) failed [ 1167.741782][T18523] loop2: detected capacity change from 0 to 40427 [ 1167.814897][T18391] syz_tun (unregistering): left allmulticast mode [ 1167.827736][T18536] FAT-fs (loop4): Directory bread(block 69) failed [ 1167.834356][T18536] FAT-fs (loop4): Directory bread(block 70) failed [ 1167.835190][T18523] F2FS-fs (loop2): invalid crc value [ 1167.847086][T18536] FAT-fs (loop4): Directory bread(block 71) failed [ 1167.847193][T18536] FAT-fs (loop4): Directory bread(block 72) failed [ 1167.847240][T18536] FAT-fs (loop4): Directory bread(block 73) failed [ 1168.144712][T18548] xt_hashlimit: size too large, truncated to 1048576 [ 1168.144780][T18548] xt_hashlimit: max too large, truncated to 1048576 [ 1168.242866][T18391] syz_tun (unregistering): left promiscuous mode [ 1168.378817][T18391] bridge0: port 3(syz_tun) entered disabled state [ 1168.553029][T18523] F2FS-fs (loop2): f2fs_recover_fsync_data: recovery fsync data, check_only: 1 [ 1168.565975][T18523] F2FS-fs (loop2): Start checkpoint disabled! [ 1168.579067][T18523] F2FS-fs (loop2): f2fs_disable_checkpoint() finish, err:0 [ 1168.591375][T18523] F2FS-fs (loop2): Mounted with checkpoint version = 48b305e6 [ 1168.740593][T13141] kworker/u8:17: attempt to access beyond end of device [ 1168.740593][T13141] loop2: rw=2049, sector=45096, nr_sectors = 8 limit=40427 [ 1168.763127][T13141] CPU: 1 UID: 0 PID: 13141 Comm: kworker/u8:17 Not tainted syzkaller #0 PREEMPT(full) [ 1168.763158][T13141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1168.763175][T13141] Workqueue: writeback wb_workfn (flush-7:2) [ 1168.763215][T13141] Call Trace: [ 1168.763225][T13141] [ 1168.763237][T13141] dump_stack_lvl+0x189/0x250 [ 1168.763281][T13141] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1168.763318][T13141] ? __pfx_queue_work_on+0x10/0x10 [ 1168.763346][T13141] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1168.763384][T13141] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 1168.763438][T13141] f2fs_handle_critical_error+0x37c/0x540 [ 1168.763488][T13141] f2fs_write_end_io+0x886/0xb60 [ 1168.763543][T13141] __submit_merged_bio+0x27a/0x6a0 [ 1168.763592][T13141] __submit_merged_write_cond+0x255/0x530 [ 1168.763647][T13141] f2fs_write_data_pages+0x261d/0x3000 [ 1168.763723][T13141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1168.763771][T13141] ? __pfx_f2fs_available_free_memory+0x10/0x10 [ 1168.763800][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.763882][T13141] ? __pfx_f2fs_balance_fs_bg+0x10/0x10 [ 1168.763942][T13141] ? trace_f2fs_writepages+0x7f/0x200 [ 1168.763983][T13141] ? f2fs_write_node_pages+0x478/0x6e0 [ 1168.764029][T13141] ? __pfx_f2fs_write_node_pages+0x10/0x10 [ 1168.764074][T13141] ? __lock_acquire+0xab9/0xd20 [ 1168.764112][T13141] ? __pfx_f2fs_write_data_pages+0x10/0x10 [ 1168.764140][T13141] do_writepages+0x32e/0x550 [ 1168.764181][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.764210][T13141] ? reacquire_held_locks+0x127/0x1d0 [ 1168.764240][T13141] ? writeback_sb_inodes+0x384/0x1010 [ 1168.764291][T13141] __writeback_single_inode+0x145/0xff0 [ 1168.764327][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.764355][T13141] ? do_raw_spin_unlock+0x122/0x240 [ 1168.764397][T13141] writeback_sb_inodes+0x6c7/0x1010 [ 1168.764475][T13141] ? __pfx_writeback_sb_inodes+0x10/0x10 [ 1168.764574][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.764611][T13141] ? rcu_is_watching+0x15/0xb0 [ 1168.764642][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.764684][T13141] wb_writeback+0x43b/0xaf0 [ 1168.764734][T13141] ? queue_io+0x321/0x590 [ 1168.764775][T13141] ? __pfx_wb_writeback+0x10/0x10 [ 1168.764827][T13141] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.764870][T13141] wb_workfn+0x409/0xef0 [ 1168.764925][T13141] ? __pfx_wb_workfn+0x10/0x10 [ 1168.764962][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.764991][T13141] ? __lock_acquire+0xab9/0xd20 [ 1168.765034][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.765068][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.765103][T13141] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.765137][T13141] ? process_scheduled_works+0x9ef/0x17b0 [ 1168.765164][T13141] ? process_scheduled_works+0x9ef/0x17b0 [ 1168.765195][T13141] process_scheduled_works+0xae1/0x17b0 [ 1168.765269][T13141] ? __pfx_process_scheduled_works+0x10/0x10 [ 1168.765315][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.765358][T13141] worker_thread+0x8a0/0xda0 [ 1168.765429][T13141] kthread+0x711/0x8a0 [ 1168.765470][T13141] ? __pfx_worker_thread+0x10/0x10 [ 1168.765499][T13141] ? __pfx_kthread+0x10/0x10 [ 1168.765531][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.765566][T13141] ? _raw_spin_unlock_irq+0x23/0x50 [ 1168.765604][T13141] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1168.765632][T13141] ? lockdep_hardirqs_on+0x9c/0x150 [ 1168.765667][T13141] ? __pfx_kthread+0x10/0x10 [ 1168.765704][T13141] ret_from_fork+0x4bc/0x870 [ 1168.765738][T13141] ? __pfx_ret_from_fork+0x10/0x10 [ 1168.765778][T13141] ? __switch_to_asm+0x39/0x70 [ 1168.765798][T13141] ? __switch_to_asm+0x33/0x70 [ 1168.765817][T13141] ? __pfx_kthread+0x10/0x10 [ 1168.765855][T13141] ret_from_fork_asm+0x1a/0x30 [ 1168.765906][T13141] [ 1169.124864][ C1] vkms_vblank_simulate: vblank timer overrun [ 1169.153456][T13141] F2FS-fs (loop2): Stopped filesystem due to reason: 3 [ 1169.453039][T16727] Bluetooth: hci5: command tx timeout [ 1169.890733][T18572] loop5: detected capacity change from 0 to 512 [ 1171.515668][T16727] Bluetooth: hci5: command tx timeout [ 1171.708244][T18572] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1171.721447][T18572] ext4 filesystem being mounted at /643/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1171.808415][T18572] netlink: 'syz.5.3845': attribute type 13 has an invalid length. [ 1172.875494][T18572] gretap0: refused to change device tx_queue_len [ 1172.882122][T18572] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 1173.160816][T18507] chnl_net:caif_netlink_parms(): no params data found [ 1173.225466][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1173.310712][T18581] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3847'. [ 1173.602970][T16727] Bluetooth: hci5: command tx timeout [ 1173.928811][T18600] loop5: detected capacity change from 0 to 256 [ 1174.009607][T18600] FAT-fs (loop5): Directory bread(block 64) failed [ 1174.043451][T18600] FAT-fs (loop5): Directory bread(block 65) failed [ 1174.084438][T18600] FAT-fs (loop5): Directory bread(block 66) failed [ 1174.132881][T18600] FAT-fs (loop5): Directory bread(block 67) failed [ 1174.167643][T18600] FAT-fs (loop5): Directory bread(block 68) failed [ 1174.208659][T18600] FAT-fs (loop5): Directory bread(block 69) failed [ 1174.260526][T18600] FAT-fs (loop5): Directory bread(block 70) failed [ 1174.300924][T18600] FAT-fs (loop5): Directory bread(block 71) failed [ 1174.335491][T18600] FAT-fs (loop5): Directory bread(block 72) failed [ 1174.351725][T18600] FAT-fs (loop5): Directory bread(block 73) failed [ 1174.362502][T18604] loop1: detected capacity change from 0 to 128 [ 1174.433070][ T30] audit: type=1800 audit(1780173018.399:397): pid=18604 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.3853" name="file2" dev="loop1" ino=1048721 res=0 errno=0 [ 1174.460106][T18604] FAT-fs (loop1): error, invalid access to FAT (entry 0x00000100) [ 1174.478778][T18604] FAT-fs (loop1): Filesystem has been set read-only [ 1174.491242][T18604] syz.1.3853: attempt to access beyond end of device [ 1174.491242][T18604] loop1: rw=0, sector=2065, nr_sectors = 8 limit=128 [ 1174.524441][T18611] x_tables: duplicate underflow at hook 4 [ 1174.640385][T18609] Device name cannot be null; rc = [-22] [ 1174.726168][T18616] loop5: detected capacity change from 0 to 256 [ 1174.982198][T18507] bridge0: port 1(bridge_slave_0) entered blocking state [ 1174.989383][T18507] bridge0: port 1(bridge_slave_0) entered disabled state [ 1175.135374][T18507] bridge_slave_0: entered allmulticast mode [ 1175.636469][T18507] bridge_slave_0: entered promiscuous mode [ 1175.663622][T18624] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3861'. [ 1175.674733][T18507] bridge0: port 2(bridge_slave_1) entered blocking state [ 1175.692218][T18507] bridge0: port 2(bridge_slave_1) entered disabled state [ 1175.706852][T18507] bridge_slave_1: entered allmulticast mode [ 1175.729383][T18507] bridge_slave_1: entered promiscuous mode [ 1175.738448][T18626] loop2: detected capacity change from 0 to 256 [ 1175.772243][T18626] exFAT-fs (loop2): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1175.836440][T18626] exFAT-fs (loop2): Medium has reported failures. Some data may be lost. [ 1175.902938][T18626] exFAT-fs (loop2): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 1175.969204][T18626] exFAT-fs (loop2): failed to load alloc-bitmap [ 1176.001798][T18626] exFAT-fs (loop2): failed to recognize exfat type [ 1176.025168][T18634] tipc: Failed to remove unknown binding: 66,1,1/2793692435:2008078076/2008078078 [ 1176.062332][T18634] tipc: Failed to remove unknown binding: 66,1,1/2793692435:2008078076/2008078078 [ 1176.113421][T18507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1176.399629][T18507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1176.588809][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1177.521558][T18507] team0: Port device team_slave_0 added [ 1177.916462][T18507] team0: Port device team_slave_1 added [ 1179.960543][T18677] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3875'. [ 1180.029596][T18507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1180.051497][T18507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.111616][T18507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1180.139230][T18684] loop2: detected capacity change from 0 to 512 [ 1180.163268][T18507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1180.173266][T18507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1180.214877][T18507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1180.308733][ T36] bridge_slave_1: left allmulticast mode [ 1180.333299][ T36] bridge_slave_1: left promiscuous mode [ 1180.380147][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 1180.450152][ T36] bridge_slave_0: left allmulticast mode [ 1180.462909][ T36] bridge_slave_0: left promiscuous mode [ 1180.481927][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 1182.263540][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1182.274204][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1182.283713][ T36] bond0 (unregistering): Released all slaves [ 1182.361863][ T36] bond1 (unregistering): Released all slaves [ 1182.382547][T18327] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1182.411925][T18327] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1182.441274][T18327] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1182.467360][T18327] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1183.550645][ T36] tipc: Left network mode [ 1183.961386][T18507] hsr_slave_0: entered promiscuous mode [ 1183.983640][T18507] hsr_slave_1: entered promiscuous mode [ 1184.005297][T18507] debugfs: 'hsr0' already exists in 'hsr' [ 1184.020151][T18507] Cannot create hsr debugfs directory [ 1184.035871][T18763] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3889'. [ 1185.354430][T18804] macsec1: entered promiscuous mode [ 1185.360314][T18804] bridge0: port 1(macsec1) entered blocking state [ 1185.366873][T18804] bridge0: port 1(macsec1) entered disabled state [ 1185.373464][T18804] macsec1: entered allmulticast mode [ 1185.411497][T18804] macsec1: left allmulticast mode [ 1185.440357][T18814] loop5: detected capacity change from 0 to 512 [ 1185.463734][T18812] loop4: detected capacity change from 0 to 256 [ 1185.502949][T18812] exFAT-fs (loop4): bogus number of FAT structure [ 1185.509397][T18812] exFAT-fs (loop4): failed to read boot sector [ 1185.552277][T18812] exFAT-fs (loop4): failed to recognize exfat type [ 1185.562335][ T36] hsr_slave_0: left promiscuous mode [ 1185.705955][ T36] hsr_slave_1: left promiscuous mode [ 1185.712029][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1185.761066][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1185.863537][ T30] audit: type=1326 audit(1780173029.838:398): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=18811 comm="syz.4.3892" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f685c18f6c9 code=0x0 [ 1187.205042][ T36] team0 (unregistering): Port device team_slave_1 removed [ 1187.248437][ T36] team0 (unregistering): Port device team_slave_0 removed [ 1188.607631][T18327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1188.746474][T18327] 8021q: adding VLAN 0 to HW filter on device team0 [ 1188.768196][T18507] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1188.995440][T18852] loop1: detected capacity change from 0 to 40427 [ 1189.003775][T18852] F2FS-fs (loop1): Invalid log_blocksize (268), supports only 12 [ 1189.013111][T18852] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1189.467018][T18852] F2FS-fs (loop1): invalid crc value [ 1189.612364][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1189.619510][T18771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1189.630935][T18507] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1189.768044][T18771] bridge0: port 2(bridge_slave_1) entered blocking state [ 1189.775220][T18771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1189.862063][T18507] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1189.925288][T18852] F2FS-fs (loop1): f2fs_recover_fsync_data: recovery fsync data, check_only: 0 [ 1189.961354][T18507] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1189.971539][T18852] F2FS-fs (loop1): Try to recover 1th superblock, ret: 0 [ 1190.003370][T18852] F2FS-fs (loop1): Mounted with checkpoint version = 48b305e5 [ 1191.170566][T18904] kthread_run failed with err -4 [ 1191.462258][ T36] IPVS: stop unused estimator thread 0... [ 1191.568053][T18327] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1192.799115][T18507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1192.969872][T18507] 8021q: adding VLAN 0 to HW filter on device team0 [ 1193.013741][T18777] bridge0: port 1(bridge_slave_0) entered blocking state [ 1193.020966][T18777] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1193.116948][T18777] bridge0: port 2(bridge_slave_1) entered blocking state [ 1193.124126][T18777] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1193.238140][T18925] lo: Caught tx_queue_len zero misconfig [ 1194.790604][T18327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.043657][T18327] veth0_vlan: entered promiscuous mode [ 1195.152167][T18507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1195.206417][T18327] veth1_vlan: entered promiscuous mode [ 1195.296661][T18327] veth0_macvtap: entered promiscuous mode [ 1196.899642][T18327] veth1_macvtap: entered promiscuous mode [ 1197.553247][T18982] loop2: detected capacity change from 0 to 256 [ 1198.195969][T18327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1198.217257][T18327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1198.354678][T18793] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.433325][T18793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.506435][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.554274][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1198.895582][T18507] veth0_vlan: entered promiscuous mode [ 1198.954396][T18507] veth1_vlan: entered promiscuous mode [ 1198.987791][T18996] netlink: 'syz.4.3927': attribute type 12 has an invalid length. [ 1199.093965][T18507] veth0_macvtap: entered promiscuous mode [ 1199.141382][T18507] veth1_macvtap: entered promiscuous mode [ 1200.016123][T18507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1200.077639][T18507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1200.171242][T18803] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.213393][T18803] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.329661][T18803] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.378751][T18803] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1200.705179][T19020] netlink: 'syz.5.3934': attribute type 4 has an invalid length. [ 1200.733474][T19020] netlink: 3657 bytes leftover after parsing attributes in process `syz.5.3934'. [ 1200.815143][ T5844] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1200.825976][ T5844] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1200.835585][ T5844] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1200.844831][T13136] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1200.856181][T13136] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1200.857091][ T5844] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1200.873854][ T5844] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1201.287257][T18793] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1201.535543][T19034] netlink: 'syz.2.3936': attribute type 4 has an invalid length. [ 1201.543449][T19034] netlink: 17 bytes leftover after parsing attributes in process `syz.2.3936'. [ 1202.064435][T13136] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1202.267484][T13136] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1202.432693][T18793] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.729805][T18793] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1202.930231][ T5844] Bluetooth: hci4: command tx timeout [ 1203.303241][T18793] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1203.479223][T19057] netlink: 'syz.2.3942': attribute type 46 has an invalid length. [ 1203.494696][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3942'. [ 1203.827961][T19062] sock: sock_timestamping_bind_phc: sock not bind to device [ 1204.220690][T18793] bridge_slave_1: left allmulticast mode [ 1204.227125][T18793] bridge_slave_1: left promiscuous mode [ 1204.233814][T18793] bridge0: port 2(bridge_slave_1) entered disabled state [ 1204.266805][T18793] bridge_slave_0: left allmulticast mode [ 1204.284534][T18793] bridge_slave_0: left promiscuous mode [ 1204.300228][T18793] bridge0: port 1(bridge_slave_0) entered disabled state [ 1204.928971][T11984] usb 6-1: new high-speed USB device number 92 using dummy_hcd [ 1205.010352][ T5844] Bluetooth: hci4: command tx timeout [ 1205.088600][T11984] usb 6-1: Using ep0 maxpacket: 16 [ 1205.134675][T11984] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1205.267591][T11984] usb 6-1: config 0 has no interface number 0 [ 1205.311247][T11984] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1205.320758][T11984] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.329613][T11984] usb 6-1: Product: syz [ 1205.333895][T11984] usb 6-1: Manufacturer: syz [ 1205.339734][T11984] usb 6-1: SerialNumber: syz [ 1205.347505][T11984] usb 6-1: config 0 descriptor?? [ 1205.358556][T11984] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1205.426005][ T5913] usb 5-1: new high-speed USB device number 90 using dummy_hcd [ 1205.559369][T18793] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1205.575806][T11984] gspca_spca1528: reg_w err -71 [ 1205.585631][T18793] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1205.598315][T11984] spca1528 6-1:0.1: probe with driver spca1528 failed with error -71 [ 1205.610218][T18793] bond0 (unregistering): Released all slaves [ 1205.619868][ T5913] usb 5-1: Using ep0 maxpacket: 32 [ 1205.620829][T11984] usb 6-1: USB disconnect, device number 92 [ 1205.653780][ T5913] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1205.687706][T19023] chnl_net:caif_netlink_parms(): no params data found [ 1205.692612][ T5913] usb 5-1: config 0 has no interface number 0 [ 1205.806532][ T5913] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1205.823214][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1205.852450][ T5913] usb 5-1: Product: syz [ 1205.886662][ T5913] usb 5-1: Manufacturer: syz [ 1205.947402][ T5913] usb 5-1: SerialNumber: syz [ 1206.046882][ T5913] usb 5-1: config 0 descriptor?? [ 1206.077196][ T5913] smsc95xx v2.0.0 [ 1206.163630][T18793] hsr_slave_0: left promiscuous mode [ 1206.188641][T18793] hsr_slave_1: left promiscuous mode [ 1206.229098][T18793] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1206.282174][T18793] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1206.430135][T18793] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1206.497262][T18793] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1206.504223][ T5913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1206.549634][ T5913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1206.615190][T18793] veth1_macvtap: left promiscuous mode [ 1206.653625][T18793] veth0_macvtap: left promiscuous mode [ 1206.767395][T18793] veth1_vlan: left promiscuous mode [ 1206.772743][T18793] veth0_vlan: left promiscuous mode [ 1207.086872][ T5844] Bluetooth: hci4: command tx timeout [ 1207.447330][ T5913] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1207.487240][ T5913] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -61 [ 1208.722670][ T5913] usb 5-1: USB disconnect, device number 90 [ 1208.742599][T18793] team0 (unregistering): Port device team_slave_1 removed [ 1208.816377][T18793] team0 (unregistering): Port device team_slave_0 removed [ 1209.165392][ T5844] Bluetooth: hci4: command tx timeout [ 1209.285785][T19114] overlayfs: overlapping lowerdir path [ 1209.422916][T19115] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 1210.261775][T19023] bridge0: port 1(bridge_slave_0) entered blocking state [ 1210.271381][T19023] bridge0: port 1(bridge_slave_0) entered disabled state [ 1210.283523][T19023] bridge_slave_0: entered allmulticast mode [ 1210.291853][T19023] bridge_slave_0: entered promiscuous mode [ 1210.303146][T19023] bridge0: port 2(bridge_slave_1) entered blocking state [ 1210.317193][T19023] bridge0: port 2(bridge_slave_1) entered disabled state [ 1210.331965][T19023] bridge_slave_1: entered allmulticast mode [ 1210.348624][T19023] bridge_slave_1: entered promiscuous mode [ 1210.555672][T19023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1210.600238][T19023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1210.850232][T19023] team0: Port device team_slave_0 added [ 1210.910845][T19023] team0: Port device team_slave_1 added [ 1212.028746][T19155] netlink: 60 bytes leftover after parsing attributes in process `syz.5.3964'. [ 1213.059852][ T5967] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 1213.244011][ T5967] usb 3-1: Using ep0 maxpacket: 32 [ 1213.252827][ T5967] usb 3-1: config 0 has an invalid interface number: 67 but max is 0 [ 1213.281254][ T5967] usb 3-1: config 0 has no interface number 0 [ 1213.331561][ T5967] usb 3-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1213.352503][ T5967] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1213.360505][ T5967] usb 3-1: Product: syz [ 1213.433102][ T5967] usb 3-1: Manufacturer: syz [ 1213.450097][ T5967] usb 3-1: SerialNumber: syz [ 1213.455357][T19141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1213.493876][ T5967] usb 3-1: config 0 descriptor?? [ 1213.542967][ T5967] smsc95xx v2.0.0 [ 1213.551422][T19141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1213.680908][T19182] program syz.4.3971 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 1213.940035][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1214.012287][T19183] usb 5-1: new high-speed USB device number 91 using dummy_hcd [ 1214.157571][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1214.334689][T18771] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.394615][T18771] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1214.465620][T19183] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 1214.534817][T19183] usb 5-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 1214.583795][T19183] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1214.603322][T19023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1214.640983][T19183] usb 5-1: Product: syz [ 1214.651987][T19183] usb 5-1: Manufacturer: syz [ 1214.677128][T19183] usb 5-1: SerialNumber: syz [ 1214.708054][T19183] usb 5-1: config 0 descriptor?? [ 1214.775564][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1214.801489][ C0] vkms_vblank_simulate: vblank timer overrun [ 1214.999669][T19211] netlink: 120 bytes leftover after parsing attributes in process `syz.1.3972'. [ 1215.022046][ T5967] smsc95xx 3-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 1215.041064][T19023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1215.057941][ T5967] smsc95xx 3-1:0.67: probe with driver smsc95xx failed with error -61 [ 1215.103733][T18771] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.152399][T18771] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 1215.300193][T19023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1215.366268][T19023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1215.503288][T19023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1215.947850][T19023] hsr_slave_0: entered promiscuous mode [ 1216.019980][T19023] hsr_slave_1: entered promiscuous mode [ 1216.228119][ T5967] usb 3-1: USB disconnect, device number 65 [ 1217.337543][T19183] usb 5-1: USB disconnect, device number 91 [ 1217.637129][T19242] tipc: Enabling of bearer rejected, already enabled [ 1217.954465][T19249] netlink: 'syz.6.3981': attribute type 4 has an invalid length. [ 1217.962802][T19249] netlink: 17 bytes leftover after parsing attributes in process `syz.6.3981'. [ 1218.062461][T19253] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3985'. [ 1219.471970][T19269] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1221.169735][T19287] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 1221.736393][T19023] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 1221.801002][T19023] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 1221.847694][T19023] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 1221.989727][T19023] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 1222.325115][T19023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1222.460862][T19023] 8021q: adding VLAN 0 to HW filter on device team0 [ 1222.512904][T18771] bridge0: port 1(bridge_slave_0) entered blocking state [ 1222.520108][T18771] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1222.601502][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 1222.608700][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1222.673895][T19316] veth0: entered promiscuous mode [ 1222.766100][T19315] veth0: left promiscuous mode [ 1222.813591][T19023] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1223.251639][T19325] tipc: Enabling of bearer rejected, already enabled [ 1223.706663][T19023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1224.185244][T19023] veth0_vlan: entered promiscuous mode [ 1224.232051][T19023] veth1_vlan: entered promiscuous mode [ 1224.445542][T19023] veth0_macvtap: entered promiscuous mode [ 1224.516622][T19023] veth1_macvtap: entered promiscuous mode [ 1224.638808][T19023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1224.716689][T19023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1224.879604][T18792] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.891597][T18793] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.915238][T18803] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1224.955676][T18803] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1226.482911][T19364] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4004'. [ 1227.981782][T18792] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.034490][T18792] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1228.137708][T18803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1228.170946][T18803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1229.597039][T19391] veth0: entered promiscuous mode [ 1229.831621][T19389] veth0: left promiscuous mode [ 1230.286203][T19398] wireguard0: entered promiscuous mode [ 1230.292505][T19398] wireguard0: entered allmulticast mode [ 1232.179144][T19424] netlink: 120 bytes leftover after parsing attributes in process `syz.1.4012'. [ 1232.342310][T19426] Invalid ELF header type: 3 != 1 [ 1233.265739][T19434] loop4: detected capacity change from 0 to 256 [ 1234.571938][T19452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4018'. [ 1236.136104][ T5967] usb 6-1: new high-speed USB device number 93 using dummy_hcd [ 1236.188279][T16727] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1236.201879][T16727] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1236.209726][T16727] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1236.273197][T16727] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1236.292082][T16727] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1236.425870][ T5967] usb 6-1: Using ep0 maxpacket: 16 [ 1236.495237][ T5967] usb 6-1: config index 0 descriptor too short (expected 65535, got 1289) [ 1236.550276][ T5967] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1236.605417][ T5967] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.639305][ T5967] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1236.690864][ T5967] usb 6-1: config index 1 descriptor too short (expected 65535, got 1289) [ 1236.720775][ T5967] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1236.737574][T19474] loop6: detected capacity change from 0 to 512 [ 1236.794706][ T5967] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1236.831318][T19474] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1236.839913][ T5967] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1236.928915][T19474] EXT4-fs error (device loop6): ext4_iget_extra_inode:5075: inode #17: comm syz.6.4022: corrupted in-inode xattr: invalid size in ea xattr [ 1236.975142][ T5967] usb 6-1: config index 2 descriptor too short (expected 65535, got 1289) [ 1237.030310][ T5967] usb 6-1: config 255 has too many interfaces: 255, using maximum allowed: 32 [ 1237.060234][T19474] EXT4-fs error (device loop6): ext4_orphan_get:1397: comm syz.6.4022: couldn't read orphan inode 17 (err -117) [ 1237.098588][ T5967] usb 6-1: config 255 has an invalid descriptor of length 0, skipping remainder of the config [ 1237.127374][T19474] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1237.150452][ T5967] usb 6-1: config 255 has 0 interfaces, different from the descriptor's value: 255 [ 1237.208046][ T5967] usb 6-1: string descriptor 0 read error: -71 [ 1237.222902][ T5967] usb 6-1: New USB device found, idVendor=0403, idProduct=e80c, bcdDevice=fb.ba [ 1237.232853][ T5967] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1237.244919][ T5967] usb 6-1: rejected 3 configurations due to insufficient available bus power [ 1237.303850][T19474] netlink: 24 bytes leftover after parsing attributes in process `syz.6.4022'. [ 1237.322667][ T5967] usb 6-1: no configuration chosen from 3 choices [ 1237.527298][ T5967] usb 6-1: USB disconnect, device number 93 [ 1237.878165][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1238.229327][T18507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1238.435426][T16727] Bluetooth: hci2: command tx timeout [ 1240.593111][T16727] Bluetooth: hci2: command tx timeout [ 1242.870456][ T5844] Bluetooth: hci2: command tx timeout [ 1244.016624][T18793] bond0 (unregistering): Released all slaves [ 1244.145255][T19559] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4038'. [ 1244.274137][T18793] bond1 (unregistering): Released all slaves [ 1244.461821][T18793] bond2 (unregistering): Released all slaves [ 1244.613481][T18793] bond3 (unregistering): Released all slaves [ 1244.753583][T19468] chnl_net:caif_netlink_parms(): no params data found [ 1244.914705][ T5844] Bluetooth: hci2: command tx timeout [ 1245.285917][T18793] tipc: Disabling bearer [ 1245.305480][T18793] tipc: Left network mode [ 1246.772392][T19583] netlink: 'syz.1.4044': attribute type 4 has an invalid length. [ 1246.780203][T19583] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4044'. [ 1248.301392][T19468] bridge0: port 1(bridge_slave_0) entered blocking state [ 1248.463249][T19468] bridge0: port 1(bridge_slave_0) entered disabled state [ 1248.499404][T19468] bridge_slave_0: entered allmulticast mode [ 1248.599943][T19468] bridge_slave_0: entered promiscuous mode [ 1248.716984][T19468] bridge0: port 2(bridge_slave_1) entered blocking state [ 1248.736788][T19468] bridge0: port 2(bridge_slave_1) entered disabled state [ 1248.765493][T19468] bridge_slave_1: entered allmulticast mode [ 1248.789079][T19468] bridge_slave_1: entered promiscuous mode [ 1248.893430][T19603] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1248.965192][T19606] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4050'. [ 1249.202770][T19468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1249.326362][T19615] loop3: detected capacity change from 0 to 1024 [ 1249.989830][T19468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1250.003829][T19615] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1250.060735][T19615] ext4 filesystem being mounted at /11/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 1251.280392][T19023] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1251.823143][T19651] netlink: 'syz.5.4060': attribute type 6 has an invalid length. [ 1252.717214][T19661] loop6: detected capacity change from 0 to 4096 [ 1252.763622][T19661] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1253.359206][T19468] team0: Port device team_slave_0 added [ 1253.379252][T19468] team0: Port device team_slave_1 added [ 1253.645831][T19468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1253.655132][T19670] netlink: 28 bytes leftover after parsing attributes in process `syz.5.4066'. [ 1253.678745][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1253.680733][T18507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1253.770079][T19468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1253.823563][T19468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1253.864437][T19468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1254.101743][T19676] ip6t_REJECT: ECHOREPLY is not supported [ 1254.143763][T19468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1254.243990][T19187] usb 2-1: new high-speed USB device number 80 using dummy_hcd [ 1254.569749][T19187] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1254.687320][T19187] usb 2-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 1254.785844][T19679] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 1254.813666][T19187] usb 2-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 1254.832211][T19187] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1254.893965][T19187] usb 2-1: config 0 descriptor?? [ 1255.172734][T19468] hsr_slave_0: entered promiscuous mode [ 1255.201023][T19468] hsr_slave_1: entered promiscuous mode [ 1255.207733][T19468] debugfs: 'hsr0' already exists in 'hsr' [ 1255.226963][T19468] Cannot create hsr debugfs directory [ 1255.330053][T19187] cp2112 0003:10C4:EA90.0034: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.1-1/input0 [ 1255.520345][T19187] cp2112 0003:10C4:EA90.0034: Part Number: 0x03 Device Version: 0xAD [ 1255.566765][T18793] IPVS: stop unused estimator thread 0... [ 1255.944141][T19187] cp2112 0003:10C4:EA90.0034: error setting SMBus config [ 1256.272956][T19187] cp2112 0003:10C4:EA90.0034: probe with driver cp2112 failed with error -71 [ 1256.515926][ T30] audit: type=1326 audit(1780173100.528:399): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19711 comm="syz.3.4077" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f36a5d8f6c9 code=0x0 [ 1256.544418][T19187] usb 2-1: USB disconnect, device number 80 [ 1257.803448][T19747] loop6: detected capacity change from 0 to 512 [ 1257.812925][T19747] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1258.005855][T19747] EXT4-fs (loop6): 1 truncate cleaned up [ 1258.013460][T19747] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1258.883545][T19166] usb 7-1: new full-speed USB device number 2 using dummy_hcd [ 1259.119844][T19166] usb 7-1: config 0 has an invalid interface number: 239 but max is 0 [ 1259.144427][ T30] audit: type=1326 audit(1780173103.160:400): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36a5d86567 code=0x7ffc0000 [ 1259.230322][T19166] usb 7-1: config 0 has no interface number 0 [ 1259.236469][T19166] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x1 has invalid maxpacket 991, setting to 64 [ 1259.342031][T19468] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 1259.390350][ T30] audit: type=1326 audit(1780173103.170:401): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36a5d2b789 code=0x7ffc0000 [ 1259.417286][T19468] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 1259.432611][T19166] usb 7-1: config 0 interface 239 altsetting 0 endpoint 0x82 has invalid maxpacket 255, setting to 64 [ 1259.500403][T19166] usb 7-1: New USB device found, idVendor=6189, idProduct=182d, bcdDevice= 1.73 [ 1259.509465][T19166] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1259.524745][T19468] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 1259.556319][ T30] audit: type=1326 audit(1780173103.170:402): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36a5d86567 code=0x7ffc0000 [ 1259.616919][T19166] usb 7-1: Product: syz [ 1259.648697][T19166] usb 7-1: Manufacturer: syz [ 1259.655732][T19468] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 1259.680119][T19166] usb 7-1: SerialNumber: syz [ 1259.704385][ T30] audit: type=1326 audit(1780173103.170:403): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f36a5d2b789 code=0x7ffc0000 [ 1259.753641][T19166] usb 7-1: config 0 descriptor?? [ 1259.952468][ T30] audit: type=1326 audit(1780173103.170:404): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a5d8f6c9 code=0x7ffc0000 [ 1260.134631][ T30] audit: type=1326 audit(1780173103.170:405): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f36a5d8f6c9 code=0x7ffc0000 [ 1260.245609][ T30] audit: type=1326 audit(1780173103.170:406): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=56 compat=0 ip=0x7f36a5d8f6c9 code=0x7ffc0000 [ 1260.365445][ T30] audit: type=1326 audit(1780173103.230:407): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19769 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=230 compat=0 ip=0x7f36a5dc1f85 code=0x7ffc0000 [ 1260.452465][T19468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1260.543310][ T30] audit: type=1326 audit(1780173103.230:408): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=19767 comm="syz.3.4092" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f36a5d86567 code=0x7ffc0000 [ 1260.684806][T19798] loop1: detected capacity change from 0 to 128 [ 1261.496028][T19468] 8021q: adding VLAN 0 to HW filter on device team0 [ 1261.572035][T18507] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1261.612220][T19166] asix 7-1:0.239: probe with driver asix failed with error -71 [ 1261.634896][T18756] bridge0: port 1(bridge_slave_0) entered blocking state [ 1261.642060][T18756] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1261.682821][T18756] bridge0: port 2(bridge_slave_1) entered blocking state [ 1261.690007][T18756] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1262.640964][T19166] usb 7-1: USB disconnect, device number 2 [ 1264.839393][T19468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1264.989574][T19468] veth0_vlan: entered promiscuous mode [ 1265.015200][T19468] veth1_vlan: entered promiscuous mode [ 1265.040230][T19830] loop1: detected capacity change from 0 to 4096 [ 1265.059183][T19830] EXT4-fs: Ignoring removed mblk_io_submit option [ 1265.096168][T19468] veth0_macvtap: entered promiscuous mode [ 1265.106244][T19468] veth1_macvtap: entered promiscuous mode [ 1265.116649][T19830] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1265.138400][T19468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1265.160194][T19468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1265.205966][T19830] EXT4-fs (loop1): Test dummy encryption mode enabled [ 1265.230636][T18764] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.230957][T19830] EXT4-fs (loop1): can't mount with data_err=abort, fs mounted w/o journal [ 1265.275648][T18764] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.310861][T18764] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1265.341653][T18764] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1266.220858][T19844] loop5: detected capacity change from 0 to 512 [ 1266.229492][T19844] EXT4-fs: Ignoring removed mblk_io_submit option [ 1266.264090][T19844] EXT4-fs: Ignoring removed nomblk_io_submit option [ 1266.272695][T18800] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1266.285434][T19844] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1266.313966][T19844] EXT4-fs (loop5): feature flags set on rev 0 fs, running e2fsck is recommended [ 1266.344193][T19844] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=8842c098, mo2=0002] [ 1266.367021][T18800] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1266.413070][T19844] EXT4-fs error (device loop5): ext4_mb_generate_buddy:1289: group 0, block bitmap and bg descriptor inconsistent: 97 vs 41 free clusters [ 1266.566841][T19856] loop1: detected capacity change from 0 to 128 [ 1267.492002][T19844] __quota_error: 6 callbacks suppressed [ 1267.492023][T19844] Quota error (device loop5): write_blk: dquota write failed [ 1268.495336][T18800] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1268.526043][T19844] Quota error (device loop5): find_free_dqentry: Can't write quota data block 5 [ 1268.724695][T18800] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1269.230589][T19844] Quota error (device loop5): write_blk: dquota write failed [ 1269.238388][T19844] Quota error (device loop5): qtree_write_dquot: Error -28 occurred while creating quota [ 1269.238445][T19857] netlink: 'syz.4.4116': attribute type 1 has an invalid length. [ 1269.248276][T19844] EXT4-fs error (device loop5): ext4_acquire_dquot:6945: comm syz.5.4114: Failed to acquire dquot type 1 [ 1269.306026][T19844] EXT4-fs (loop5): 1 truncate cleaned up [ 1269.360107][T19860] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4116'. [ 1269.416913][T19844] EXT4-fs (loop5): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1269.459253][T19857] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1269.502331][T19862] bond1: entered allmulticast mode [ 1269.714369][ T5832] EXT4-fs (loop5): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1272.772583][T16727] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1272.801943][T16727] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1272.817501][T16727] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1272.825749][T16727] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1272.841966][T16727] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1273.022491][T19886] tipc: Failed to remove unknown binding: 66,1,1/0:2088115455/2088115457 [ 1273.030952][T19886] tipc: Failed to remove unknown binding: 66,1,1/0:2088115455/2088115457 [ 1274.128994][T19890] loop4: detected capacity change from 0 to 4096 [ 1274.291608][T19890] EXT4-fs: Ignoring removed mblk_io_submit option [ 1274.333469][T19890] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1274.390760][T19890] EXT4-fs (loop4): Test dummy encryption mode enabled [ 1274.421821][T19890] EXT4-fs (loop4): can't mount with data_err=abort, fs mounted w/o journal [ 1275.000131][ T5844] Bluetooth: hci6: command tx timeout [ 1275.932595][T19914] Device name cannot be null; rc = [-22] [ 1277.038803][ T5844] Bluetooth: hci6: command tx timeout [ 1277.266196][T19881] chnl_net:caif_netlink_parms(): no params data found [ 1278.981387][T19955] loop3: detected capacity change from 0 to 4096 [ 1278.988718][T19955] EXT4-fs: Ignoring removed mblk_io_submit option [ 1278.996140][T19955] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1279.005356][T19955] EXT4-fs (loop3): Test dummy encryption mode enabled [ 1279.012645][T19955] EXT4-fs (loop3): can't mount with data_err=abort, fs mounted w/o journal [ 1279.063120][T19881] bridge0: port 1(bridge_slave_0) entered blocking state [ 1279.279893][T19881] bridge0: port 1(bridge_slave_0) entered disabled state [ 1279.287952][T19881] bridge_slave_0: entered allmulticast mode [ 1279.295819][T19881] bridge_slave_0: entered promiscuous mode [ 1279.384011][ T5844] Bluetooth: hci6: command tx timeout [ 1280.311175][T19881] bridge0: port 2(bridge_slave_1) entered blocking state [ 1281.361299][T19881] bridge0: port 2(bridge_slave_1) entered disabled state [ 1281.368871][T19881] bridge_slave_1: entered allmulticast mode [ 1281.376797][T19881] bridge_slave_1: entered promiscuous mode [ 1281.445941][ T5844] Bluetooth: hci6: command tx timeout [ 1281.796696][T19975] input: syz0 as /devices/virtual/input/input54 [ 1282.975942][T19881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1285.207211][T19881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1286.497882][T20001] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 1286.720407][ T30] audit: type=1326 audit(1780173130.758:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1286.793262][ T30] audit: type=1326 audit(1780173130.758:416): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1286.797310][T20000] bridge0: entered promiscuous mode [ 1286.821456][ T30] audit: type=1326 audit(1780173130.758:417): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1286.821883][T20000] macsec1: entered promiscuous mode [ 1286.851086][T20000] bridge0: port 3(macsec1) entered blocking state [ 1286.857678][T20000] bridge0: port 3(macsec1) entered disabled state [ 1286.864271][T20000] macsec1: entered allmulticast mode [ 1286.869555][T20000] bridge0: entered allmulticast mode [ 1286.876652][ T30] audit: type=1326 audit(1780173130.758:418): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1286.917379][ T30] audit: type=1326 audit(1780173130.758:419): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1287.124507][ T30] audit: type=1326 audit(1780173130.768:420): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1287.145690][T20010] loop6: detected capacity change from 0 to 512 [ 1287.156307][T20010] FAT-fs (loop6): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 1287.166816][ T30] audit: type=1326 audit(1780173130.768:421): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1287.200171][T20000] macsec1: left allmulticast mode [ 1287.205687][T20000] bridge0: left allmulticast mode [ 1287.211801][T20000] bridge0: left promiscuous mode [ 1287.455702][ T30] audit: type=1326 audit(1780173130.768:422): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1287.478858][ T30] audit: type=1326 audit(1780173130.768:423): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1287.501860][ T30] audit: type=1326 audit(1780173130.808:424): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=20004 comm="syz.1.4162" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd7a838f6c9 code=0x7ffc0000 [ 1288.516868][T19881] team0: Port device team_slave_0 added [ 1288.548875][T19881] team0: Port device team_slave_1 added [ 1290.202535][T19881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1290.212789][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1290.280201][T19881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1290.452105][T19881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1290.584875][T20039] loop4: detected capacity change from 0 to 16 [ 1290.611253][T20039] erofs (device loop4): mounted with root inode @ nid 36. [ 1290.683560][ T5844] erofs (device loop4): failed to decompress -26 in[46, 0] out[9000] [ 1290.696242][T20040] x_tables: duplicate underflow at hook 1 [ 1290.745975][T19881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 1291.091729][T20039] erofs (device loop4): failed to decompress -26 in[46, 4050] out[8192] [ 1291.100394][T20039] erofs (device loop4): read error -117 @ 1 of nid 89 [ 1291.113836][ T5844] Bluetooth: hci5: command 0x0406 tx timeout [ 1291.119977][T19881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1295.336525][T20068] loop4: detected capacity change from 0 to 256 [ 1295.350628][T20068] FAT-fs (loop4): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 1295.460574][T19881] hsr_slave_0: entered promiscuous mode [ 1295.484885][T19881] hsr_slave_1: entered promiscuous mode [ 1295.496849][T19881] debugfs: 'hsr0' already exists in 'hsr' [ 1295.502904][T19881] Cannot create hsr debugfs directory [ 1295.509818][T18803] bridge_slave_1: left allmulticast mode [ 1295.515465][T18803] bridge_slave_1: left promiscuous mode [ 1295.522915][ T5913] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 1295.568975][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1295.719184][ T5913] usb 7-1: Using ep0 maxpacket: 8 [ 1295.725941][T18803] bridge_slave_0: left allmulticast mode [ 1295.752377][T18803] bridge_slave_0: left promiscuous mode [ 1295.758080][ T5913] usb 7-1: unable to get BOS descriptor or descriptor too short [ 1295.760316][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1296.753706][ T5913] usb 7-1: config 4 has an invalid interface number: 147 but max is 0 [ 1296.780273][ T5913] usb 7-1: config 4 contains an unexpected descriptor of type 0x2, skipping [ 1297.088583][ T5913] usb 7-1: config 4 has no interface number 0 [ 1297.116140][ T5913] usb 7-1: New USB device found, idVendor=04f2, idProduct=b746, bcdDevice=8e.6e [ 1297.125181][ T5913] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1297.133699][ T5913] usb 7-1: Product: syz [ 1297.137924][ T5913] usb 7-1: Manufacturer: syz [ 1297.144208][ T5913] usb 7-1: SerialNumber: syz [ 1297.387931][ T5913] uvcvideo 7-1:4.147: Found UVC 0.02 device syz (04f2:b746) [ 1297.409660][ T5913] uvcvideo 7-1:4.147: No valid video chain found. [ 1297.419260][T12010] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 1297.432226][ T5913] usb 7-1: USB disconnect, device number 3 [ 1297.555928][T12010] usb 4-1: device descriptor read/64, error -71 [ 1297.813144][T12010] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 1297.966099][T12010] usb 4-1: device descriptor read/64, error -71 [ 1298.115961][T12010] usb usb4-port1: attempt power cycle [ 1298.366221][T20094] loop6: detected capacity change from 0 to 16 [ 1298.389140][T20094] erofs (device loop6): mounted with root inode @ nid 36. [ 1298.449546][T16727] erofs (device loop6): failed to decompress -26 in[46, 0] out[9000] [ 1298.464427][T20094] erofs (device loop6): failed to decompress -26 in[46, 4050] out[8192] [ 1298.473808][T20094] erofs (device loop6): read error -117 @ 1 of nid 89 [ 1298.488998][T20094] x_tables: duplicate underflow at hook 1 [ 1298.496434][ T30] kauditd_printk_skb: 9 callbacks suppressed [ 1298.496476][ T30] audit: type=1800 audit(1780173142.525:434): pid=20094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.6.4187" name="file2" dev="loop6" ino=89 res=0 errno=0 [ 1299.126454][T20097] netlink: 'syz.2.4188': attribute type 1 has an invalid length. [ 1299.196649][T12010] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 1299.236093][T12010] usb 4-1: device descriptor read/8, error -71 [ 1299.271179][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1299.474705][T12010] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 1299.509119][T12010] usb 4-1: device descriptor read/8, error -71 [ 1299.533034][T18803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1299.553799][T18803] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1299.575319][T18803] bond0 (unregistering): Released all slaves [ 1299.625017][T12010] usb usb4-port1: unable to enumerate USB device [ 1299.804813][T18803] bond1 (unregistering): (slave veth3): Releasing active interface [ 1299.825626][T18803] bond1 (unregistering): Released all slaves [ 1299.963827][T18803] bond2 (unregistering): Released all slaves [ 1300.582242][T20104] netlink: 'syz.1.4190': attribute type 4 has an invalid length. [ 1300.732679][T18803] tipc: Left network mode [ 1301.104952][T20104] netlink: 17 bytes leftover after parsing attributes in process `syz.1.4190'. [ 1303.286951][T19186] usb 5-1: new high-speed USB device number 92 using dummy_hcd [ 1304.436313][T19186] usb 5-1: Using ep0 maxpacket: 32 [ 1304.444017][T19186] usb 5-1: config 0 has an invalid interface number: 67 but max is 0 [ 1304.461652][T19186] usb 5-1: config 0 has no interface number 0 [ 1304.490900][T19186] usb 5-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 1305.312061][T19186] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1305.320056][T19186] usb 5-1: Product: syz [ 1305.324996][T19186] usb 5-1: Manufacturer: syz [ 1305.330250][T19186] usb 5-1: SerialNumber: syz [ 1305.346907][T19186] usb 5-1: config 0 descriptor?? [ 1305.386322][T19186] smsc95xx v2.0.0 [ 1305.964217][T19186] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000030: -32 [ 1305.998091][T19186] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Error reading E2P_CMD [ 1307.085662][T18803] hsr_slave_0: left promiscuous mode [ 1307.126463][T19186] smsc95xx 5-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000108: -71 [ 1307.170281][T19186] smsc95xx 5-1:0.67: probe with driver smsc95xx failed with error -71 [ 1307.179425][T18803] hsr_slave_1: left promiscuous mode [ 1307.212452][T18803] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1307.218485][T19186] usb 5-1: USB disconnect, device number 92 [ 1307.294072][T18803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1307.413787][T20162] netlink: 'syz.2.4204': attribute type 1 has an invalid length. [ 1415.730869][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 1415.737843][ C0] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5830/1:b..l P31/1:b..l P9530/1:b..l [ 1415.748544][ C0] rcu: (detected by 0, t=10502 jiffies, g=117141, q=423 ncpus=2) [ 1415.756363][ C0] task:udevd state:R running task stack:24264 pid:9530 tgid:9530 ppid:5193 task_flags:0x400140 flags:0x00080001 [ 1415.771145][ C0] Call Trace: [ 1415.774428][ C0] [ 1415.777360][ C0] __schedule+0x1798/0x4cc0 [ 1415.781911][ C0] ? __pfx___schedule+0x10/0x10 [ 1415.786783][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.792429][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.798069][ C0] ? __lock_acquire+0xab9/0xd20 [ 1415.802924][ C0] ? preempt_schedule+0xae/0xc0 [ 1415.807791][ C0] preempt_schedule_common+0x83/0xd0 [ 1415.813091][ C0] preempt_schedule+0xae/0xc0 [ 1415.817783][ C0] ? __pfx_preempt_schedule+0x10/0x10 [ 1415.823163][ C0] ? set_page_refcounted+0xa0/0x1e0 [ 1415.828373][ C0] preempt_schedule_thunk+0x16/0x30 [ 1415.833585][ C0] _raw_spin_unlock+0x3f/0x50 [ 1415.838275][ C0] unmap_page_range+0x3a7f/0x4370 [ 1415.843360][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 1415.848738][ C0] ? unmap_vmas+0x144/0x580 [ 1415.853245][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.858886][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.864527][ C0] ? unmap_vmas+0x144/0x580 [ 1415.869039][ C0] unmap_vmas+0x399/0x580 [ 1415.873388][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 1415.878263][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.883902][ C0] ? tlb_gather_mmu+0x232/0x300 [ 1415.888757][ C0] vms_clear_ptes+0x35c/0x540 [ 1415.893466][ C0] ? __pfx_vms_clear_ptes+0x10/0x10 [ 1415.898703][ C0] vms_complete_munmap_vmas+0x206/0x8a0 [ 1415.904270][ C0] ? __mas_set_range+0x12f/0x3c0 [ 1415.909220][ C0] do_vmi_align_munmap+0x364/0x440 [ 1415.914338][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.919977][ C0] ? finish_task_switch+0x266/0x950 [ 1415.925209][ C0] ? __pfx_do_vmi_align_munmap+0x10/0x10 [ 1415.930874][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.936522][ C0] do_vmi_munmap+0x253/0x2e0 [ 1415.941215][ C0] __vm_munmap+0x207/0x380 [ 1415.945643][ C0] ? __pfx___vm_munmap+0x10/0x10 [ 1415.950617][ C0] __x64_sys_munmap+0x60/0x70 [ 1415.955311][ C0] do_syscall_64+0xfa/0xfa0 [ 1415.959833][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1415.965053][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.971123][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1415.976761][ C0] ? exc_page_fault+0xab/0x100 [ 1415.981542][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1415.987439][ C0] RIP: 0033:0x7f29dcf1e097 [ 1415.991854][ C0] RSP: 002b:00007fff2900f1f8 EFLAGS: 00000206 ORIG_RAX: 000000000000000b [ 1416.000275][ C0] RAX: ffffffffffffffda RBX: 00005628a9fbabf0 RCX: 00007f29dcf1e097 [ 1416.008248][ C0] RDX: 0000000000000000 RSI: 00000000009480e8 RDI: 00007f29dc400000 [ 1416.016218][ C0] RBP: 00005628a9fba910 R08: 00005628a9fcd140 R09: 0000000000000006 [ 1416.024188][ C0] R10: 0000000000000130 R11: 0000000000000206 R12: 000056288df39588 [ 1416.032157][ C0] R13: 00007fff2900f280 R14: 0000000000000000 R15: 0000000000000000 [ 1416.040151][ C0] [ 1416.043168][ C0] task:khungtaskd state:R running task stack:28944 pid:31 tgid:31 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1416.056696][ C0] Call Trace: [ 1416.059983][ C0] [ 1416.062924][ C0] __schedule+0x1798/0x4cc0 [ 1416.067478][ C0] ? __pfx___schedule+0x10/0x10 [ 1416.072447][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1416.078382][ C0] ? __pfx___free_object+0x10/0x10 [ 1416.083515][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 1416.089450][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1416.094798][ C0] preempt_schedule_irq+0xb5/0x150 [ 1416.099947][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1416.105684][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.111336][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.116975][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1416.122790][ C0] irqentry_exit+0x6f/0x90 [ 1416.127219][ C0] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 1416.132692][ C0] RIP: 0010:watchdog+0xe43/0xfa0 [ 1416.137635][ C0] Code: ff ff 41 ff cd 48 8b 4c 24 18 48 89 c8 48 c1 e8 03 42 80 3c 38 00 74 0f 48 8b 7c 24 18 e8 d5 8f 65 00 48 8b 4c 24 18 48 8b 09 <48> 8d 81 b8 fa ff ff 48 3d 00 52 c9 8d 0f 84 29 01 00 00 48 89 cb [ 1416.157239][ C0] RSP: 0018:ffffc90000a77cd0 EFLAGS: 00000246 [ 1416.163310][ C0] RAX: 1ffff11005cdbc01 RBX: 0000000000000002 RCX: ffff88802e680548 [ 1416.171284][ C0] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000000 [ 1416.179265][ C0] RBP: 1ffffffff1b82240 R08: 0000000000000000 R09: ffffffff81c02a82 [ 1416.187245][ C0] R10: dffffc0000000000 R11: fffffbfff24e9809 R12: ffff88802e6de420 [ 1416.195218][ C0] R13: 00000000003fff1f R14: ffff88802e6cab90 R15: dffffc0000000000 [ 1416.203284][ C0] ? watchdog+0x1e2/0xfa0 [ 1416.207637][ C0] ? watchdog+0x1e2/0xfa0 [ 1416.211978][ C0] kthread+0x711/0x8a0 [ 1416.216068][ C0] ? __pfx_watchdog+0x10/0x10 [ 1416.220746][ C0] ? __pfx_kthread+0x10/0x10 [ 1416.225345][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.230994][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1416.236203][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.241845][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1416.247054][ C0] ? __pfx_kthread+0x10/0x10 [ 1416.251656][ C0] ret_from_fork+0x4bc/0x870 [ 1416.256252][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1416.261379][ C0] ? __switch_to_asm+0x39/0x70 [ 1416.266141][ C0] ? __switch_to_asm+0x33/0x70 [ 1416.270900][ C0] ? __pfx_kthread+0x10/0x10 [ 1416.275506][ C0] ret_from_fork_asm+0x1a/0x30 [ 1416.280302][ C0] [ 1416.283318][ C0] task:udevd state:R running task stack:24264 pid:5830 tgid:5830 ppid:5193 task_flags:0x40014c flags:0x00080001 [ 1416.296829][ C0] Call Trace: [ 1416.300103][ C0] [ 1416.303034][ C0] __schedule+0x1798/0x4cc0 [ 1416.307580][ C0] ? __pfx___schedule+0x10/0x10 [ 1416.312441][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.318081][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1416.323205][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.328850][ C0] ? preempt_schedule_irq+0xaa/0x150 [ 1416.334152][ C0] preempt_schedule_irq+0xb5/0x150 [ 1416.339275][ C0] ? __pfx_preempt_schedule_irq+0x10/0x10 [ 1416.345011][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1416.351185][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.356825][ C0] ? rcu_irq_exit_check_preempt+0xdf/0x210 [ 1416.362643][ C0] irqentry_exit+0x6f/0x90 [ 1416.367071][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1416.373053][ C0] RIP: 0010:lock_acquire+0xcd/0x360 [ 1416.378252][ C0] Code: 0f 85 eb 00 00 00 65 48 8b 04 25 08 50 6e 92 83 b8 2c 0b 00 00 00 0f 85 d5 00 00 00 48 c7 44 24 30 00 00 00 00 9c 8f 44 24 30 <4c> 89 74 24 10 4d 89 fe 4c 8b 7c 24 30 fa 48 c7 c7 ef 25 72 8d e8 [ 1416.397865][ C0] RSP: 0018:ffffc90003f4f0b8 EFLAGS: 00000246 [ 1416.403934][ C0] RAX: ffff88807d533c80 RBX: 0000000000000000 RCX: 6b03c97f0c9aef00 [ 1416.411904][ C0] RDX: 0000000000000000 RSI: ffffffff81738c62 RDI: 1ffffffff1be7adc [ 1416.419874][ C0] RBP: ffffffff81738c45 R08: 0000000000000000 R09: 0000000000000000 [ 1416.427842][ C0] R10: dffffc0000000000 R11: fffff520007e9e5d R12: 0000000000000002 [ 1416.435810][ C0] R13: ffffffff8df3d6e0 R14: 0000000000000000 R15: 0000000000000000 [ 1416.443783][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1416.448908][ C0] ? unwind_next_frame+0xc2/0x2390 [ 1416.454046][ C0] ? __unwind_start+0xf8/0x760 [ 1416.458815][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1416.463933][ C0] unwind_next_frame+0xc2/0x2390 [ 1416.468880][ C0] ? unwind_next_frame+0xa5/0x2390 [ 1416.473999][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.479641][ C0] ? is_bpf_text_address+0x26/0x2b0 [ 1416.484845][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.490482][ C0] ? get_stack_info_noinstr+0x1b/0x130 [ 1416.495955][ C0] __unwind_start+0x5b9/0x760 [ 1416.500647][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 1416.506813][ C0] arch_stack_walk+0xe4/0x150 [ 1416.511523][ C0] ? __unwind_start+0xf8/0x760 [ 1416.516279][ C0] stack_trace_save+0x9c/0xe0 [ 1416.520944][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 1416.526315][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.531936][ C0] save_stack+0xf5/0x1f0 [ 1416.536176][ C0] ? __pfx_save_stack+0x10/0x10 [ 1416.541033][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.546652][ C0] ? page_ext_put+0x97/0xc0 [ 1416.551148][ C0] __reset_page_owner+0x71/0x1f0 [ 1416.556096][ C0] free_unref_folios+0xdb3/0x14f0 [ 1416.561115][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.566731][ C0] ? folio_unqueue_deferred_split+0x93/0x230 [ 1416.572694][ C0] folios_put_refs+0x584/0x670 [ 1416.577450][ C0] ? __pfx_folios_put_refs+0x10/0x10 [ 1416.582720][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.588344][ C0] ? free_swap_cache+0x109/0x300 [ 1416.593276][ C0] free_pages_and_swap_cache+0x277/0x520 [ 1416.598891][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.604512][ C0] ? __pfx_free_pages_and_swap_cache+0x10/0x10 [ 1416.610649][ C0] ? __virt_addr_valid+0x1c8/0x5c0 [ 1416.615770][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.621407][ C0] ? tlb_table_flush+0x36d/0x410 [ 1416.626335][ C0] tlb_flush_mmu+0x3a0/0x680 [ 1416.630911][ C0] ? __pfx_down_write+0x10/0x10 [ 1416.635752][ C0] tlb_finish_mmu+0xc3/0x1d0 [ 1416.640336][ C0] exit_mmap+0x444/0xb40 [ 1416.644573][ C0] ? uprobe_clear_state+0x20f/0x290 [ 1416.649764][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 1416.654513][ C0] ? __mutex_unlock_slowpath+0x1a1/0x740 [ 1416.660145][ C0] ? __pfx_exit_aio+0x10/0x10 [ 1416.664810][ C0] ? uprobe_clear_state+0x27c/0x290 [ 1416.669988][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.675610][ C0] __mmput+0x118/0x430 [ 1416.679663][ C0] exit_mm+0x1da/0x2c0 [ 1416.683720][ C0] ? __pfx_exit_mm+0x10/0x10 [ 1416.688295][ C0] ? hrtimer_try_to_cancel+0x3d9/0x420 [ 1416.693738][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.699356][ C0] ? rcu_is_watching+0x15/0xb0 [ 1416.704107][ C0] do_exit+0x648/0x2300 [ 1416.708254][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.713874][ C0] ? __pfx_do_exit+0x10/0x10 [ 1416.718452][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.724075][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1416.729257][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.734872][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1416.740061][ C0] do_group_exit+0x21c/0x2d0 [ 1416.744645][ C0] __x64_sys_exit_group+0x3f/0x40 [ 1416.749656][ C0] x64_sys_call+0x21f7/0x2200 [ 1416.754357][ C0] do_syscall_64+0xfa/0xfa0 [ 1416.758851][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1416.764040][ C0] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.770084][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.775700][ C0] ? exc_page_fault+0xab/0x100 [ 1416.780455][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1416.786327][ C0] RIP: 0033:0x7f29dcef16c5 [ 1416.790724][ C0] RSP: 002b:00007fff2900f238 EFLAGS: 00000256 ORIG_RAX: 00000000000000e7 [ 1416.799118][ C0] RAX: ffffffffffffffda RBX: 00005628aa06c870 RCX: 00007f29dcef16c5 [ 1416.807068][ C0] RDX: 00000000000000e7 RSI: fffffffffffffe68 RDI: 0000000000000000 [ 1416.815015][ C0] RBP: 00005628a9fba910 R08: 0000000000000000 R09: 0000000000000000 [ 1416.823052][ C0] R10: 0000000000000000 R11: 0000000000000256 R12: 0000000000000000 [ 1416.830999][ C0] R13: 00007fff2900f280 R14: 0000000000000000 R15: 0000000000000000 [ 1416.838971][ C0] [ 1416.841981][ C0] rcu: rcu_preempt kthread starved for 10515 jiffies! g117141 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 1416.853271][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 1416.863246][ C0] rcu: RCU grace-period kthread stack dump: [ 1416.869139][ C0] task:rcu_preempt state:R running task stack:27240 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00080000 [ 1416.882659][ C0] Call Trace: [ 1416.885935][ C0] [ 1416.888868][ C0] __schedule+0x1798/0x4cc0 [ 1416.893417][ C0] ? __pfx___schedule+0x10/0x10 [ 1416.898293][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.903941][ C0] ? schedule+0x91/0x360 [ 1416.908204][ C0] schedule+0x165/0x360 [ 1416.912376][ C0] schedule_timeout+0x12b/0x270 [ 1416.917234][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 1416.922610][ C0] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 1416.928515][ C0] ? __pfx_process_timeout+0x10/0x10 [ 1416.933816][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.939453][ C0] ? prepare_to_swait_event+0x341/0x380 [ 1416.945015][ C0] rcu_gp_fqs_loop+0x301/0x1540 [ 1416.949883][ C0] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 1416.956044][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 1416.961334][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 1416.966566][ C0] ? finish_swait+0xcd/0x1f0 [ 1416.971169][ C0] rcu_gp_kthread+0x99/0x390 [ 1416.975766][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1416.980967][ C0] ? __kthread_parkme+0x7b/0x200 [ 1416.985915][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1416.991551][ C0] ? __kthread_parkme+0x1a1/0x200 [ 1416.996592][ C0] kthread+0x711/0x8a0 [ 1417.000677][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 1417.005880][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.010476][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.016119][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 1417.021326][ C0] ? srso_alias_return_thunk+0x5/0xfbef5 [ 1417.026968][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 1417.032175][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.036776][ C0] ret_from_fork+0x4bc/0x870 [ 1417.041377][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 1417.046509][ C0] ? __switch_to_asm+0x39/0x70 [ 1417.051271][ C0] ? __switch_to_asm+0x33/0x70 [ 1417.056030][ C0] ? __pfx_kthread+0x10/0x10 [ 1417.060632][ C0] ret_from_fork_asm+0x1a/0x30 [ 1417.065415][ C0] [ 1417.068428][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 1417.074746][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted syzkaller #0 PREEMPT(full) [ 1417.083680][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/25/2025 [ 1417.093732][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 1417.099470][ C0] Code: 5e d3 c9 f5 cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d 93 c1 21 00 f3 0f 1e fa fb f4 33 d3 c9 f5 cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 1417.119078][ C0] RSP: 0018:ffffffff8dc07d80 EFLAGS: 000002c6 [ 1417.125150][ C0] RAX: 9516500a90fd8b00 RBX: ffffffff81967b47 RCX: 9516500a90fd8b00 [ 1417.133120][ C0] RDX: 0000000000000001 RSI: ffffffff8d70e2b0 RDI: ffffffff8bbf0760 [ 1417.141089][ C0] RBP: ffffffff8dc07ea8 R08: ffff8880b8832fdb R09: 1ffff110171065fb [ 1417.149059][ C0] R10: dffffc0000000000 R11: ffffed10171065fc R12: ffffffff8f7ceb70 [ 1417.157029][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1b92a40 [ 1417.165000][ C0] FS: 0000000000000000(0000) GS:ffff88812613b000(0000) knlGS:0000000000000000 [ 1417.173991][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1417.180572][ C0] CR2: 0000200000278030 CR3: 0000000077588000 CR4: 0000000000350ef0 [ 1417.188544][ C0] Call Trace: [ 1417.191820][ C0] [ 1417.194746][ C0] default_idle+0x13/0x20 [ 1417.199077][ C0] default_idle_call+0x73/0xb0 [ 1417.203843][ C0] do_idle+0x1e7/0x510 [ 1417.208012][ C0] ? __pfx_do_idle+0x10/0x10 [ 1417.212622][ C0] cpu_startup_entry+0x44/0x60 [ 1417.217391][ C0] rest_init+0x2de/0x300 [ 1417.221643][ C0] start_kernel+0x3ae/0x410 [ 1417.226156][ C0] x86_64_start_reservations+0x24/0x30 [ 1417.231638][ C0] x86_64_start_kernel+0x143/0x1c0 [ 1417.236761][ C0] common_startup_64+0x13e/0x147 [ 1417.241729][ C0] [ 1417.517902][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 SYZFAIL: failed to send rpc fd=3 want=6824 sent=0 n=-1 (errno 32: Broken pipe) [ 1420.916399][T18803] team0 (unregistering): Port device team_slave_1 removed [ 1420.986965][T18803] team0 (unregistering): Port device team_slave_0 removed [ 1421.040191][ T5844] Bluetooth: hci6: command 0x0406 tx timeout [ 1421.046229][ T5844] Bluetooth: hci2: command 0x0406 tx timeout [ 1422.085842][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 1423.730802][T18803] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.812098][T18803] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.882806][T18803] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1423.955789][T18803] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.457910][T18803] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.568913][T18803] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.623873][T18803] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.683224][T18803] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.847900][T18803] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.909743][T18803] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1424.973989][T18803] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.063871][T18803] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.215702][T18803] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.280415][T18803] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.334905][T18803] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.399726][T18803] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1425.528348][T18803] bridge_slave_1: left allmulticast mode [ 1425.534033][T18803] bridge_slave_1: left promiscuous mode [ 1425.540634][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.550493][T18803] bridge_slave_0: left allmulticast mode [ 1425.556486][T18803] bridge_slave_0: left promiscuous mode [ 1425.562189][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.575373][T18803] bridge_slave_1: left allmulticast mode [ 1425.581241][T18803] bridge_slave_1: left promiscuous mode [ 1425.587647][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.597809][T18803] bridge_slave_0: left allmulticast mode [ 1425.603439][T18803] bridge_slave_0: left promiscuous mode [ 1425.609838][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.620682][T18803] bridge_slave_1: left allmulticast mode [ 1425.627085][T18803] bridge_slave_1: left promiscuous mode [ 1425.632756][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.643750][T18803] bridge_slave_0: left allmulticast mode [ 1425.650729][T18803] bridge_slave_0: left promiscuous mode [ 1425.656529][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.669601][T18803] bridge_slave_1: left allmulticast mode [ 1425.675229][T18803] bridge_slave_1: left promiscuous mode [ 1425.681285][T18803] bridge0: port 2(bridge_slave_1) entered disabled state [ 1425.691496][T18803] bridge_slave_0: left allmulticast mode [ 1425.697268][T18803] bridge_slave_0: left promiscuous mode [ 1425.702949][T18803] bridge0: port 1(bridge_slave_0) entered disabled state [ 1425.714006][T18803] bridge_slave_1: left allmulticast mode [ 1425.719985][T18803] bridge_slave_1: left promiscuous mode