last executing test programs: 7m13.377586153s ago: executing program 4 (id=746): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0), 0x0, 0xcce, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x3f) ioctl$KVM_IRQ_LINE_STATUS(r2, 0xc008ae67, &(0x7f0000000180)={0x1, 0x101}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000140)=[@text64={0x40, &(0x7f0000000640)="430fc73f0f2390b9800000c00f3235010000000f300f20d835080000000f22d8c4e18173f53866baf80cb83879e487ef66bafc0cec66b88e008ec02d1aa80000460f1c460041ae", 0x47}], 0x1, 0x74, 0x0, 0x0) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f0000000240)) ioctl$KVM_RUN(r3, 0xae80, 0x0) setrlimit(0xf, 0x0) 7m13.105491377s ago: executing program 2 (id=747): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) mkdir(0x0, 0x1cb) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m12.8148779s ago: executing program 2 (id=748): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x2c, &(0x7f0000000cc0)={0x0, 0x30}, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 7m12.756858921s ago: executing program 4 (id=749): mkdirat(0xffffffffffffff9c, &(0x7f0000002000)='./file0\x00', 0x0) pipe2$9p(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x800) write$P9_RVERSION(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="1500000065ffff"], 0x15) r2 = dup(r1) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000b80), 0x0, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) 7m12.518434263s ago: executing program 4 (id=751): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x8000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_CAP_EXIT_HYPERCALL(r1, 0x4068aea3, &(0x7f0000000340)) 7m12.254903614s ago: executing program 4 (id=753): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$VHOST_SET_OWNER(r0, 0xaf01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000300)={0x1, 0x0, 0x0, &(0x7f0000001600)=""/78, 0x0}) ioctl$VHOST_SET_MEM_TABLE(r0, 0x4008af03, &(0x7f0000001680)) r1 = eventfd2(0x1, 0x1) ioctl$VHOST_SET_VRING_ERR(r0, 0x4008af22, &(0x7f00000001c0)={0x0, r1}) clock_settime(0x6, 0x0) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000240)={0x0, 0x0, 0x0, &(0x7f0000001d00)=""/176, 0x0, 0xffff1000}) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000000)={0x0, r1}) ioctl$VHOST_VSOCK_SET_RUNNING(r0, 0x4004af61, &(0x7f00000000c0)=0x1) ioctl$VHOST_VSOCK_SET_GUEST_CID(r0, 0x4008af60, &(0x7f0000000140)={@my=0x1}) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000200)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 7m10.857155349s ago: executing program 4 (id=761): syz_open_dev$evdev(&(0x7f0000000700), 0x3, 0x1) close(0x3) 7m10.299490647s ago: executing program 4 (id=763): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='Q', 0x1, 0x800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c060000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 7m8.899682006s ago: executing program 2 (id=768): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x42002) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f00000003c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x4}) 7m8.429026202s ago: executing program 2 (id=770): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xb, 0x5, 0x2, 0x2, 0x5}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1c, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000180)=r2, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r1}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) mkdir(0x0, 0x1cb) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608064c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 7m7.806151945s ago: executing program 2 (id=772): r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a010000000000000034aa3602feffe809000000fff5dd0000001000010002081000418e00000d04fcff", 0x58}], 0x1) 7m7.406142449s ago: executing program 2 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) 6m53.886201225s ago: executing program 32 (id=763): r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r1 = getpid() socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000580)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='Q', 0x1, 0x800, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0xbc3d, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) unshare(0x2c060000) ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, &(0x7f0000000340)={{0xfffffffe, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x6, 0x2, 0x4, r1, 0x0, 0x0, 'syz1\x00', 0x0}) 6m51.48192515s ago: executing program 33 (id=774): prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x244}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() sched_setaffinity(0x0, 0x1, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xffffe000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f00000004c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) prlimit64(0x0, 0x9, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x3fffffffffffeda, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x62040200) syz_mount_image$vfat(&(0x7f0000000040), &(0x7f0000000000)='./file0\x00', 0x8000, &(0x7f0000000080)=ANY=[@ANYBLOB="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"], 0x0, 0x305, &(0x7f0000000200)="$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") r2 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r2, 0x0, 0x40, &(0x7f0000000000)={'security\x00', 0x7003, [0x80002, 0x40007, 0x1, 0x2, 0xa]}, &(0x7f0000000100)=0x54) syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) waitid(0x2, 0x0, 0x0, 0x4, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x210803, 0x0, 0x0, 0x0, 0x0) 4m56.231195425s ago: executing program 1 (id=915): r0 = syz_usb_connect(0x2, 0x24, &(0x7f00000007c0)=ANY=[@ANYBLOB="12010000ed3ec908cd0cb300ea2d010203010902120001000000000904"], 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000000)={0x1c, &(0x7f0000000240)=ANY=[], 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$sierra_net(r0, 0x0, &(0x7f0000002040)={0x1c, &(0x7f0000000280)={0x40, 0x8}, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000500)={0x34, &(0x7f00000002c0)={0x20, 0x7}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac3(r0, 0x0, &(0x7f0000000b40)={0x44, &(0x7f0000000880)={0x20, 0xd}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$rtl8150(r0, 0x0, &(0x7f0000000240)={0x2c, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) 4m44.2097108s ago: executing program 1 (id=921): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x40000, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) eventfd(0x8c66) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) ioctl$KVM_IOEVENTFD(r1, 0x4040ae79, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000380)=@arm64={0x1, 0xc5, 0xa, '\x00', 0x6}) 4m43.26559727s ago: executing program 1 (id=923): sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="4f6023a7d7a0553c280b", 0xa, 0x20000800, &(0x7f0000000200)={0x2, 0x4e22, @empty}, 0x10) syz_mount_image$hfsplus(&(0x7f0000000340), &(0x7f0000000500)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x804880, &(0x7f0000000180)=ANY=[], 0xfd, 0x6b6, &(0x7f00000055c0)="$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") r0 = socket$inet6_udp(0xa, 0x2, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(0xffffffffffffffff, 0x0, 0x0) fchdir(r1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x4c0, 0x300, 0x18c, 0x203, 0x300, 0x19030000, 0x3f0, 0x2e0, 0x2e0, 0x3f0, 0x2e0, 0x7fffffe, 0x0, {[{{@uncond, 0x300, 0x2d8, 0x300, 0x0, {0x1000000}, [@common=@unspec=@bpf0={{0x230}, {0x13, [{}, {0x20, 0x0, 0x0, 0x40000}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0xe}, {}, {0x0, 0x0, 0x3}, {0x2}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {}, {0x16}, {}, {}, {0x7}, {}, {0x0, 0x0, 0x0, 0x101}, {}, {}, {}, {}, {}, {}, {0xfffe}, {}, {}, {}, {0x0, 0xfd}, {}, {0x7a04}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x1}, {}, {0xb84, 0x0, 0x0, 0xf00}, {0x0, 0x1, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0xb, 'syz1\x00', {0x6c8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) 4m40.589288915s ago: executing program 1 (id=924): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, 0x3, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @loopback}}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x54}, 0x40) 4m34.93100518s ago: executing program 1 (id=926): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000100), &(0x7f00000006c0)='%pB \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={r1}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x10, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51, 0x1, [{0x3, 0x8f2e}]}}) socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_vlan\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) r4 = gettid() r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r3, @ANYBLOB="089805000750050008001300", @ANYRES32=r4, @ANYBLOB="08002c00050000001400030076657468"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) 4m33.6774673s ago: executing program 1 (id=928): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@errors_continue}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7d}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$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") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents(r0, 0x0, 0x0) 4m14.707104557s ago: executing program 34 (id=928): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000001240)={[{@dioread_nolock}, {@norecovery}, {@errors_continue}, {@nojournal_checksum}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x7d}}, {@nodelalloc}, {@errors_remount}, {@acl}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x343}}, {@jqfmt_vfsold}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@nombcache}], [{@fowner_eq}, {@hash}, {@permit_directio}, {@subj_type={'subj_type', 0x3d, '/)/-:$//('}}, {@rootcontext={'rootcontext', 0x3d, 'unconfined_u'}}]}, 0xfd, 0x573, &(0x7f0000000cc0)="$eJzs3V9rW+UfAPDvSZP9636/djCGeiGDXTgZS9fWPxOEzUvR4UDvZ2izMpouo0nHWgduF+7GGxmCiAPxBXjv5fAN+CoGOhgyil6IUDnpSZe1Sf8tNbH5fOBsz5Nzkud58pzvyfOck/QEMLBOpv/kIl6OiK+SiJGWdfnIVp5c3W756e2pdEliZeXj35O4sO61kuz/4SzzUkT8/EXEmdzGcmuLS7OlSqU8n+XH6nM3xmqLS2evzZVmyjPl6xOTk+ffnJx45+23utbW1y//+e1HD98//+Wp5W9+fHzsfhIX42i2Lm1XF4q405o5Wfo7SxXi4roNx7tQWD9Jel0BdmUoi/NCpMeAkRjKoh7Y/z6PiBVgQCXiHwZUcxzQnNt3aR78n/HkvdUJ0Mb251fPjcShxtzoyHLy3Mwone+OdqH8tIyffntwP11i8/MQh7fIA+zInbsRcS6f33j8S7Lj3+6da5w83tz6Mgbt8wd66WE6/knuRGyI/9za+CfajH+G28Tubmwd/7nHXSimo3T8927b8e/aoWt0KMv9rzHmKyRXr1XK5yLi/xFxOgoH0/xm13POLz9a6bSudfyXLmn5zbFgVo/H+YPPP2e6VC+9SJtbPbkb8Urb8W+y1v9Jm/5P34/L2yzjRPnBq53Wbd3+vbXyQ8Rrbfv/2RWtZPPrk2ON/WGsuVds9Me9E790Kr/X7U/7/8jm7R9NWq/X1nZexveH/ip3Wrfb/f9A8kkjfSB77FapXp8fjziQfJgfXv/4xLPnNvPN7dP2nz7VPv432//Tyden22z/veP3Om7aD/0/vaP+33ni0Qeffdep/O31/xuN1Onske0c/7ZbwRd57wAAAAAAAKDf5CLiaCS54lo6lysWV7/fcTyO5CrVWv3M1erC9elo/FZ2NAq55pXukZbvQ4xn34dt5ifW5Scj4lhEfD10uJEvTlUr071uPAAAAAAAAAAAAAAAAAAAAPSJ4Q6//0/9OtTr2gF7rnFjg4O9rgXQC1ve8r8bd3oC+tKW8Q/sWzuPf2cGYL/w+Q+DS/zD4BL/MLi2G/+FkT2uCPCv8/kPg0v8AwAAAAAAAAAAAAAAAAAAAAAAAAAAQFddvnQpXVaWn96eSvPTNxcXZqs3z06Xa7PFuYWp4lR1/kZxplqdqZSLU9W5rV6vUq3eGJ+IhVtj9XKtPlZbXLoyV124Xr9yba40U75SLvhjwwAAAAAAAAAAAAAAAAAAALBBbXFptlSplOclOiYuRF9UYy8buGpXT8/3Syskupro8YEJAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAFr8EwAA//8DDjNQ") r0 = open(&(0x7f0000000140)='.\x00', 0x8000, 0x112) getdents(r0, &(0x7f0000001fc0)=""/184, 0xb8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0xb, 0xd, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa0000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) getdents(r0, 0x0, 0x0) 3m5.293906784s ago: executing program 3 (id=994): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000000180)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006, 0x0, 0xfe}]}, 0x10) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x109002, 0x0) ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) 3m4.806989352s ago: executing program 3 (id=995): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x6c, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x16, 0xc2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0x7, "97134cb6ce"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "5d7d0438043979a6eef50c"}]}}}}}}}, 0x0) 3m4.654915204s ago: executing program 3 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000040)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f00000bd000), 0x318, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x15) syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000000c0)='./file1\x00', 0x0, &(0x7f00000001c0)={[{@delalloc}]}, 0xff, 0x4a1, &(0x7f00000004c0)="$eJzs3MtvVFUYAPDvTh+8aUVEQdAqGomPlhZUFi7UaOJCExNd4LK2BZGBGloTIY0WY3BpSNwblyb+Be7cGHVhTNxq4tKQEG1MKK5q7gum02mZlpYpnd8vmc45c1/nu+eemXPv6b0BtK2+9E8SsT0ifo+Injw7f4a+/G12Zmrk+szUSBJzc2/9nWTzXZuZGilnLZfbVmQOVSIqnyXxYrJwuxPnL5werlbHzhX5gckzHwxMnL/wzKkzwyfHTo6dHTp27OiRweefG3p2VeJM47q27+Px/Xtfe+fyGyPHL7/707dpsfYcyKfXxnFL1xsE1EBfutf+mcvUT3t8GWW/G+yoSSedLSwIy9IREWl1dWXtvyc64mbl9cSrn7a0cMCaSn+bNi0+eXoO2MCSaHUJgNYof+jT89/ydYe6HuvC1Zciuov07MzUyOyN+DujUnzetYbb74uI49P/fZW+YrnXIQAAViDr2zzdqP9XiT3Zez7WsbMYQ+mNiHsiYldE3BsRuyPivohs3vujOx7IF57raXL7fXX5hf2fypWGZV4laf/vhZq+32xN/MVbb0eR25HF35WcOFUdO1zsk0PRtSnNDy6xje9f+e2LxabV9v/SV7r9si9YFOBKZ90FutHhyeHV2glXL0bs62wUf3JjJCA9AvZGxL7lrXpnmTj15Df7F5vp1vEvYRXGmea+jngir//pqIu/lCw9PjmwOapjhwfKo2Khn3+99GaR7K6fdlvxr4K0/rfOP/6LKReL955/k3y8tiuq1bFzE8vfxqU/Pl/0nGalx3938nY2Zv3Le/lnHw1PTp4bjOhOXs/y5Y7OPh+6uWyZL+dP4z90sHH731Usk8b/YESkB/GBiHgoIh4uyv5IRDwaEQeXiP/Hlx97f4n4k0iipfU/2vD7L4nYnCV6k9rx+hUkOk7/8N1iI+bN1f/RmM6+a3PZ998tNFvA29+DAAAAsP5VImJ7JJX+PN23PSqV/v78f/h3x9ZKdXxi8qkT4x+eHc3vEeiNrkp5paun5nroYDJdrDHPDxXXisvpR4rrxl92bMny/SPj1dEWxw7tbtv89h9l+0/91dHq0gFrzv1a0L7q23+lReUA7rxmfv+dC8DG1KD9b2lFOYA7z/k/tK9G7f+Turz+P2xMC9v/nw0eWQdsRPr/0L60f2hf2j+0pWbv4i+fp7DihwDMS5Q3C6x8PZubvsN//SX61mTNZQ2tZeG3xM1PorJqa55eB5WyzhNpi1nJ4rGz+WdhzE80eFgNAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAADAXej/AAAA//+q8eIl") pwrite64(0xffffffffffffffff, &(0x7f0000000280), 0x0, 0x8080c61) socket$unix(0x1, 0x2, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x2200015, 0x0) syz_mount_image$fuse(&(0x7f0000000000), &(0x7f0000000040)='./file0\x00', 0x400a8, &(0x7f0000000380)=ANY=[], 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x0, 0x1, 0x0, 0x0) syz_mount_image$fuse(0x0, &(0x7f0000000740)='./bus\x00', 0x283016, 0x0, 0x11, 0x0, 0x0) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000080)={{&(0x7f0000ffd000/0x3000)=nil, 0x3000}, 0x1}) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000340)={&(0x7f0000000000)=""/59, 0x304000, 0x800, 0x0, 0x3}, 0x20) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x15) 3m4.171153143s ago: executing program 3 (id=997): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x21081e, &(0x7f00000001c0)={[{@grpquota}, {@nogrpid}, {@quota}]}, 0x1, 0x4fa, &(0x7f00000005c0)="$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") quotactl$Q_SETQUOTA(0xffffffff80000800, &(0x7f00000003c0)=@loop={'/dev/loop', 0x0}, 0x0, &(0x7f0000000540)={0x4, 0x0, 0x3, 0x8, 0x6, 0x6, 0x20000001000, 0xf64, 0xfffffffd}) creat(0x0, 0x1) open(0x0, 0x14927e, 0x2) mount(&(0x7f0000000ac0)=@loop={'/dev/loop', 0x0}, &(0x7f0000000b00)='./file1\x00', 0x0, 0x1000, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x441, 0x104) fallocate(r0, 0x10, 0x4000, 0x4000) 3m3.692301373s ago: executing program 3 (id=998): r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000580), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)) sendmsg$NFC_CMD_DEV_UP(r1, 0x0, 0x840) write$nci(r0, &(0x7f0000000700)=@NCI_OP_RF_INTF_ACTIVATED_NTF={0x1, 0x0, 0x3, 0x5, 0x7, @a={0x89, 0x3, 0x6, 0x0, 0x7f, 0x1a, 0x6, {0x1, 0xc, "2dd55ce65c930149c62e0be2", 0x0, 0x1}, 0x6, 0x7, 0x80, 0xd4}}, 0x1f) 3m2.866135287s ago: executing program 3 (id=999): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) alarm(0x38) 3m1.008844878s ago: executing program 35 (id=999): mknodat$loop(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x6004, 0x1) prctl$PR_SET_SECCOMP(0x16, 0x2, 0x0) r0 = getpgrp(0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000040)=0x10000005) prctl$PR_SCHED_CORE(0x3e, 0x1, r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) alarm(0x38) 2m27.411806877s ago: executing program 5 (id=1044): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) fcntl$setown(r0, 0x8, 0x0) 2m26.857518417s ago: executing program 5 (id=1046): prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x0, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) request_key(&(0x7f0000001000)='dns_resolver\x00', &(0x7f0000001040)={'syz', 0x2}, &(0x7f0000001080)='\x00', 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x14, 0xe, 0x0, 0xe}, {0x6c, 0x6, 0x0, 0xfffffffc}, {0x6, 0x0, 0x0, 0x7fff7ffc}]}) 2m21.50212943s ago: executing program 5 (id=1049): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x800}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r0, 0x0, 0xfffffffffffffd18, 0x1, &(0x7f00000006c0)="051cf3b75a97acbf", &(0x7f0000000700)=""/8, 0xb4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2000000}, 0x1b) 2m18.273591078s ago: executing program 0 (id=1051): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) r1 = accept$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000480)="b19ccccf84f531d9ec214627c11430c1", 0x10) sendmmsg$alg(r1, &(0x7f0000003000)=[{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000000240)="810cac7d48", 0x5}, {&(0x7f00000033c0)="f5ac467833c129406b9fb74227de", 0xe}], 0x2, 0x0, 0x0, 0xc855}], 0x1, 0x4004004) recvmsg(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000840)=[{0x0}, {&(0x7f00000007c0)=""/16, 0x10}], 0x2}, 0x100) 2m17.310013032s ago: executing program 0 (id=1052): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x1, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x5, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r2, 0x0, 0x4890) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000100)=0x207, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'syzkaller0\x00', 0x0}) sendto$packet(r4, &(0x7f00000002c0)="05031c00d3fc140000004788031c09102c28", 0xfdef, 0x4, &(0x7f0000000140)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) 2m14.492772958s ago: executing program 0 (id=1055): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x6}, 0x1c) listen(r0, 0x10040) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f0000000080)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x25}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x2, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2, 0xffff}}}}}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000140)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0xfc, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x17, 0xc2, 0xca, 0x0, 0x1000, {[@timestamp={0x8, 0xa, 0x81000000, 0xfbc}, @sack_perm={0x4, 0x2}, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x7, 0x401}, @generic={0x5, 0xb, "97134cb6ce50e935f6"}, @md5sig={0x13, 0x12, "87bc7875c06531ac8010bbdf64bb797a"}, @exp_fastopen={0xfe, 0xf, 0xf989, "5d7d0438043979a6eef50c"}]}}}}}}}, 0x0) 2m13.640058486s ago: executing program 0 (id=1056): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x6, &(0x7f00000000c0)={0x14, {{0x29, 0x0, 0xdd, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x8}}}, 0x88) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(0xffffffffffffffff, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB]) syz_emit_ethernet(0x4a, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x4000000) syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x2001) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_misc(r1, 0x0, 0x0) syz_mount_image$squashfs(&(0x7f0000000040), &(0x7f0000000240)='./file0\x00', 0x800, &(0x7f0000000940)=ANY=[@ANYBLOB="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", @ANYRESHEX, @ANYRES32, @ANYRESHEX, @ANYRES32, @ANYRES32, @ANYRES16, @ANYRES64, @ANYRES64, @ANYRES64, @ANYRESDEC, @ANYRESOCT=0x0, @ANYBLOB="96baa9bd293f32a4be21fdffc77440a9d9c7e16c6c51d63e8ba964b01e06c4ad80d5ba81bf754b2f63dd49ffac2f96d2be9ab12be13dc3bd59217be281d895795a047ce3258eb171bd1200000000000000a112eb61edbb22074fb2464c2c040aa73dc1cccff5291d669049a8e13b373c0960d91ad00e2765cf73b478067d073524b1515e0cf674b54ab1945a77534ca0c321c00bc82e1eec0d6ea55eab950800b5c12b71f10f76", @ANYRESOCT, @ANYRES16], 0x1, 0x1b9, &(0x7f0000000780)="$eJzKKC4sZmdgYPj7sSaZQYABDBgZeBguMDAysDAwMKgzQsQYmCDUeij/BZSeCZW2gfKbofRCKF1xS3vdmlN+Z0566motk2VmaPWMY0MWk0vtMXKTXMwjwczAyMDQANKSmJOTWlS8kKFCgYGB4f////+v219TaZbgdPgjz+GQpOmgw3TExyNrRiPURQyZCmfPfJBfx6ZxhOHRCuaNdZ55jXWFqVPz0vKSqrKqsuZNnLhxJjNUbZrfKsaWFJdNTZ2MTA5b1AQ2M9dDZVY9THJg7fHwaz5lrPQ6lfmS8cIiqVMrqmZO+KI0m9HwO8MdnrIVEhoaThJXJCwaTBiO1Nk2wByQphDGmKTGJta25cycEGZ+NjeQbSeYQo9yLJ0pYXFAqOrkT0vNtw6JbjO2PXVgO8Nz+DjPmoI+QaPjEgxOCwX/yzBU3EpOaGgo01jLtNR2wZcijb8SXquNnTIY3O2ZlsEClAUcNiuhPFmwnoTkFR46mppGKckJDZsaGRgYCgyVGbbu4Vwt0MCAFG0qDAwM2xlhcQsB12CMUTAKRsEoGAWjYBSMglEwCkbBKBgFIwIAAgAA//+vQ4hg") syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, 0x0, 0x4040814) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket(0x10, 0x3, 0x0) bind$bt_hci(r2, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r2, &(0x7f0000000340)="41000000010001", 0x7) r3 = socket(0x200000000000011, 0x2, 0xd) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) 2m12.195401741s ago: executing program 5 (id=1057): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x1c1) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000540)=ANY=[@ANYBLOB="1500000050ffff0011b9000800395032303030"], 0x15) r2 = dup(r1) write$FUSE_BMAP(r2, &(0x7f0000000100)={0x18, 0x0, 0x0, {0x2}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000280)={0x50, 0x0, 0x0, {0x7, 0x21, 0x0, 0x0, 0xfff9, 0x1000, 0x0, 0x7, 0x0, 0x0, 0x20, 0x8}}, 0x50) mount$9p_fd(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f00000000c0), 0x0, &(0x7f0000001980)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r1, @ANYBLOB=',dfltgid=', @ANYRESHEX=0x0, @ANYBLOB=',afid=0x000000000K']) r3 = syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') read$FUSE(r3, &(0x7f0000002780)={0x2020}, 0x2020) 2m11.829439695s ago: executing program 0 (id=1058): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, &(0x7f0000000100)) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder0\x00', 0x800, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000280)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000000)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x1, 0x11, r3, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000080), 0x41, 0x0) ioctl$TCSETS(r4, 0x40045431, &(0x7f0000000dc0)={0x0, 0x4, 0x0, 0x0, 0x1b, "0062ba7d820700000000000000000000096304"}) r5 = syz_open_pts(r4, 0x80) read(r5, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000001000)={0x73622a85, 0x10b, 0xffffffffffffffff}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f00000003c0)={0x54, 0x0, &(0x7f0000000e00)=[@acquire, @transaction_sg={0x40486311, {0x1, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x58, 0x18, &(0x7f00000005c0)={@fd={0x66642a85, 0x0, r5}, @fd={0x66642a85, 0x0, r2}, @ptr={0x70742a85, 0x0, 0x0, 0x0, 0x1, 0x3f}}, &(0x7f0000000bc0)={0x0, 0x18, 0x30}}, 0x400}], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r3, 0xc0306201, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x1, 0x1000000000000, &(0x7f0000000340)="cb"}) 2m11.554404011s ago: executing program 5 (id=1060): write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x7, 0x4, 0x46, 0xfffa}, 0x1d, [0x6, 0xc95a, 0xfdfffff5, 0x9, 0x7f, 0x2, 0x1, 0x7f, 0x6, 0xfffffff9, 0xfffffff2, 0x2, 0x2a35, 0x3, 0xffff2d37, 0x2bf4, 0x6, 0x7, 0x0, 0x80000001, 0x200004, 0x7, 0x3, 0x3c5b, 0x1, 0x24, 0xfffbffff, 0xfffffffe, 0x1f561e2c, 0x2, 0xe661, 0x4, 0x9, 0x3, 0x3, 0x4c72, 0x6, 0x642, 0x4, 0xa, 0x1000000, 0x71, 0x7, 0x7, 0x103, 0x0, 0x5, 0x3c, 0x91, 0x6, 0x718902d8, 0x3, 0x5, 0x4, 0xc, 0x3, 0x7, 0x0, 0x5, 0x6, 0x9, 0x4, 0x1, 0x40], [0x10000007, 0x8, 0x12f, 0x6, 0x10, 0x8, 0x129432e2, 0xcb, 0xf9, 0xd, 0xa, 0x2, 0x9, 0xfffffffe, 0x7, 0x0, 0x7, 0x5, 0x2f, 0x11, 0x312, 0x8, 0x3, 0xa, 0x3, 0x4000, 0x8000, 0x9, 0x1, 0x1, 0x5, 0xfffffffd, 0x4a, 0x1005, 0x7ff, 0x5f31, 0x4, 0x0, 0x6, 0x2, 0x5, 0x4, 0x6, 0x7, 0x9, 0x5, 0x5, 0x3, 0x1, 0x8000, 0xffff, 0x2, 0x7f, 0x9, 0x5, 0x10003, 0x4, 0x1001, 0x7, 0x10001, 0x9, 0x48c93690, 0x9, 0xff], [0x7, 0x4, 0x0, 0x64e, 0xfffffdfc, 0x7fffffff, 0x8d2, 0x9, 0x1, 0x7fff, 0x0, 0x8005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x7, 0x86, 0x3, 0x1000000b, 0x1, 0xb, 0x5, 0x2, 0x2, 0xc, 0x8, 0x6, 0x6d05, 0x7, 0x3b, 0x3, 0x200, 0x7, 0x3, 0x4, 0xffffffff, 0x0, 0xa2, 0x9, 0x53cf697b, 0x5, 0x6, 0x54fe12d6, 0xbf, 0x1ff, 0x3, 0x400000, 0xfffffff9, 0x4, 0x3f, 0x800005, 0x0, 0x9, 0xfffffffb, 0x120002, 0x3, 0x6, 0x9, 0x9, 0x3], [0x1000009, 0xbb2f, 0x3, 0x7, 0x5, 0x7, 0x6, 0x6, 0x0, 0x5, 0xce7, 0x1ff, 0x6, 0x8ad, 0x5, 0x3, 0x105, 0x10000, 0x2006, 0x7fff, 0x8ffff, 0xa621, 0x3, 0x5, 0x1, 0x2, 0x14b, 0x60a7, 0x9, 0x5, 0xffffffff, 0x7ffffffd, 0x5, 0x8, 0xc8, 0x3, 0x3, 0xfffffffb, 0x3, 0x9, 0x100, 0x9602, 0xa, 0x6, 0x9, 0x6, 0x4000001, 0x10000, 0x5, 0x8, 0x2b91, 0x6, 0x8, 0x9, 0x11, 0x6c1b, 0x0, 0x4, 0x5, 0xb1c, 0xffffffff, 0x515ffb4b, 0xffff3441, 0xfff]}, 0x45c) r0 = syz_open_dev$evdev(&(0x7f0000000000), 0x3, 0x101882) ioctl$EVIOCSMASK(r0, 0x40104593, 0x0) write$char_usb(r0, 0x0, 0x0) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) io_setup(0x6, &(0x7f0000000540)) symlinkat(0x0, 0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00') openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) r1 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000140)='.log\x00', 0x1a10c1, 0x9c37611dc13d0da6) fchown(r1, 0xffffffffffffffff, 0xee01) write$UHID_INPUT(r1, &(0x7f0000000180)={0x8, {"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", 0x1000}}, 0x1006) syz_genetlink_get_family_id$team(&(0x7f0000000000), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r2 = getpgrp(0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000040)=0x5) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r4, 0x1, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102392, 0x18ff8) r6 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x42, 0x0) fallocate(r6, 0x1, 0x8e13, 0x8ffff) unshare(0x28000600) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0x13, 0x8, 0x80, 0x2, 0x3, 0x9, 0x20000006, 0x4d, 0x6, 0x5d, 0x9, 0x3, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x40000004, 0x0, 0x6, 0x3c5b, 0x1, 0x24, 0xd, 0x7, 0x0, 0xffffffff, 0xe661, 0x284, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x1, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x6, 0x3e, 0x8c, 0x6, 0xffff, 0x0, 0x5, 0x4, 0x8008, 0x400, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x80000131, 0x0, 0x1000, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2c0, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0xfffffffd, 0xff, 0x5, 0x1000005, 0x5f2e, 0xd, 0x4738c202, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x3, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x8, 0x9, 0x1, 0x3, 0x3, 0x81, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x7, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x4, 0x7fff, 0x0, 0x10000005, 0xb, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xca, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x3c484551], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x93a, 0x5, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x4, 0x57, 0x85, 0x3, 0x101, 0x10000, 0x2000004, 0x7fff, 0xffff, 0xa620, 0x2, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0xfffffff9, 0xfffff000, 0x10000, 0x0, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x5, 0x6, 0x226, 0x5, 0x5, 0x57, 0x30b1d693, 0xa20, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) ppoll(&(0x7f00000000c0)=[{}], 0x1, 0x0, 0x0, 0x0) 2m5.337454403s ago: executing program 0 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 2m3.274497786s ago: executing program 5 (id=1066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x81}]}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 2m3.27428675s ago: executing program 7 (id=1067): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = dup(r1) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}) write$tun(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="0a0088e70180c20000020180c2000001810044008906"], 0x16) 2m2.425018573s ago: executing program 7 (id=1070): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080", @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000400000000bdf1000e00"/30], 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)=ANY=[], 0x48) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) pipe(0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000032680)=""/102400, 0x19000) r5 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) openat(r4, &(0x7f0000000280)='./file0\x00', 0x803, 0x8) ioctl$SNDRV_TIMER_IOCTL_TREAD_OLD(r5, 0x40045402, &(0x7f0000000140)=0x1) ioctl$SNDRV_TIMER_IOCTL_SELECT(r5, 0x40345410, &(0x7f00000083c0)={{0x1}}) setpgid(r2, r3) ioctl$SNDRV_TIMER_IOCTL_CONTINUE(r5, 0x54a2) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1c}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x18}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x4}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1a}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x4, 0x0, 0xa, 0x9}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$igmp(0x2, 0x3, 0x2) mount(0x0, &(0x7f0000000240)='.\x00', &(0x7f00000000c0)='nfs\x00', 0x10040, &(0x7f0000000140)='\x04\x00\x00\x00\x04\xb0\xfe\x98\x9a!s\x91*8\xa4\xa2\xfe]B$\xb7YV\xb6-\xd9z\x81\x91\x8aP}h\xc6\x0e\xd9\v\xda\xbfS\x16 \x04\r\xcd\xdb\x9a\xd4\xaf\r\x11\xa0\xd7\xd7\xb6\x9bz\x99\xaf\xfd\x87fN\xad\x90U\xb4A\xdf\xabB\xbba\x7f\xb8\x96\x1a\xca\xc1\xab \x02\x000x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010026bd7000fcdbdf25020000000800", @ANYRES32=r3], 0x1c}}, 0x840) sendmsg$NFC_CMD_SE_IO(0xffffffffffffffff, 0x0, 0x54) 1m53.759553632s ago: executing program 7 (id=1076): r0 = socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) semget$private(0x0, 0x3, 0x0) r3 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x6, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{0x0, 0x81, 0x1, 0xf}, {0x0, 0x9, 0x38, 0x5}, {0x6, 0x9, 0x7, 0x401}, {0x97, 0xff, 0x5, 0x2}]}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r3, 0xc0502100, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) socket(0xa, 0x3, 0x87) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x1181}, [@IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}, @IFLA_MTU={0x8, 0x4, 0xd4}, @IFLA_PORT_SELF={0x4}]}, 0x40}}, 0x0) 1m46.459767189s ago: executing program 36 (id=1061): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f0000000040)=0xfffffffc, 0x4) recvmmsg(r0, &(0x7f0000000340)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/33, 0x21}, 0x4}], 0x3d5, 0x45833af92e4b38ff, 0x0) 1m46.012697361s ago: executing program 37 (id=1066): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB], 0x1c}}, 0x0) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f0000000000)='./file1\x00', 0x1010c10, &(0x7f0000000080)=ANY=[], 0x7, 0x150f, &(0x7f0000002ac0)="$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") rename(&(0x7f00000000c0)='./file1\x00', &(0x7f0000000640)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) io_setup(0x2278, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x81}]}, 0x10) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)) r0 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r1 = dup(r0) sendfile(r1, 0xffffffffffffffff, 0x0, 0x80001d00c0d1) fcntl$lock(0xffffffffffffffff, 0x24, &(0x7f0000000040)={0x0, 0x0, 0x10001, 0x4}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(0x0, 0x1, &(0x7f0000000040)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r1) 1m45.982145654s ago: executing program 7 (id=1081): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r1, r4, 0x8f5, 0x0) 1m28.763849171s ago: executing program 38 (id=1081): fsetxattr$security_capability(0xffffffffffffffff, &(0x7f0000000340), &(0x7f00000004c0)=@v1={0x1000000, [{0x8, 0x1}]}, 0xc, 0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000dc0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000280)='/sys/kernel/profiling', 0x100, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wg1\x00'}) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={0x0, 0x58}, 0x1, 0x0, 0x0, 0x4}, 0x44800) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write(r2, &(0x7f0000000240)="94", 0x1) vmsplice(r4, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7", 0x3}], 0x1, 0x0) tee(r1, r4, 0x8f5, 0x0) 51.14098959s ago: executing program 8 (id=1119): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0500000004000000080000000c"], 0x50) bpf$PROG_LOAD(0x2, &(0x7f0000000680)={0x3, 0x3, &(0x7f0000000740)=ANY=[], &(0x7f0000000780)='GPL\x00', 0x1, 0xfe, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 50.825524753s ago: executing program 8 (id=1121): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000000000020dd25d2f337d2542d000109022400010000000009040000010300000009210000000122080009058103"], 0x0) r1 = openat$pidfd(0xffffffffffffff9c, 0x0, 0x5e9500, 0x0) pidfd_send_signal(r1, 0x3e, 0x0, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, 0x0, 0x0) accept$alg(r2, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) syz_usb_connect$printer(0x0, 0x0, 0x0, 0x0) rt_sigqueueinfo(0x0, 0x21, &(0x7f0000000100)={0x1f}) syz_usb_control_io$hid(r0, &(0x7f0000000740)={0x24, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="002208000000a20100c3"], 0x0}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000280)={0xa, 0x4e22, 0xd, @loopback, 0x6}, 0x1c) r4 = dup(r3) sendmmsg$inet(r4, 0x0, 0x0, 0x91) write$binfmt_elf32(r4, 0x0, 0x258) personality(0xbe4e602dc9e6c1d3) r5 = syz_open_dev$hiddev(&(0x7f0000000000), 0x0, 0x880) syz_usb_control_io(r0, 0x0, 0x0) ioctl$HIDIOCGSTRING(r5, 0x81044804, &(0x7f0000000180)={0x3, 'c~:'}) 47.621548939s ago: executing program 8 (id=1127): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.self_freezing\x00', 0x275a, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) socket$alg(0x26, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$BTRFS_IOC_SUBVOL_CREATE(0xffffffffffffffff, 0x5000940e, 0x0) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4c21, @empty}, 0x10) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x30) ioctl$KVM_SET_NR_MMU_PAGES(r3, 0xae44, 0x7) r4 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r4, 0xc0a85320, &(0x7f00000005c0)={{0x80}, 'port0\x00', 0x62, 0x11cfa, 0x0, 0x8000008, 0x3, 0x4, 0x1, 0x0, 0x7cce8c743ee810df}) unlink(&(0x7f0000000000)='./file0\x00') ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r4, 0x40505330, &(0x7f0000000080)={0x800000, 0x90, 0x0, 0x4, 0x3ffd, 0x3}) r5 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r5, 0x40505330, &(0x7f0000000bc0)={0x800100, 0x0, 0x0, 0x724f, 0x0, 0x55a}) ioctl$VHOST_VDPA_GET_VRING_GROUP(0xffffffffffffffff, 0xc008af7b, 0x0) syz_open_dev$usbfs(0x0, 0x77, 0x101301) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000280), 0x62181) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new ecryptf'], 0x2e, 0xfffffffffffffff9) add_key(0x0, &(0x7f0000000180), &(0x7f0000000100), 0x0, 0xfffffffffffffffe) r6 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x62181) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r6, 0xc08c5332, &(0x7f00000001c0)={0x0, 0x0, 0x0, 'queue0\x00'}) ioctl$KVM_RUN(r0, 0xae80, 0x0) 41.744092735s ago: executing program 8 (id=1129): syz_clone(0xb2168400, 0x0, 0x0, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) r0 = fsopen(&(0x7f0000000040)='cgroup2\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x82) unlinkat(r1, &(0x7f0000000140)='./file0\x00', 0x200) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_SET_BINARY(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) r4 = openat$cgroup_subtree(r3, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000080)={[{0x2d, 'pids'}]}, 0x6) 40.076176453s ago: executing program 8 (id=1131): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000040)=0x7, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000600)=[{{&(0x7f0000000140)=@nfc_llcp, 0x0, &(0x7f0000000780)=[{&(0x7f0000000340)=""/180}, {&(0x7f0000000280)=""/122}, {&(0x7f0000000400)=""/165}, {&(0x7f00000004c0)=""/142}, {&(0x7f0000000640)=""/70}, {&(0x7f00000006c0)=""/179}], 0x0, &(0x7f0000000580)=""/70, 0x11}}], 0x40000000000029d, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="1800"/15], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) keyctl$KEYCTL_PKEY_QUERY(0x18, 0x0, 0x0, &(0x7f0000000080)=' hash=', 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[], 0x48) r4 = syz_open_dev$usbfs(&(0x7f0000000480), 0x76, 0x160341) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r4, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) 37.535363406s ago: executing program 8 (id=1134): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x101e02, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfc30) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r1, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 21.856091457s ago: executing program 39 (id=1134): renameat2(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xa) openat$tun(0xffffffffffffff9c, 0x0, 0x101e02, 0x0) io_submit(0x0, 0x0, &(0x7f0000000140)) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0xfc30) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet(r1, &(0x7f0000000280)={0x2, 0xfffd, @multicast1}, 0x10) sendmmsg$inet(r1, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) 9.19833522s ago: executing program 6 (id=1147): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xf7, 0x485, &(0x7f0000001040)="$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") lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000000c0)=ANY=[@ANYBLOB="020000000100000000000000020000", @ANYRES32=0xee01, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800008000000", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="100000000000000020"], 0x5c, 0x0) r0 = openat$incfs(0xffffffffffffff9c, &(0x7f0000000540)='.log\x00', 0x1c10c1, 0x9c37611dc13d0db7) fchown(r0, 0x0, 0xee01) capset(&(0x7f0000a31000)={0x20080522}, &(0x7f0000000080)={0x0, 0x7ff, 0x0, 0x0, 0x9}) write$P9_RGETLOCK(r0, &(0x7f00000000c0)={0x1e, 0x37, 0x1, {0x2, 0x7, 0x5}}, 0x1e) 8.210334197s ago: executing program 6 (id=1148): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x45, &(0x7f0000000140)={&(0x7f0000000180)=@newlink={0x58, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x14}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x58}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'syz_tun\x00', &(0x7f0000000180)=@ethtool_link_settings={0x4d, 0x600, 0xf, 0x80, 0x0, 0x0, 0xfc, 0xb, 0x80, 0x4, [0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4]}}) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x4044851}, 0x0) 7.038755785s ago: executing program 6 (id=1149): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000a40)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000800)={0x14, 0xb, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x9}}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4008840) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000780)={'wg1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) rseq(&(0x7f0000000240)={0x0, 0x0, 0x0, 0x4}, 0x20, 0x0, 0x0) mlockall(0x4) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSETLED(r2, 0x4b45, 0x5) prlimit64(0x0, 0x7, &(0x7f0000000140)={0x4, 0xc4}, 0x0) landlock_create_ruleset(&(0x7f00000000c0)={0x100}, 0x18, 0x0) ioprio_set$pid(0x2, 0x0, 0x2000) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r1, &(0x7f0000000b80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000a80)={0xb0, r3, 0x800, 0x70bd28, 0x25dfdbff, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0x8e, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x3}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x4055}, 0x10) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000c80)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x58, 0x2, 0x3, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFQA_CFG_PARAMS={0x9, 0x2, {0xc}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x9}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x4}}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x21}, @NFQA_CFG_FLAGS={0x8}, @NFQA_CFG_PARAMS={0x9, 0x2, {0x9, 0x2}}, @NFQA_CFG_CMD={0x8, 0x1, {0x2, 0x0, 0x15}}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x810099, &(0x7f00000007c0), 0x0, 0x5ad, &(0x7f0000000180)="$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") pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) syz_usb_connect$uac1(0x0, 0xa4, &(0x7f0000000140)=ANY=[@ANYBLOB="2a01000020000040b708000000000000030109029200030172e5000904000000010100000a24010000000201020c0d24070000030769dc000049c40c240000e9fffff5ffffffff0924031300010005024524", @ANYRES8=r5, @ANYBLOB="05"], 0x0) setsockopt$inet6_int(r4, 0x29, 0x1a, 0x0, 0x0) 5.933618192s ago: executing program 6 (id=1150): syz_mount_image$btrfs(&(0x7f00000055c0), &(0x7f0000005600)='./file0\x00', 0x0, &(0x7f0000000040)={[{@compress_algo={'compress', 0x3d, 'zstd'}}]}, 0x1, 0x559a, &(0x7f0000005680)="$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") r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x42, 0x0) ioctl$AUTOFS_DEV_IOCTL_FAIL(r0, 0x80087601, 0x0) 3.426291652s ago: executing program 6 (id=1151): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r0, 0x6, 0x1, &(0x7f0000000280)={0x402, 0xfffa, 0x9, 0x8, 0xfd, 0xbc, 0x29}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = inotify_init1(0x0) inotify_add_watch(r4, &(0x7f0000000200)='.\x00', 0x400) dup(r4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r5, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f0000003d80)={0x1, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @rand_addr=0x64010101}, 0x10) r6 = syz_open_dev$vim2m(&(0x7f00000002c0), 0x2000000f5, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r6, 0xc008561c, 0x0) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@dev={0xac, 0x14, 0x14, 0x2a}, @local}, 0x8) syz_emit_ethernet(0x2a, &(0x7f0000000080)=ANY=[], 0x0) syz_emit_ethernet(0x66, &(0x7f0000000340)=ANY=[@ANYBLOB="bbbbbbbbbbbb0180c200d93195fd4500005800000000002f9078000000e0e000c800b48065580000000010000800000086dd080088be000000001000000088f7ffff00000000080022eb00000000200000000200000000000000000000000800"], 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f00000005c0)=ANY=[], &(0x7f0000000480)='syzkaller\x00'}, 0x94) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(0xffffffffffffffff, 0x84, 0xc, &(0x7f0000000100), &(0x7f0000000140)=0x4) 0s ago: executing program 6 (id=1152): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, 0x0, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x180) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x4000000) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000005580)=""/102392, 0x18ff8) r1 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r2 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x20000023896) kernel console output (not intermixed with test programs): .683077][ T8659] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 563.728692][ T8659] [EXT4 FS bs=1024, gc=1, bpg=8192, ipg=32, mo=a002c018, mo2=0082] [ 563.748497][ T8659] System zones: 1-12 [ 563.781006][ T8659] EXT4-fs (loop1): 1 truncate cleaned up [ 563.835651][ T8659] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 564.947748][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 565.009986][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 565.053708][ T2984] bond0 (unregistering): Released all slaves [ 565.764803][ T2984] hsr_slave_0: left promiscuous mode [ 565.837924][ T2984] hsr_slave_1: left promiscuous mode [ 565.899803][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 565.965047][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 566.417306][ T8682] loop0: detected capacity change from 0 to 1024 [ 566.517961][ T8682] EXT4-fs (loop0): stripe (65535) is not aligned with cluster size (4096), stripe is disabled [ 566.569185][ T8682] EXT4-fs (loop0): can't mount with data=, fs mounted w/o journal [ 566.703473][ T5583] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 567.278009][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 567.396724][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 568.327688][ T5670] usb 2-1: new full-speed USB device number 8 using dummy_hcd [ 568.558007][ T5670] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 568.598453][ T5670] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 568.607620][ T5670] usb 2-1: Product: syz [ 568.619817][ T5670] usb 2-1: Manufacturer: syz [ 568.631544][ T5670] usb 2-1: SerialNumber: syz [ 568.656303][ T8711] syzkaller0: entered promiscuous mode [ 568.673267][ T5670] usb 2-1: config 0 descriptor?? [ 568.683950][ T8711] syzkaller0: entered allmulticast mode [ 568.952568][ T5670] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 569.135890][ T5225] 8021q: adding VLAN 0 to HW filter on device eth4 [ 569.759179][ T8554] bridge0: port 1(bridge_slave_0) entered blocking state [ 569.783490][ T8554] bridge0: port 1(bridge_slave_0) entered disabled state [ 569.813788][ T8554] bridge_slave_0: entered allmulticast mode [ 569.859302][ T8554] bridge_slave_0: entered promiscuous mode [ 569.903491][ T8554] bridge0: port 2(bridge_slave_1) entered blocking state [ 569.922262][ T8554] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.935631][ T8554] bridge_slave_1: entered allmulticast mode [ 569.947560][ T8554] bridge_slave_1: entered promiscuous mode [ 571.035034][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 571.046290][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 571.055265][ T8552] bridge_slave_0: entered allmulticast mode [ 571.066400][ T8552] bridge_slave_0: entered promiscuous mode [ 571.095318][ T8554] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.116218][ T8552] bridge0: port 2(bridge_slave_1) entered blocking state [ 571.141659][ T8552] bridge0: port 2(bridge_slave_1) entered disabled state [ 571.156696][ T8552] bridge_slave_1: entered allmulticast mode [ 571.167690][ T8552] bridge_slave_1: entered promiscuous mode [ 571.199368][ T8554] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 571.397734][ T8554] team0: Port device team_slave_0 added [ 571.444434][ T8552] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 571.512810][ T8554] team0: Port device team_slave_1 added [ 571.560893][ T8552] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 572.088267][ T8552] team0: Port device team_slave_0 added [ 572.136249][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.171724][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.275873][ T8554] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 572.312466][ T5670] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 572.381602][ T8740] loop3: detected capacity change from 0 to 1024 [ 572.418032][ T8740] hfsplus: Bad value for 'gid' [ 572.451079][ T8552] team0: Port device team_slave_1 added [ 572.667561][ T8554] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 572.716116][ T8554] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 572.767379][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 572.777844][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 572.817686][ T8554] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.962213][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 572.975154][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.016740][ T8552] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 573.076171][ T8552] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 573.100679][ T8552] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 573.219926][ T8552] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 573.451730][ T5670] usb 2-1: USB disconnect, device number 8 [ 574.102362][ T8554] hsr_slave_0: entered promiscuous mode [ 574.145859][ T8554] hsr_slave_1: entered promiscuous mode [ 574.222431][ T8554] debugfs: 'hsr0' already exists in 'hsr' [ 574.262575][ T8554] Cannot create hsr debugfs directory [ 576.757946][ T8552] hsr_slave_0: entered promiscuous mode [ 577.727340][ T8552] hsr_slave_1: entered promiscuous mode [ 577.764694][ T8552] debugfs: 'hsr0' already exists in 'hsr' [ 577.770764][ T8552] Cannot create hsr debugfs directory [ 579.116937][ T8775] netlink: 24 bytes leftover after parsing attributes in process `syz.3.896'. [ 579.130192][ T29] audit: type=1326 audit(1778647826.886:46): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b999ce59 code=0x7ffc0000 [ 579.224334][ T29] audit: type=1326 audit(1778647826.886:47): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f48b999ce59 code=0x7ffc0000 [ 579.288016][ T29] audit: type=1326 audit(1778647826.886:48): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.396517][ T29] audit: type=1326 audit(1778647826.886:49): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.504722][ T29] audit: type=1326 audit(1778647826.886:50): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.603108][ T29] audit: type=1326 audit(1778647826.886:51): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.713105][ T29] audit: type=1326 audit(1778647826.886:52): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.805162][ T29] audit: type=1326 audit(1778647826.886:53): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.904894][ T29] audit: type=1326 audit(1778647826.886:54): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 579.961043][ T8778] syzkaller0: entered promiscuous mode [ 579.966885][ T5674] usb 4-1: new full-speed USB device number 14 using dummy_hcd [ 579.975595][ T8778] syzkaller0: entered allmulticast mode [ 579.987812][ T29] audit: type=1326 audit(1778647826.936:55): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=8771 comm="syz.0.895" exe="/root/ci-upstream-kmsan-gce-root/syz-executor" sig=0 arch=c000003e syscall=15 compat=0 ip=0x7f48b993e1d9 code=0x7ffc0000 [ 580.160742][ T5225] 8021q: adding VLAN 0 to HW filter on device eth5 [ 580.198715][ T5674] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 580.235006][ T5674] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 580.268800][ T5674] usb 4-1: Product: syz [ 580.290468][ T5674] usb 4-1: Manufacturer: syz [ 580.318728][ T5674] usb 4-1: SerialNumber: syz [ 580.358788][ T5674] usb 4-1: config 0 descriptor?? [ 580.621177][ T5674] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 581.765759][ T8552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 581.887260][ T8554] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.086154][ T8552] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.251229][ T8554] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.289593][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.297248][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.440250][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.447893][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.544839][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.552420][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.620103][ T8815] loop0: detected capacity change from 0 to 512 [ 582.700837][ T8815] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.905: inode has both inline data and extents flags [ 582.717744][ T8815] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 582.718521][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 582.730171][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.734785][ C0] EXT4-fs (loop0): initial error at time 1778647830: ext4_orphan_get:1397: inode 15 [ 582.742417][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.751776][ C0] EXT4-fs (loop0): last error at time 1778647830: ext4_orphan_get:1397: inode 15 [ 582.784468][ T8815] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.905: couldn't read orphan inode 15 (err -117) [ 582.798349][ T5674] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 582.870031][ T8815] loop0: lost filesystem error report for type 5 error -117 [ 582.887982][ T8815] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 583.239190][ T5577] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 583.627389][ T8824] cgroup: fork rejected by pids controller in /syz0 [ 584.084483][ T5678] usb 4-1: USB disconnect, device number 14 [ 584.548946][ T8833] syzkaller0: entered promiscuous mode [ 584.570095][ T8833] syzkaller0: entered allmulticast mode [ 585.548546][ T5225] 8021q: adding VLAN 0 to HW filter on device eth6 [ 586.116913][ T12] bridge_slave_1: left allmulticast mode [ 586.136819][ T12] bridge_slave_1: left promiscuous mode [ 586.159296][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.187409][ T12] bridge_slave_0: left allmulticast mode [ 586.207273][ T12] bridge_slave_0: left promiscuous mode [ 586.222504][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.582900][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.597942][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.615339][ T12] bond0 (unregistering): Released all slaves [ 587.374565][ T12] hsr_slave_0: left promiscuous mode [ 587.383640][ T12] hsr_slave_1: left promiscuous mode [ 587.393215][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.402986][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.671471][ T48] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 587.683013][ T48] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 587.699207][ T48] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 587.700139][ T9] usb 2-1: new full-speed USB device number 9 using dummy_hcd [ 587.741430][ T48] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 587.759538][ T48] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 587.955463][ T9] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 587.991994][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.031687][ T9] usb 2-1: Product: syz [ 588.051356][ T9] usb 2-1: Manufacturer: syz [ 588.065935][ T9] usb 2-1: SerialNumber: syz [ 588.107150][ T9] usb 2-1: config 0 descriptor?? [ 588.202019][ T12] team0 (unregistering): Port device team_slave_1 removed [ 588.281683][ T12] team0 (unregistering): Port device team_slave_0 removed [ 588.377468][ T9] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 588.849598][ T8554] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.325968][ T8895] netlink: 8 bytes leftover after parsing attributes in process `syz.3.917'. [ 589.496888][ T12] IPVS: stop unused estimator thread 0... [ 589.605300][ T8552] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 589.849086][ T5582] Bluetooth: hci1: command tx timeout [ 590.004727][ T8901] syzkaller0: entered promiscuous mode [ 590.022985][ T8901] syzkaller0: entered allmulticast mode [ 590.350085][ T5225] 8021q: adding VLAN 0 to HW filter on device eth7 [ 590.516275][ T9] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 592.116035][ T5582] Bluetooth: hci1: command tx timeout [ 594.570928][ T5582] Bluetooth: hci1: command tx timeout [ 597.165291][ T5582] Bluetooth: hci1: command tx timeout [ 599.101929][ T5678] usb 2-1: USB disconnect, device number 9 [ 600.225917][ T8939] loop1: detected capacity change from 0 to 1024 [ 600.263437][ T8939] hfsplus: failed to load extents file [ 603.827062][ T8944] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 603.836364][ T8944] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 604.802217][ T8944] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 604.833566][ T8944] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 605.915333][ T8944] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 607.961585][ T5582] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 607.975171][ T5582] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 607.985462][ T5582] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 608.004049][ T5582] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 608.012607][ T48] Bluetooth: hci5: command tx timeout [ 608.029494][ T5582] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 609.179473][ T5670] usb 4-1: new high-speed USB device number 15 using dummy_hcd [ 609.311389][ T8971] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 609.395356][ T5670] usb 4-1: Using ep0 maxpacket: 16 [ 609.424482][ T5670] usb 4-1: too many endpoints for config 1 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 609.476768][ T5670] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 32 [ 609.533992][ T5670] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 32 [ 609.590383][ T5670] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 609.633804][ T5670] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 609.697820][ T5670] usb 4-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 255 [ 609.762254][ T5670] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 609.808404][ T5670] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 609.857605][ T5670] usb 4-1: SerialNumber: syz [ 609.915569][ T8969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 609.968700][ T8969] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 610.090272][ T5582] Bluetooth: hci6: command tx timeout [ 610.090556][ T8944] Bluetooth: hci5: command tx timeout [ 610.220598][ T8988] loop1: detected capacity change from 0 to 1024 [ 610.233622][ T8978] usb 4-1: USB disconnect, device number 15 [ 610.281529][ T5981] bridge_slave_1: left allmulticast mode [ 610.289564][ T8988] EXT4-fs: Invalid want_extra_isize 125 [ 610.324824][ T5981] bridge_slave_1: left promiscuous mode [ 610.349437][ T5981] bridge0: port 2(bridge_slave_1) entered disabled state [ 610.407644][ T5981] bridge_slave_0: left allmulticast mode [ 610.446233][ T5981] bridge_slave_0: left promiscuous mode [ 610.498065][ T5981] bridge0: port 1(bridge_slave_0) entered disabled state [ 611.461896][ T5981] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 611.507038][ T5981] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 611.523524][ T5981] bond0 (unregistering): Released all slaves [ 611.538755][ T8978] usb 4-1: new full-speed USB device number 16 using dummy_hcd [ 611.706494][ T5225] 8021q: adding VLAN 0 to HW filter on device eth8 [ 611.799557][ T8978] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 611.842623][ T8978] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 611.869844][ T8978] usb 4-1: Product: syz [ 611.889998][ T8978] usb 4-1: Manufacturer: syz [ 611.904220][ T8978] usb 4-1: SerialNumber: syz [ 611.964605][ T8978] usb 4-1: config 0 descriptor?? [ 611.980943][ T5981] hsr_slave_0: left promiscuous mode [ 612.029790][ T5981] hsr_slave_1: left promiscuous mode [ 612.046555][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 612.091250][ T5981] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 612.171602][ T8944] Bluetooth: hci5: command tx timeout [ 612.172028][ T5582] Bluetooth: hci6: command tx timeout [ 612.237356][ T8978] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 613.164710][ T5981] team0 (unregistering): Port device team_slave_1 removed [ 613.229871][ T5981] team0 (unregistering): Port device team_slave_0 removed [ 614.251134][ T5582] Bluetooth: hci6: command tx timeout [ 614.251264][ T8944] Bluetooth: hci5: command tx timeout [ 614.348347][ T8978] dvb_usb_rtl28xxu 4-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -32 [ 614.498050][ T8872] bridge0: port 1(bridge_slave_0) entered blocking state [ 614.513580][ T8872] bridge0: port 1(bridge_slave_0) entered disabled state [ 614.524584][ T8872] bridge_slave_0: entered allmulticast mode [ 614.536863][ T8872] bridge_slave_0: entered promiscuous mode [ 614.663627][ T8872] bridge0: port 2(bridge_slave_1) entered blocking state [ 614.673362][ T8872] bridge0: port 2(bridge_slave_1) entered disabled state [ 614.683608][ T8872] bridge_slave_1: entered allmulticast mode [ 614.710027][ T8872] bridge_slave_1: entered promiscuous mode [ 615.070025][ T2975] bridge_slave_1: left allmulticast mode [ 615.078072][ T2975] bridge_slave_1: left promiscuous mode [ 615.094863][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 615.118665][ T2975] bridge_slave_0: left allmulticast mode [ 615.128819][ T2975] bridge_slave_0: left promiscuous mode [ 615.136831][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 615.560416][ T8611] usb 4-1: USB disconnect, device number 16 [ 615.796734][ T9006] loop3: detected capacity change from 0 to 16 [ 615.827258][ T9006] erofs (device loop3): invalid ishare xattr prefix id 0 [ 615.887033][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 615.951080][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 615.994489][ T2975] bond0 (unregistering): Released all slaves [ 616.068012][ T8872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 616.179456][ T8872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 616.328509][ T8944] Bluetooth: hci6: command tx timeout [ 616.604574][ T2975] hsr_slave_0: left promiscuous mode [ 616.605119][ T9011] loop3: detected capacity change from 0 to 128 [ 616.616983][ T2975] hsr_slave_1: left promiscuous mode [ 616.645213][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 616.656945][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 618.060184][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 618.187902][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 618.867856][ T8872] team0: Port device team_slave_0 added [ 619.034447][ T9027] loop3: detected capacity change from 0 to 4096 [ 619.051304][ T8872] team0: Port device team_slave_1 added [ 619.118621][ T9027] EXT4-fs (loop3): Test dummy encryption mode enabled [ 619.212394][ T9027] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 619.636102][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 619.730725][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 619.752853][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 619.826778][ T8872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 619.900884][ T8872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 619.922180][ T8872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 620.000616][ T8872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 620.156843][ T5225] 8021q: adding VLAN 0 to HW filter on device eth9 [ 621.498356][ T9044] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 628.708589][ T8872] hsr_slave_0: entered promiscuous mode [ 628.752317][ T8872] hsr_slave_1: entered promiscuous mode [ 629.040465][ T9054] loop3: detected capacity change from 0 to 512 [ 629.066854][ T9054] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.094886][ T9054] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.139006][ T9054] EXT4-fs: Ignoring removed oldalloc option [ 629.170340][ T9054] EXT4-fs: Ignoring removed mblk_io_submit option [ 629.225323][ T9054] EXT4-fs (loop3): Test dummy encryption mode enabled [ 629.273582][ T9054] EXT4-fs (loop3): encrypted files will use data=ordered instead of data journaling mode [ 629.398692][ T9054] EXT4-fs (loop3): 1 truncate cleaned up [ 629.456457][ T9054] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 629.623440][ T9054] fscrypt: AES-256-XTS using implementation "xts(ecb(aes-lib))" [ 629.990037][ T5582] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 630.001512][ T5582] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 630.018029][ T5582] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 630.029309][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 630.053864][ T5582] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 630.063873][ T5582] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 631.347461][ T8943] bridge0: port 1(bridge_slave_0) entered blocking state [ 631.372022][ T8943] bridge0: port 1(bridge_slave_0) entered disabled state [ 631.396219][ T8943] bridge_slave_0: entered allmulticast mode [ 631.427650][ T8943] bridge_slave_0: entered promiscuous mode [ 631.756571][ T8943] bridge0: port 2(bridge_slave_1) entered blocking state [ 631.776026][ T8943] bridge0: port 2(bridge_slave_1) entered disabled state [ 631.821970][ T8943] bridge_slave_1: entered allmulticast mode [ 631.870950][ T8943] bridge_slave_1: entered promiscuous mode [ 632.168476][ T5582] Bluetooth: hci0: command tx timeout [ 632.340904][ T8949] bridge0: port 1(bridge_slave_0) entered blocking state [ 632.369136][ T8949] bridge0: port 1(bridge_slave_0) entered disabled state [ 632.395849][ T8949] bridge_slave_0: entered allmulticast mode [ 632.421324][ T8949] bridge_slave_0: entered promiscuous mode [ 632.504477][ T8943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 632.582835][ T2984] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.668353][ T8949] bridge0: port 2(bridge_slave_1) entered blocking state [ 632.700886][ T8949] bridge0: port 2(bridge_slave_1) entered disabled state [ 632.718914][ T8949] bridge_slave_1: entered allmulticast mode [ 632.739465][ T8949] bridge_slave_1: entered promiscuous mode [ 632.853023][ T8943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 632.972661][ T9101] loop3: detected capacity change from 0 to 256 [ 633.021078][ T9101] exFAT-fs (loop3): failed to test first cluster bit of root dir(5) [ 633.090843][ T2984] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.148133][ T8949] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 633.156078][ T9101] exFAT-fs (loop3): start_clu is invalid cluster(0x400) [ 633.195604][ T8943] team0: Port device team_slave_0 added [ 633.216264][ T8949] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 633.297268][ T8943] team0: Port device team_slave_1 added [ 633.357930][ T2984] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.462096][ T8949] team0: Port device team_slave_0 added [ 633.544550][ T9104] loop3: detected capacity change from 0 to 1024 [ 633.673835][ T8949] team0: Port device team_slave_1 added [ 633.776178][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 633.784639][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 633.815638][ T8943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 633.873538][ T2984] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 633.907810][ T9106] loop3: detected capacity change from 0 to 8 [ 633.930945][ T9106] unable to read xattr id index table [ 634.024559][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 634.048511][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.108555][ T8949] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 634.153389][ T8943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.166172][ T8943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.209843][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 634.216655][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 634.228005][ T8943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.248578][ T5582] Bluetooth: hci0: command tx timeout [ 634.260644][ T8949] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 634.267915][ T8949] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 634.298888][ T8949] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 634.812258][ T8943] hsr_slave_0: entered promiscuous mode [ 634.843198][ T8943] hsr_slave_1: entered promiscuous mode [ 634.863222][ T8943] debugfs: 'hsr0' already exists in 'hsr' [ 634.879045][ T8943] Cannot create hsr debugfs directory [ 635.032166][ T8949] hsr_slave_0: entered promiscuous mode [ 635.057777][ T8949] hsr_slave_1: entered promiscuous mode [ 635.102222][ T8949] debugfs: 'hsr0' already exists in 'hsr' [ 635.115759][ T8949] Cannot create hsr debugfs directory [ 637.060227][ T5582] Bluetooth: hci0: command tx timeout [ 637.808340][ T9128] loop3: detected capacity change from 0 to 8 [ 638.242439][ T9128] unable to read inode lookup table [ 639.780808][ T5582] Bluetooth: hci0: command tx timeout [ 644.042608][ T2984] bridge_slave_1: left allmulticast mode [ 644.062165][ T2984] bridge_slave_1: left promiscuous mode [ 644.086785][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 644.123827][ T2984] bridge_slave_0: left allmulticast mode [ 644.130670][ T2984] bridge_slave_0: left promiscuous mode [ 644.137246][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 644.649797][ T9143] loop3: detected capacity change from 0 to 512 [ 644.724520][ T9143] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 644.752728][ T9143] ext4 filesystem being mounted at /216/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 644.834905][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 644.855493][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 644.867950][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 644.883306][ T2984] bond0 (unregistering): Released all slaves [ 648.270191][ T5225] 8021q: adding VLAN 0 to HW filter on device eth10 [ 649.957719][ T2984] tipc: Left network mode [ 650.313233][ T8944] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 650.324251][ T8944] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 650.335030][ T8944] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 650.349785][ T8944] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 650.362652][ T8944] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 651.140984][ T2984] hsr_slave_0: left promiscuous mode [ 651.166454][ T2984] hsr_slave_1: left promiscuous mode [ 651.185751][ T2984] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 651.216841][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 651.290921][ T2984] veth1_macvtap: left promiscuous mode [ 651.312365][ T2984] veth0_macvtap: left promiscuous mode [ 651.338650][ T2984] veth1_vlan: left promiscuous mode [ 652.307720][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 652.378566][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 652.410329][ T5582] Bluetooth: hci2: command tx timeout [ 653.237357][ T2984] IPVS: stop unused estimator thread 0... [ 653.951756][ T9066] bridge0: port 1(bridge_slave_0) entered blocking state [ 653.971263][ T9066] bridge0: port 1(bridge_slave_0) entered disabled state [ 653.993897][ T9066] bridge_slave_0: entered allmulticast mode [ 654.015585][ T9066] bridge_slave_0: entered promiscuous mode [ 654.072838][ T9066] bridge0: port 2(bridge_slave_1) entered blocking state [ 654.089566][ T9066] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.108041][ T9066] bridge_slave_1: entered allmulticast mode [ 654.118823][ T9066] bridge_slave_1: entered promiscuous mode [ 654.166718][ T2984] bridge_slave_1: left allmulticast mode [ 654.173607][ T2984] bridge_slave_1: left promiscuous mode [ 654.181774][ T2984] bridge0: port 2(bridge_slave_1) entered disabled state [ 654.199212][ T2984] bridge_slave_0: left allmulticast mode [ 654.205616][ T2984] bridge_slave_0: left promiscuous mode [ 654.219655][ T2984] bridge0: port 1(bridge_slave_0) entered disabled state [ 654.489127][ T5582] Bluetooth: hci2: command tx timeout [ 654.597299][ T2984] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 654.621095][ T2984] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 654.640163][ T2984] bond0 (unregistering): Released all slaves [ 654.869589][ T8949] 8021q: adding VLAN 0 to HW filter on device bond0 [ 654.930952][ T9066] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 654.983802][ T9200] loop3: detected capacity change from 0 to 1024 [ 654.995575][ T9066] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 655.141727][ T2984] hsr_slave_0: left promiscuous mode [ 655.165514][ T2984] hsr_slave_1: left promiscuous mode [ 655.186094][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 655.219087][ T2984] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 655.777413][ T2984] team0 (unregistering): Port device team_slave_1 removed [ 655.804284][ T2984] team0 (unregistering): Port device team_slave_0 removed [ 655.968454][ T8977] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 656.036331][ T5225] 8021q: adding VLAN 0 to HW filter on device eth11 [ 656.153074][ T8977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 656.202910][ T8977] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 656.242917][ T8977] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 656.259711][ T9066] team0: Port device team_slave_0 added [ 656.286438][ T8977] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 656.315762][ T8977] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.359144][ T8977] usb 4-1: config 0 descriptor?? [ 656.370432][ T9066] team0: Port device team_slave_1 added [ 656.569539][ T5582] Bluetooth: hci2: command tx timeout [ 656.604829][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 656.613952][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.642510][ T9066] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 656.685497][ T8943] 8021q: adding VLAN 0 to HW filter on device bond0 [ 656.699744][ T8949] 8021q: adding VLAN 0 to HW filter on device team0 [ 656.716677][ T9066] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 656.725004][ T9066] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 656.751343][ T9066] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 656.851819][ T8977] plantronics 0003:047F:FFFF.0007: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 656.920087][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 656.927736][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.045874][ T9206] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 657.063966][ T9066] hsr_slave_0: entered promiscuous mode [ 657.071962][ T9206] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 657.091445][ T9066] hsr_slave_1: entered promiscuous mode [ 657.167173][ T8977] usb 4-1: USB disconnect, device number 17 [ 657.182794][ T5981] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.190459][ T5981] bridge0: port 2(bridge_slave_1) entered forwarding state [ 657.269449][ T8943] 8021q: adding VLAN 0 to HW filter on device team0 [ 657.472612][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 657.480020][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 657.627294][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 657.634881][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 658.648490][ T5582] Bluetooth: hci2: command tx timeout [ 659.205493][ T9156] bridge0: port 1(bridge_slave_0) entered blocking state [ 659.236979][ T9156] bridge0: port 1(bridge_slave_0) entered disabled state [ 659.260725][ T9156] bridge_slave_0: entered allmulticast mode [ 659.299030][ T9156] bridge_slave_0: entered promiscuous mode [ 659.332698][ T9156] bridge0: port 2(bridge_slave_1) entered blocking state [ 659.348652][ T9156] bridge0: port 2(bridge_slave_1) entered disabled state [ 659.374443][ T9156] bridge_slave_1: entered allmulticast mode [ 659.393621][ T9156] bridge_slave_1: entered promiscuous mode [ 659.871943][ T9156] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 659.986286][ T9156] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 660.140843][ T5225] 8021q: adding VLAN 0 to HW filter on device eth12 [ 660.399897][ T9156] team0: Port device team_slave_0 added [ 660.514969][ T9156] team0: Port device team_slave_1 added [ 660.560048][ T8944] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 660.577696][ T8944] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 660.587932][ T8944] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 660.601147][ T8944] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 660.612878][ T8944] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 660.751055][ T5582] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 660.762789][ T5582] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 660.774189][ T5582] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 660.793411][ T5582] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 660.807643][ T5582] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 660.859206][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 660.866410][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 660.938367][ T9156] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 661.047743][ T9156] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 661.080294][ T9156] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 661.158130][ T9156] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 662.030535][ T9156] hsr_slave_0: entered promiscuous mode [ 662.095889][ T9156] hsr_slave_1: entered promiscuous mode [ 662.117270][ T9156] debugfs: 'hsr0' already exists in 'hsr' [ 662.137225][ T9156] Cannot create hsr debugfs directory [ 662.732483][ T8944] Bluetooth: hci1: command tx timeout [ 662.836539][ T52] bridge_slave_1: left allmulticast mode [ 662.847461][ T52] bridge_slave_1: left promiscuous mode [ 662.864711][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 662.883670][ T52] bridge_slave_0: left allmulticast mode [ 662.890078][ T8944] Bluetooth: hci4: command tx timeout [ 662.896051][ T52] bridge_slave_0: left promiscuous mode [ 662.903698][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 663.293087][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 663.308960][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 663.324004][ T52] bond0 (unregistering): Released all slaves [ 663.675081][ T52] hsr_slave_0: left promiscuous mode [ 663.698045][ T52] hsr_slave_1: left promiscuous mode [ 663.711016][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 663.730089][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 664.146190][ T52] team0 (unregistering): Port device team_slave_1 removed [ 664.177876][ T52] team0 (unregistering): Port device team_slave_0 removed [ 664.774465][ T9066] 8021q: adding VLAN 0 to HW filter on device bond0 [ 664.808922][ T8944] Bluetooth: hci1: command tx timeout [ 664.968537][ T8944] Bluetooth: hci4: command tx timeout [ 665.155552][ T56] bridge_slave_1: left allmulticast mode [ 665.162816][ T56] bridge_slave_1: left promiscuous mode [ 665.174124][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 665.191633][ T56] bridge_slave_0: left allmulticast mode [ 665.197693][ T56] bridge_slave_0: left promiscuous mode [ 665.205484][ T56] bridge0: port 1(bridge_slave_0) entered disabled state [ 665.800339][ T56] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 665.858033][ T56] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 665.890474][ T56] bond0 (unregistering): Released all slaves [ 666.141417][ T56] hsr_slave_0: left promiscuous mode [ 666.163964][ T56] hsr_slave_1: left promiscuous mode [ 666.180363][ T56] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 666.206234][ T56] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 666.899502][ T8944] Bluetooth: hci1: command tx timeout [ 666.993710][ T56] team0 (unregistering): Port device team_slave_1 removed [ 667.019861][ T56] team0 (unregistering): Port device team_slave_0 removed [ 667.059135][ T8944] Bluetooth: hci4: command tx timeout [ 667.255739][ T5225] 8021q: adding VLAN 0 to HW filter on device eth13 [ 667.300709][ T9066] 8021q: adding VLAN 0 to HW filter on device team0 [ 667.627010][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 667.634706][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 667.766128][ T9362] loop3: detected capacity change from 0 to 1024 [ 667.790665][ T9362] EXT4-fs: Ignoring removed oldalloc option [ 667.843039][ T9362] EXT4-fs (loop3): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 667.896171][ T9362] ext4 filesystem being mounted at /241/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 667.904398][ T5982] bridge0: port 2(bridge_slave_1) entered blocking state [ 667.914564][ T5982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 668.969050][ T8944] Bluetooth: hci1: command tx timeout [ 669.128492][ T8944] Bluetooth: hci4: command tx timeout [ 669.500784][ T9156] 8021q: adding VLAN 0 to HW filter on device bond0 [ 669.898063][ T9156] 8021q: adding VLAN 0 to HW filter on device team0 [ 670.109323][ T2984] bridge0: port 1(bridge_slave_0) entered blocking state [ 670.116924][ T2984] bridge0: port 1(bridge_slave_0) entered forwarding state [ 670.325265][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 670.332873][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 670.519197][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0006-0000-000000000000. [ 671.393802][ T9262] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.420882][ T9262] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.441008][ T9262] bridge_slave_0: entered allmulticast mode [ 671.465513][ T9262] bridge_slave_0: entered promiscuous mode [ 671.507016][ T9260] bridge0: port 1(bridge_slave_0) entered blocking state [ 671.536713][ T9260] bridge0: port 1(bridge_slave_0) entered disabled state [ 671.563567][ T9260] bridge_slave_0: entered allmulticast mode [ 671.797741][ T9260] bridge_slave_0: entered promiscuous mode [ 671.920458][ T9260] bridge0: port 2(bridge_slave_1) entered blocking state [ 671.951437][ T9260] bridge0: port 2(bridge_slave_1) entered disabled state [ 672.380521][ T9260] bridge_slave_1: entered allmulticast mode [ 672.733559][ T9260] bridge_slave_1: entered promiscuous mode [ 673.083114][ T9262] bridge0: port 2(bridge_slave_1) entered blocking state [ 673.142306][ T9262] bridge0: port 2(bridge_slave_1) entered disabled state [ 673.163525][ T9262] bridge_slave_1: entered allmulticast mode [ 673.279266][ T9262] bridge_slave_1: entered promiscuous mode [ 674.396100][ T9262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.427751][ T9262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.672536][ T9260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 674.746193][ T9262] team0: Port device team_slave_0 added [ 674.788971][ T9260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 674.936566][ T9262] team0: Port device team_slave_1 added [ 675.200163][ T5225] 8021q: adding VLAN 0 to HW filter on device eth14 [ 675.237695][ T9260] team0: Port device team_slave_0 added [ 675.292239][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.309248][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.376729][ T9262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.410928][ T9262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.428543][ T9262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.478737][ T9262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 675.530529][ T9260] team0: Port device team_slave_1 added [ 675.752670][ T9260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 675.760320][ T9260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.800608][ T9260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 675.851909][ T9260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 675.860039][ T9260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 675.889649][ T9260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 676.038678][ T9262] hsr_slave_0: entered promiscuous mode [ 676.047420][ T9262] hsr_slave_1: entered promiscuous mode [ 676.055634][ T9262] debugfs: 'hsr0' already exists in 'hsr' [ 676.061837][ T9262] Cannot create hsr debugfs directory [ 676.276385][ T9260] hsr_slave_0: entered promiscuous mode [ 676.288388][ T9260] hsr_slave_1: entered promiscuous mode [ 676.296135][ T9260] debugfs: 'hsr0' already exists in 'hsr' [ 676.302249][ T9260] Cannot create hsr debugfs directory [ 676.564610][ T9066] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 686.864688][ T9066] veth0_vlan: entered promiscuous mode [ 686.927700][ T9262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.063544][ T9066] veth1_vlan: entered promiscuous mode [ 687.154937][ T9260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 687.193941][ T9262] 8021q: adding VLAN 0 to HW filter on device team0 [ 687.313717][ T9470] loop3: detected capacity change from 0 to 512 [ 687.344258][ T9470] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.988: inode has both inline data and extents flags [ 687.358020][ T9470] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 687.363785][ T9470] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.988: couldn't read orphan inode 15 (err -117) [ 687.373364][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 687.373455][ C0] EXT4-fs (loop3): initial error at time 1778647935: ext4_orphan_get:1397: inode 15 [ 687.373608][ C0] EXT4-fs (loop3): last error at time 1778647935: ext4_orphan_get:1397: inode 15 [ 687.399105][ T9156] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 687.404284][ T9470] loop3: lost filesystem error report for type 5 error -117 [ 687.428480][ T9470] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 687.464210][ T5982] bridge0: port 1(bridge_slave_0) entered blocking state [ 687.471839][ T5982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 687.630652][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 687.690963][ T2975] bridge0: port 2(bridge_slave_1) entered blocking state [ 687.698572][ T2975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 687.926225][ T9260] 8021q: adding VLAN 0 to HW filter on device team0 [ 688.041580][ T9480] loop3: detected capacity change from 0 to 8 [ 688.086810][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 688.094508][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 688.238917][ T9480] SQUASHFS error: Failed to read block 0x71: -5 [ 688.283282][ T29] kauditd_printk_skb: 86 callbacks suppressed [ 688.283371][ T29] audit: type=1800 audit(1778647936.036:142): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.989" name="file1" dev="loop3" ino=1 res=0 errno=0 [ 688.295032][ T5225] 8021q: adding VLAN 0 to HW filter on device eth15 [ 688.421292][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 688.428849][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 688.517735][ T9066] veth0_macvtap: entered promiscuous mode [ 688.853883][ T9066] veth1_macvtap: entered promiscuous mode [ 689.205565][ T9497] loop3: detected capacity change from 0 to 8 [ 689.270529][ T9497] squashfs: Unknown parameter 'Ç' [ 690.136835][ T9156] veth0_vlan: entered promiscuous mode [ 690.375246][ T9156] veth1_vlan: entered promiscuous mode [ 691.271144][ T9506] ecryptfs: Unknown parameter '³' [ 692.577100][ T5582] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 692.604024][ T5582] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 692.629242][ T5582] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 692.710751][ T5582] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 692.731915][ T5582] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 693.341616][ T9156] veth0_macvtap: entered promiscuous mode [ 693.487348][ T9156] veth1_macvtap: entered promiscuous mode [ 693.855492][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 694.016022][ T9156] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 694.839202][ T5582] Bluetooth: hci5: command tx timeout [ 695.030821][ T9541] loop3: detected capacity change from 0 to 1024 [ 695.040344][ T9541] EXT4-fs: Ignoring removed orlov option [ 695.586122][ T9541] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 695.634427][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 695.642134][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 696.169224][ T5982] bridge_slave_1: left allmulticast mode [ 696.237970][ T5982] bridge_slave_1: left promiscuous mode [ 696.292110][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 696.402585][ T5982] bridge_slave_0: left allmulticast mode [ 696.443170][ T5982] bridge_slave_0: left promiscuous mode [ 696.499022][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 696.889095][ T5582] Bluetooth: hci5: command tx timeout [ 697.053818][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 697.334551][ T9553] loop3: detected capacity change from 0 to 2048 [ 697.398681][ T9553] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 697.427515][ T9553] netlink: 48 bytes leftover after parsing attributes in process `syz.3.993'. [ 697.530745][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 697.550507][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 697.551727][ T29] audit: type=1800 audit(1778647945.306:143): pid=9557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.993" name="bus" dev="loop3" ino=18 res=0 errno=0 [ 697.587793][ T9557] Invalid ELF header magic: != ELF [ 697.593345][ T5982] bond0 (unregistering): Released all slaves [ 697.680823][ T5225] 8021q: adding VLAN 0 to HW filter on device eth16 [ 697.962275][ T5982] hsr_slave_0: left promiscuous mode [ 697.997687][ T5982] hsr_slave_1: left promiscuous mode [ 698.026793][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 698.056838][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 698.077108][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 698.167802][ T5982] veth1_macvtap: left promiscuous mode [ 698.202817][ T5982] veth0_macvtap: left promiscuous mode [ 698.241167][ T5982] veth1_vlan: left promiscuous mode [ 698.272172][ T5982] veth0_vlan: left promiscuous mode [ 698.848785][ T9569] loop3: detected capacity change from 0 to 512 [ 698.873140][ T9569] EXT4-fs error (device loop3): ext4_orphan_get:1397: inode #15: comm syz.3.996: inode has both inline data and extents flags [ 698.891588][ T9569] loop3: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 698.893089][ T9569] EXT4-fs error (device loop3): ext4_orphan_get:1402: comm syz.3.996: couldn't read orphan inode 15 (err -117) [ 698.902743][ C0] EXT4-fs (loop3): error count since last fsck: 1 [ 698.902834][ C0] EXT4-fs (loop3): initial error at time 1778647946: ext4_orphan_get:1397: inode 15 [ 698.903000][ C0] EXT4-fs (loop3): last error at time 1778647946: ext4_orphan_get:1397: inode 15 [ 698.940874][ T9569] loop3: lost filesystem error report for type 5 error -117 [ 698.945862][ T9569] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 698.970611][ T5582] Bluetooth: hci5: command tx timeout [ 699.035309][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 699.186735][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 699.253278][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 699.416442][ T9573] loop3: detected capacity change from 0 to 512 [ 699.501455][ T9573] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 699.517592][ T9573] ext4 filesystem being mounted at /261/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 699.714965][ T5585] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 699.750157][ T5585] EXT4-fs error (device loop3): ext4_lookup:1785: inode #12: comm syz-executor: iget: bad i_size value: 2533274857506816 [ 699.908835][ T9260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.007651][ T9262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 700.161566][ T5585] syz_tun (unregistering): left allmulticast mode [ 700.340978][ T5585] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 701.051331][ T5582] Bluetooth: hci5: command tx timeout [ 701.477649][ T5982] bridge_slave_1: left allmulticast mode [ 701.506756][ T5982] bridge_slave_1: left promiscuous mode [ 701.534347][ T5982] bridge0: port 2(bridge_slave_1) entered disabled state [ 701.594156][ T5982] bridge_slave_0: left allmulticast mode [ 701.613756][ T5982] bridge_slave_0: left promiscuous mode [ 701.641202][ T5982] bridge0: port 1(bridge_slave_0) entered disabled state [ 702.163766][ T5982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 702.217444][ T5982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 702.241866][ T5982] bond0 (unregistering): Released all slaves [ 702.978966][ T5982] hsr_slave_0: left promiscuous mode [ 703.018550][ T5982] hsr_slave_1: left promiscuous mode [ 703.040855][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 703.075452][ T5982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 703.112668][ T5982] veth: left promiscuous mode [ 703.209398][ T8944] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 703.227454][ T8944] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 703.237799][ T8944] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 703.252898][ T8944] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 703.267338][ T8944] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 703.556166][ T5982] team0 (unregistering): Port device team_slave_1 removed [ 703.576391][ T5982] team0 (unregistering): Port device team_slave_0 removed [ 704.033334][ T9262] veth0_vlan: entered promiscuous mode [ 704.304871][ T9507] bridge0: port 1(bridge_slave_0) entered blocking state [ 704.332847][ T9507] bridge0: port 1(bridge_slave_0) entered disabled state [ 704.367501][ T9507] bridge_slave_0: entered allmulticast mode [ 704.386452][ T9507] bridge_slave_0: entered promiscuous mode [ 704.417464][ T9260] veth0_vlan: entered promiscuous mode [ 704.439705][ T9507] bridge0: port 2(bridge_slave_1) entered blocking state [ 704.458852][ T9507] bridge0: port 2(bridge_slave_1) entered disabled state [ 704.479007][ T9507] bridge_slave_1: entered allmulticast mode [ 704.502559][ T9507] bridge_slave_1: entered promiscuous mode [ 704.523199][ T9262] veth1_vlan: entered promiscuous mode [ 704.740312][ T5982] IPVS: stop unused estimator thread 0... [ 704.762363][ T9507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 704.829931][ T9507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 704.958052][ T9260] veth1_vlan: entered promiscuous mode [ 705.162824][ T9507] team0: Port device team_slave_0 added [ 705.213918][ T9507] team0: Port device team_slave_1 added [ 705.290896][ T5582] Bluetooth: hci0: command tx timeout [ 705.332738][ T56] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.372742][ T56] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.496772][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 705.504347][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.533551][ T9507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 705.551960][ T9507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 705.559691][ T9507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 705.588790][ T9507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 705.807820][ T6034] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 705.817877][ T9262] veth0_macvtap: entered promiscuous mode [ 705.825447][ T6034] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 705.980535][ T9507] hsr_slave_0: entered promiscuous mode [ 706.000576][ T9507] hsr_slave_1: entered promiscuous mode [ 706.119067][ T9262] veth1_macvtap: entered promiscuous mode [ 706.363210][ T9658] loop0: detected capacity change from 0 to 2048 [ 706.397510][ T9658] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 706.427764][ T9658] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1001'. [ 706.505856][ T9260] veth0_macvtap: entered promiscuous mode [ 706.666559][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 706.822041][ T9260] veth1_macvtap: entered promiscuous mode [ 706.877809][ T9664] loop0: detected capacity change from 0 to 1024 [ 706.914119][ T9664] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 706.953821][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 706.975608][ T29] audit: type=1800 audit(1778647954.716:144): pid=9664 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1002" name="file1" dev="loop0" ino=839 res=0 errno=0 [ 707.321331][ T9262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 707.368534][ T5582] Bluetooth: hci0: command tx timeout [ 707.641212][ T9260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 707.924077][ T9260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 708.295052][ T9681] loop0: detected capacity change from 0 to 512 [ 708.346208][ T9681] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1004: inode has both inline data and extents flags [ 708.364787][ T9681] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 708.366605][ T9681] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1004: couldn't read orphan inode 15 (err -117) [ 708.376174][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 708.376264][ C1] EXT4-fs (loop0): initial error at time 1778647956: ext4_orphan_get:1397: inode 15 [ 708.376415][ C1] EXT4-fs (loop0): last error at time 1778647956: ext4_orphan_get:1397: inode 15 [ 708.419548][ T9681] loop0: lost filesystem error report for type 5 error -117 [ 708.423603][ T9681] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 708.685475][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 709.407001][ T9507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 709.501456][ T5582] Bluetooth: hci0: command tx timeout [ 711.528803][ T5582] Bluetooth: hci0: command tx timeout [ 712.293229][ T9620] bridge0: port 1(bridge_slave_0) entered blocking state [ 712.322893][ T9620] bridge0: port 1(bridge_slave_0) entered disabled state [ 712.347569][ T9620] bridge_slave_0: entered allmulticast mode [ 712.383197][ T9620] bridge_slave_0: entered promiscuous mode [ 712.499982][ T9620] bridge0: port 2(bridge_slave_1) entered blocking state [ 712.519024][ T9620] bridge0: port 2(bridge_slave_1) entered disabled state [ 712.538861][ T9620] bridge_slave_1: entered allmulticast mode [ 712.558051][ T9620] bridge_slave_1: entered promiscuous mode [ 712.874023][ T9620] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 712.905959][ T9507] 8021q: adding VLAN 0 to HW filter on device team0 [ 712.989604][ T9620] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 713.356396][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 713.364001][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 713.410939][ T9725] loop0: detected capacity change from 0 to 512 [ 713.432399][ T9620] team0: Port device team_slave_0 added [ 713.540470][ T9725] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 713.576423][ T9725] ext4 filesystem being mounted at /8/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 713.585315][ T9620] team0: Port device team_slave_1 added [ 713.747585][ T5225] 8021q: adding VLAN 0 to HW filter on device eth17 [ 713.892377][ T135] bridge0: port 2(bridge_slave_1) entered blocking state [ 713.900015][ T135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 713.931823][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 713.957006][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 713.974039][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.012655][ T9620] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 714.075477][ T9620] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 714.108956][ T9620] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 714.188653][ T9620] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 714.208332][ T9736] loop0: detected capacity change from 0 to 16 [ 714.226908][ T9736] erofs (device loop0): mounted with root inode @ nid 36. [ 714.589998][ T9620] hsr_slave_0: entered promiscuous mode [ 714.619138][ T9620] hsr_slave_1: entered promiscuous mode [ 714.646736][ T9620] debugfs: 'hsr0' already exists in 'hsr' [ 714.675141][ T9620] Cannot create hsr debugfs directory [ 715.296289][ T9749] loop0: detected capacity change from 0 to 512 [ 715.333845][ T9749] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1011: inode has both inline data and extents flags [ 715.347672][ T9749] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 715.348280][ C1] EXT4-fs (loop0): error count since last fsck: 1 [ 715.364190][ C1] EXT4-fs (loop0): initial error at time 1778647963: ext4_orphan_get:1397: inode 15 [ 715.374055][ C1] EXT4-fs (loop0): last error at time 1778647963: ext4_orphan_get:1397: inode 15 [ 715.383857][ T9749] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1011: couldn't read orphan inode 15 (err -117) [ 715.398715][ T9749] loop0: lost filesystem error report for type 5 error -117 [ 715.412989][ T9749] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 715.631771][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 716.692996][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 716.747807][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.083664][ T5981] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.120810][ T5981] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.278659][ T56] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.313924][ T56] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 717.450462][ T2975] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 717.493693][ T2975] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 718.042077][ T9787] loop0: detected capacity change from 0 to 128 [ 718.122231][ T9787] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 718.230873][ T9787] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 718.400904][ T9620] 8021q: adding VLAN 0 to HW filter on device bond0 [ 718.634790][ T9620] 8021q: adding VLAN 0 to HW filter on device team0 [ 718.699206][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 718.706976][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 718.763841][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 718.771672][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 718.799219][ T9624] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 718.994829][ T9624] usb 6-1: Using ep0 maxpacket: 16 [ 719.026393][ T9624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 719.065012][ T9624] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 719.101144][ T9624] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 719.159145][ T9624] usb 6-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 719.194360][ T9624] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 719.269294][ T9624] usb 6-1: config 0 descriptor?? [ 719.269733][ T5225] 8021q: adding VLAN 0 to HW filter on device eth18 [ 719.790622][ T9624] hid_parser_main: 5 callbacks suppressed [ 719.790722][ T9624] microsoft 0003:045E:07DA.0008: unknown main item tag 0x0 [ 719.919444][ T9624] microsoft 0003:045E:07DA.0008: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.5-1/input0 [ 720.000787][ T9624] microsoft 0003:045E:07DA.0008: no inputs found [ 720.029576][ T9624] microsoft 0003:045E:07DA.0008: could not initialize ff, continuing anyway [ 720.102747][ T9810] loop0: detected capacity change from 0 to 512 [ 720.154218][ T9810] EXT4-fs error (device loop0): ext4_orphan_get:1397: inode #15: comm syz.0.1018: inode has both inline data and extents flags [ 720.167951][ T9810] loop0: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 720.170697][ T9810] EXT4-fs error (device loop0): ext4_orphan_get:1402: comm syz.0.1018: couldn't read orphan inode 15 (err -117) [ 720.180983][ C0] EXT4-fs (loop0): error count since last fsck: 1 [ 720.181072][ C0] EXT4-fs (loop0): initial error at time 1778647967: ext4_orphan_get:1397: inode 15 [ 720.181227][ C0] EXT4-fs (loop0): last error at time 1778647967: ext4_orphan_get:1397: inode 15 [ 720.221684][ T9810] loop0: lost filesystem error report for type 5 error -117 [ 720.231456][ T9810] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 720.341581][ T9624] usb 6-1: USB disconnect, device number 2 [ 720.512003][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 720.856916][ T9507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 720.891361][ T9811] fido_id[9811]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.5/usb6/report_descriptor': No such file or directory [ 721.213799][ T9823] loop0: detected capacity change from 0 to 512 [ 721.304357][ T9823] EXT4-fs: Ignoring removed mblk_io_submit option [ 721.384308][ T9823] EXT4-fs: Project quota feature not enabled. Cannot enable project quota enforcement. [ 721.479422][ T9826] loop5: detected capacity change from 0 to 128 [ 721.593791][ T9826] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 721.641584][ T9826] ext4 filesystem being mounted at /2/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 721.957808][ T9826] fscrypt: AES-128-CBC-CTS using implementation "cts(cbc(ecb(aes-lib)))" [ 722.278440][ T9826] fscrypt (loop5): Missing crypto API support for AES-128-CBC-ESSIV (API name: "essiv(cbc(aes),sha256)") [ 722.449310][ T9828] fscrypt: loop5: 1 inode(s) still busy after removing key with identifier 69b2f6edeee720cce0577937eb8a6751, including ino 12 [ 723.065067][ T9262] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 723.924800][ T9857] loop6: detected capacity change from 0 to 1024 [ 723.944897][ T9857] ext4: Unknown parameter 'nouser_xattr' [ 724.035181][ T9857] loop6: detected capacity change from 0 to 8 [ 724.447802][ T9507] veth0_vlan: entered promiscuous mode [ 724.631675][ T9507] veth1_vlan: entered promiscuous mode [ 724.965369][ T9624] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 725.214692][ T9624] usb 1-1: Using ep0 maxpacket: 16 [ 725.274458][ T9624] usb 1-1: unable to get BOS descriptor or descriptor too short [ 725.315339][ T9507] veth0_macvtap: entered promiscuous mode [ 725.361599][ T9624] usb 1-1: config 1 interface 2 altsetting 1 endpoint 0x82 has an invalid bInterval 127, changing to 7 [ 725.506565][ T9624] usb 1-1: string descriptor 0 read error: -22 [ 725.579747][ T9624] usb 1-1: New USB device found, idVendor=103d, idProduct=0100, bcdDevice= 0.40 [ 725.595901][ T9507] veth1_macvtap: entered promiscuous mode [ 725.660702][ T9624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 725.874594][ T9624] usb 1-1: Audio class v2/v3 interfaces need an interface association [ 725.982990][ T9624] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 726.098049][ T9624] usb 1-1: unknown interface protocol 0x44, assuming v1 [ 726.102809][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 726.161645][ T9624] usb 1-1: cannot find UAC_HEADER [ 726.195748][ T9624] snd-usb-audio 1-1:1.1: probe with driver snd-usb-audio failed with error -22 [ 726.307003][ T9507] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 726.321778][ T9624] usb 1-1: 1:1 : UAC_AS_GENERAL descriptor not found [ 726.983610][ T9620] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 727.102065][ T9883] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1028'. [ 727.393981][ T9886] loop6: detected capacity change from 0 to 1024 [ 728.087551][ T9886] hfsplus: xattr search failed [ 728.854703][ T9870] udevd[9870]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.2/sound/card3/controlC3/../uevent} for writing: Read-only file system [ 729.192984][ T9624] usb 1-1: USB disconnect, device number 11 [ 729.719422][ T9898] loop0: detected capacity change from 0 to 1024 [ 729.847660][ T9898] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 730.332386][ T9156] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 730.513787][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1032'. [ 731.508816][ T9931] loop6: detected capacity change from 0 to 512 [ 731.530131][ T9931] EXT4-fs: Ignoring removed nobh option [ 731.990344][ T9931] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 732.004854][ T9931] ext4 filesystem being mounted at /4/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 732.686406][ T9624] usb 1-1: new high-speed USB device number 12 using dummy_hcd [ 732.949031][ T9624] usb 1-1: unable to get BOS descriptor or descriptor too short [ 733.006326][ T9624] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 733.063564][ T9624] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 733.136882][ T9624] usb 1-1: New USB device found, idVendor=0582, idProduct=0074, bcdDevice= 0.40 [ 733.184967][ T9624] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 733.246677][ T9624] usb 1-1: Product: syz [ 733.265897][ T9624] usb 1-1: Manufacturer: syz [ 733.306277][ T9624] usb 1-1: SerialNumber: syz [ 733.684965][ T9260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 733.742949][ T9624] usb 1-1: unit 4 not found! [ 733.988551][ T9946] loop5: detected capacity change from 0 to 256 [ 734.071978][ T9620] veth0_vlan: entered promiscuous mode [ 734.125714][ T29] audit: type=1800 audit(1778647981.876:145): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.5.1037" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 734.134521][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.247972][ T9620] veth1_vlan: entered promiscuous mode [ 734.278462][ T9946] FAT-fs (loop5): Filesystem has been set read-only [ 734.300164][ T9624] usb 1-1: USB disconnect, device number 12 [ 734.312219][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.364763][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.407274][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.542370][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.617290][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.620881][ T9881] udevd[9881]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 734.693731][ T9620] veth0_macvtap: entered promiscuous mode [ 734.729344][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.748917][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.776777][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.789313][ T9620] veth1_macvtap: entered promiscuous mode [ 734.823836][ T9946] FAT-fs (loop5): error, fat_get_cluster: invalid cluster chain (i_pos 196) [ 734.871551][ T29] audit: type=1800 audit(1778647982.626:146): pid=9946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.5.1037" name="file1" dev="loop5" ino=1048639 res=0 errno=0 [ 734.959679][ T9624] IPVS: starting estimator thread 0... [ 735.068982][ T9959] IPVS: using max 240 ests per chain, 12000 per kthread [ 735.096083][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 735.232107][ T9620] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 735.565437][ T9965] loop0: detected capacity change from 0 to 128 [ 735.607706][ T9965] UDF-fs: error (device loop0): udf_read_tagged: read failed, block=256, location=256 [ 735.701665][ T9965] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 735.846062][ T29] audit: type=1800 audit(1778647983.596:147): pid=9965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1041" name="file1" dev="loop0" ino=104 res=0 errno=0 [ 735.982232][ T29] audit: type=1800 audit(1778647983.656:148): pid=9965 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1041" name="file1" dev="loop0" ino=104 res=0 errno=0 [ 736.148633][ T5225] 8021q: adding VLAN 0 to HW filter on device eth19 [ 742.226328][ T9997] loop0: detected capacity change from 0 to 128 [ 742.315074][ T9997] FAT-fs (loop0): bogus number of reserved sectors [ 742.356214][ T9997] FAT-fs (loop0): This doesn't look like a DOS 1.x volume; DOS 2.x BPB is non-zero [ 742.414075][ T9997] FAT-fs (loop0): Can't find a valid FAT filesystem [ 745.816222][ T5982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 746.006323][ T5982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 747.543146][ T5981] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 747.626430][ T5981] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 748.993595][ T806] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 749.219036][ T806] usb 7-1: device descriptor read/64, error -71 [ 749.520352][ T806] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 749.733871][ T806] usb 7-1: device descriptor read/64, error -71 [ 749.903141][ T806] usb usb7-port1: attempt power cycle [ 750.277992][T10046] loop0: detected capacity change from 0 to 8 [ 750.333574][ T806] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 750.382741][T10046] SQUASHFS error: zlib decompression failed, data probably corrupt [ 750.431485][ T806] usb 7-1: device descriptor read/8, error -71 [ 750.454876][T10046] SQUASHFS error: Failed to read block 0x9b: -5 [ 750.501393][T10046] SQUASHFS error: Unable to read metadata cache entry [99] [ 750.543422][T10046] SQUASHFS error: Unable to read inode 0x127 [ 750.668410][ T9624] usb 8-1: new full-speed USB device number 2 using dummy_hcd [ 750.715544][ T806] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 750.752439][T10046] Bluetooth: MGMT ver 1.23 [ 750.773117][ T806] usb 7-1: device descriptor read/8, error -71 [ 750.866027][ T5225] 8021q: adding VLAN 0 to HW filter on device eth20 [ 750.892339][ T9624] usb 8-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 750.900503][ T806] usb usb7-port1: unable to enumerate USB device [ 750.916812][ T9624] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 750.953282][ T9624] usb 8-1: Product: syz [ 750.976767][ T9624] usb 8-1: Manufacturer: syz [ 751.006499][ T9624] usb 8-1: SerialNumber: syz [ 751.036575][ T9624] usb 8-1: config 0 descriptor?? [ 751.306413][ T9624] usb 8-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 751.476179][T10057] 9p: Bad value for 'afid' [ 752.122065][T10062] binder: 10061:10062 ioctl c0306201 200000000680 returned -14 [ 753.810148][ T5582] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 753.819958][ T8944] Bluetooth: hci0: command 0x0401 tx timeout [ 753.821068][ T9624] dvb_usb_rtl28xxu 8-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -110 [ 757.751177][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 757.780483][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 758.209632][ T9890] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.265211][ T9890] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 758.364555][ T806] usb 8-1: USB disconnect, device number 2 [ 758.666144][ T2984] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 758.713702][ T2984] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 760.090613][ T9624] usb 9-1: new high-speed USB device number 2 using dummy_hcd [ 760.301278][ T9624] usb 9-1: Using ep0 maxpacket: 16 [ 760.342461][ T9624] usb 9-1: config 0 has no interfaces? [ 760.373539][ T9624] usb 9-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 760.414622][ T9624] usb 9-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 760.479668][ T9624] usb 9-1: config 0 descriptor?? [ 760.793932][T10094] loop8: detected capacity change from 0 to 256 [ 761.205189][T10094] FAT-fs (loop8): Directory bread(block 64) failed [ 761.228749][T10094] FAT-fs (loop8): Directory bread(block 65) failed [ 761.260947][T10094] FAT-fs (loop8): Directory bread(block 66) failed [ 763.432096][T10094] FAT-fs (loop8): Directory bread(block 67) failed [ 764.214289][T10094] FAT-fs (loop8): Directory bread(block 68) failed [ 766.019118][T10094] FAT-fs (loop8): Directory bread(block 69) failed [ 766.026592][T10094] FAT-fs (loop8): Directory bread(block 70) failed [ 767.017305][T10094] FAT-fs (loop8): Directory bread(block 71) failed [ 768.078832][T10094] FAT-fs (loop8): Directory bread(block 72) failed [ 768.197793][T10094] FAT-fs (loop8): Directory bread(block 73) failed [ 768.297305][T10094] FAT-fs (loop8): Directory bread(block 74) failed [ 768.340517][T10094] FAT-fs (loop8): Directory bread(block 75) failed [ 768.371182][T10094] FAT-fs (loop8): Directory bread(block 76) failed [ 768.396975][T10094] FAT-fs (loop8): Directory bread(block 77) failed [ 768.424419][T10094] FAT-fs (loop8): Directory bread(block 78) failed [ 768.454713][T10094] FAT-fs (loop8): Directory bread(block 79) failed [ 768.482640][T10094] FAT-fs (loop8): Directory bread(block 80) failed [ 768.917632][ T806] usb 9-1: USB disconnect, device number 2 [ 769.268101][T10129] syzkaller0: entered promiscuous mode [ 769.286464][T10129] syzkaller0: entered allmulticast mode [ 770.965503][T10137] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 775.778534][ T5582] Bluetooth: hci2: command 0x0406 tx timeout [ 777.046168][T10140] loop6: detected capacity change from 0 to 512 [ 777.107100][T10140] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 777.315623][T10140] EXT4-fs (loop6): 1 truncate cleaned up [ 777.400618][T10140] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 778.750474][ T9260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 779.445525][ T5582] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 779.461520][ T5582] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 779.471370][ T5582] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 779.487256][ T5582] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 779.499366][ T5582] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 779.628945][T10159] loop6: detected capacity change from 0 to 16 [ 784.261942][ T8944] Bluetooth: hci3: command tx timeout [ 787.267320][ T48] Bluetooth: hci1: command 0x0406 tx timeout [ 787.274140][ T48] Bluetooth: hci4: command 0x0406 tx timeout [ 787.280585][T10165] Bluetooth: hci3: command tx timeout [ 788.047621][T10168] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 788.065384][T10168] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 788.085368][T10168] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 788.098389][T10168] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 788.109406][T10168] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 788.563126][ T9624] IPVS: starting estimator thread 0... [ 788.711061][T10177] IPVS: using max 240 ests per chain, 12000 per kthread [ 789.288668][ T8953] Bluetooth: hci3: command tx timeout [ 789.872899][T10193] syzkaller0: entered promiscuous mode [ 789.924766][T10193] syzkaller0: entered allmulticast mode [ 790.505709][ T8953] Bluetooth: hci6: command tx timeout [ 791.383627][ T8953] Bluetooth: hci3: command tx timeout [ 792.568509][ T8953] Bluetooth: hci6: command tx timeout [ 794.649047][ T8953] Bluetooth: hci6: command tx timeout [ 796.729047][ T8953] Bluetooth: hci6: command tx timeout [ 798.882180][T10168] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 798.897173][T10168] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 798.908483][T10168] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 798.943624][T10168] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 798.963534][T10168] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 800.390404][ T2975] bridge_slave_1: left allmulticast mode [ 800.436400][ T2975] bridge_slave_1: left promiscuous mode [ 800.486373][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 800.566099][ T2975] bridge_slave_0: left allmulticast mode [ 800.626445][ T2975] bridge_slave_0: left promiscuous mode [ 800.652299][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 801.061871][T10168] Bluetooth: hci7: command tx timeout [ 803.354883][T10168] Bluetooth: hci7: command tx timeout [ 804.734866][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 804.793625][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 804.857576][ T2975] bond0 (unregistering): Released all slaves [ 805.370586][T10168] Bluetooth: hci7: command tx timeout [ 806.845107][T10256] veth: renamed from veth0_vlan [ 807.230719][ T2975] hsr_slave_0: left promiscuous mode [ 807.273011][ T2975] hsr_slave_1: left promiscuous mode [ 807.326187][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 807.392182][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 807.436470][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 807.449073][T10168] Bluetooth: hci7: command tx timeout [ 807.469629][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 807.568805][ T2975] veth1_macvtap: left promiscuous mode [ 807.574622][ T2975] veth0_macvtap: left promiscuous mode [ 807.585427][ T2975] veth1_vlan: left promiscuous mode [ 807.606830][ T2975] veth0_vlan: left promiscuous mode [ 809.217906][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 809.288743][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 812.004136][T10155] bridge0: port 1(bridge_slave_0) entered blocking state [ 812.019486][T10155] bridge0: port 1(bridge_slave_0) entered disabled state [ 812.051415][T10155] bridge_slave_0: entered allmulticast mode [ 812.075783][T10155] bridge_slave_0: entered promiscuous mode [ 813.048908][T10155] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.100732][T10155] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.139621][T10155] bridge_slave_1: entered allmulticast mode [ 813.207252][T10155] bridge_slave_1: entered promiscuous mode [ 813.637878][ T2975] bridge_slave_1: left allmulticast mode [ 813.660380][ T2975] bridge_slave_1: left promiscuous mode [ 813.694988][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.744745][ T2975] bridge_slave_0: left allmulticast mode [ 813.765326][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 813.817548][ T2975] bridge_slave_1: left allmulticast mode [ 813.824048][ T2975] bridge_slave_1: left promiscuous mode [ 813.832677][ T2975] bridge0: port 2(bridge_slave_1) entered disabled state [ 813.902776][ T2975] bridge_slave_0: left allmulticast mode [ 813.924582][ T2975] bridge_slave_0: left promiscuous mode [ 813.946874][ T2975] bridge0: port 1(bridge_slave_0) entered disabled state [ 814.835918][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 814.857927][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 814.885310][ T2975] bond0 (unregistering): Released all slaves [ 815.297185][ T2975] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 815.335614][ T2975] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 815.362258][ T2975] bond0 (unregistering): Released all slaves [ 815.471564][T10155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 815.575293][T10155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 815.700763][T10155] team0: Port device team_slave_0 added [ 815.875071][T10155] team0: Port device team_slave_1 added [ 815.971335][T10155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 815.979183][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.007861][T10155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 816.026271][T10155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 816.037827][T10155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 816.065987][T10155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 816.191369][T10155] hsr_slave_0: entered promiscuous mode [ 816.202537][T10155] hsr_slave_1: entered promiscuous mode [ 816.211832][T10155] debugfs: 'hsr0' already exists in 'hsr' [ 816.217726][T10155] Cannot create hsr debugfs directory [ 818.511277][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 818.517876][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 819.893492][T10167] bridge0: port 1(bridge_slave_0) entered blocking state [ 819.919072][T10167] bridge0: port 1(bridge_slave_0) entered disabled state [ 819.952923][T10167] bridge_slave_0: entered allmulticast mode [ 820.002645][T10167] bridge_slave_0: entered promiscuous mode [ 820.140068][T10167] bridge0: port 2(bridge_slave_1) entered blocking state [ 820.161986][T10167] bridge0: port 2(bridge_slave_1) entered disabled state [ 820.174053][T10167] bridge_slave_1: entered allmulticast mode [ 820.186046][T10167] bridge_slave_1: entered promiscuous mode [ 820.483272][T10167] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 820.527990][T10167] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 821.010897][T10155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 821.122711][T10155] 8021q: adding VLAN 0 to HW filter on device team0 [ 823.521089][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 823.528606][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 823.582524][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 823.589997][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 823.742945][T10155] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 823.766442][T10155] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 824.155522][ T2975] hsr_slave_0: left promiscuous mode [ 824.172632][ T2975] hsr_slave_1: left promiscuous mode [ 825.233558][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.241692][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.590725][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.598535][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.689575][ T8953] Bluetooth: hci0: command 0x0401 tx timeout [ 825.703863][ T2975] hsr_slave_0: left promiscuous mode [ 825.733807][ T2975] hsr_slave_1: left promiscuous mode [ 825.763707][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 825.776658][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 825.788768][ T2975] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 825.796430][ T2975] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 825.903725][ T2975] veth1_macvtap: left promiscuous mode [ 825.911523][ T2975] veth0_macvtap: left promiscuous mode [ 825.917814][ T2975] veth1_vlan: left promiscuous mode [ 825.924433][ T2975] veth0_vlan: left promiscuous mode [ 825.934792][ T2975] veth1_macvtap: left promiscuous mode [ 825.942461][ T2975] veth0_macvtap: left promiscuous mode [ 825.948851][ T2975] veth1_vlan: left promiscuous mode [ 825.955001][ T2975] veth0_vlan: left promiscuous mode [ 826.082843][T10378] loop6: detected capacity change from 0 to 4096 [ 826.155148][T10378] Quota error (device loop6): v2_read_file_info: Free block number 7 out of range (1, 6). [ 826.179143][T10378] EXT4-fs warning (device loop6): ext4_enable_quotas:7269: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 826.287022][T10378] EXT4-fs (loop6): mount failed [ 827.035719][T10386] loop8: detected capacity change from 0 to 4096 [ 827.071315][T10386] EXT4-fs (loop8): Test dummy encryption mode enabled [ 827.126126][T10386] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 827.192178][T10168] Bluetooth: hci0: unexpected event for opcode 0x2042 [ 827.343066][ T9620] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 827.690972][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 827.735930][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 828.164319][ T2975] team0 (unregistering): Port device team_slave_1 removed [ 828.204041][ T2975] team0 (unregistering): Port device team_slave_0 removed [ 828.401367][T10167] team0: Port device team_slave_0 added [ 828.570353][T10167] team0: Port device team_slave_1 added [ 828.907781][T10167] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 828.938100][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.005641][T10167] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 829.132136][T10167] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 829.170159][T10167] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 829.228586][T10167] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 829.892824][T10222] bridge0: port 1(bridge_slave_0) entered blocking state [ 829.902724][T10222] bridge0: port 1(bridge_slave_0) entered disabled state [ 829.913809][T10222] bridge_slave_0: entered allmulticast mode [ 829.925403][T10222] bridge_slave_0: entered promiscuous mode [ 830.954972][T10410] syz_tun: entered allmulticast mode [ 830.962427][T10411] syz_tun: left allmulticast mode [ 830.986690][T10222] bridge0: port 2(bridge_slave_1) entered blocking state [ 830.996121][T10222] bridge0: port 2(bridge_slave_1) entered disabled state [ 831.023387][T10222] bridge_slave_1: entered allmulticast mode [ 831.072854][T10222] bridge_slave_1: entered promiscuous mode [ 831.208439][T10168] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 831.217203][T10168] Bluetooth: hci0: Injecting HCI hardware error event [ 831.225045][ T8953] Bluetooth: hci0: hardware error 0x00 [ 831.648114][T10415] loop6: detected capacity change from 0 to 4096 [ 831.724510][T10415] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 831.845009][ T29] audit: type=1800 audit(1778648079.596:149): pid=10415 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.1118" name="bus" dev="loop6" ino=18 res=0 errno=0 [ 832.194154][T10167] hsr_slave_0: entered promiscuous mode [ 832.203878][T10167] hsr_slave_1: entered promiscuous mode [ 832.226818][ T9260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 832.335458][T10222] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 832.425042][T10222] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 832.990017][ T5678] usb 9-1: new high-speed USB device number 3 using dummy_hcd [ 832.994047][T10222] team0: Port device team_slave_0 added [ 833.127864][T10222] team0: Port device team_slave_1 added [ 833.189745][ T5678] usb 9-1: Using ep0 maxpacket: 32 [ 833.216314][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 833.271980][ T5678] usb 9-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 833.288638][ T8953] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 833.314656][ T5678] usb 9-1: New USB device found, idVendor=25dd, idProduct=f3d2, bcdDevice=d2.37 [ 833.329561][ T5678] usb 9-1: New USB device strings: Mfr=84, Product=45, SerialNumber=0 [ 833.340590][ T5678] usb 9-1: Product: syz [ 833.345034][ T5678] usb 9-1: Manufacturer: syz [ 833.363739][ T5678] usb 9-1: config 0 descriptor?? [ 833.460691][T10222] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 833.484584][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.553842][T10222] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 833.650006][T10222] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 833.680572][T10222] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 833.741425][T10222] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 833.886905][ T5678] hid-generic 0003:25DD:F3D2.0009: hiddev0,hidraw0: USB HID v0.00 Device [syz syz] on usb-dummy_hcd.8-1/input0 [ 834.953048][T10222] hsr_slave_0: entered promiscuous mode [ 834.989609][T10222] hsr_slave_1: entered promiscuous mode [ 835.023901][T10222] debugfs: 'hsr0' already exists in 'hsr' [ 835.040199][T10222] Cannot create hsr debugfs directory [ 835.199498][T10452] syzkaller0: entered promiscuous mode [ 835.205650][T10452] syzkaller0: entered allmulticast mode [ 835.532640][T10155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 835.718452][ T5225] veth: left promiscuous mode [ 835.800630][ T5225] veth: entered promiscuous mode [ 835.835180][ T9624] usb 9-1: USB disconnect, device number 3 [ 839.110658][T10474] syz_tun: entered allmulticast mode [ 839.117259][T10475] syz_tun: left allmulticast mode [ 843.683171][T10168] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 843.693636][T10168] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 843.706554][T10168] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 843.814994][T10499] hub 8-0:1.0: USB hub found [ 843.822814][T10499] hub 8-0:1.0: 1 port detected [ 844.674960][T10168] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 844.688727][T10168] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 844.755190][T10168] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 844.764665][T10168] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 844.774409][T10168] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 844.787419][T10168] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 844.798681][T10168] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 846.110311][T10222] 8021q: adding VLAN 0 to HW filter on device bond0 [ 846.867802][T10516] syzkaller0: entered promiscuous mode [ 846.889243][ T8953] Bluetooth: hci4: command tx timeout [ 846.903825][T10516] syzkaller0: entered allmulticast mode [ 846.969984][ T8953] Bluetooth: hci2: command tx timeout [ 847.045986][T10222] 8021q: adding VLAN 0 to HW filter on device team0 [ 847.703925][ T9890] bridge_slave_1: left allmulticast mode [ 847.725886][ T9890] bridge_slave_1: left promiscuous mode [ 847.767242][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 847.854223][ T9890] bridge_slave_0: left allmulticast mode [ 847.874920][ T9890] bridge_slave_0: left promiscuous mode [ 847.909289][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.849381][ T9890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 848.923598][ T9890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 848.968477][ T8953] Bluetooth: hci4: command tx timeout [ 848.978000][ T9890] bond0 (unregistering): Released all slaves [ 849.051467][ T8953] Bluetooth: hci2: command tx timeout [ 849.241634][ T6035] bridge0: port 1(bridge_slave_0) entered blocking state [ 849.249228][ T6035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 849.553060][ T9890] hsr_slave_0: left promiscuous mode [ 849.611835][ T9890] hsr_slave_1: left promiscuous mode [ 849.677280][ T9890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 849.726596][ T9890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 850.897504][ T9890] team0 (unregistering): Port device team_slave_1 removed [ 850.955332][ T9890] team0 (unregistering): Port device team_slave_0 removed [ 851.048852][ T8953] Bluetooth: hci4: command tx timeout [ 851.129053][ T8953] Bluetooth: hci2: command tx timeout [ 851.584658][ T6034] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.592071][ T6034] bridge0: port 2(bridge_slave_1) entered forwarding state [ 853.139472][ T8953] Bluetooth: hci4: command tx timeout [ 853.232182][ T8953] Bluetooth: hci2: command tx timeout [ 853.951694][T10548] syz_tun: entered allmulticast mode [ 853.958464][T10549] syz_tun: left allmulticast mode [ 854.067607][ T9890] bridge_slave_1: left allmulticast mode [ 854.081275][ T9890] bridge_slave_1: left promiscuous mode [ 854.090403][ T9890] bridge0: port 2(bridge_slave_1) entered disabled state [ 854.102722][ T9890] bridge_slave_0: left allmulticast mode [ 854.108896][ T9890] bridge_slave_0: left promiscuous mode [ 854.115439][ T9890] bridge0: port 1(bridge_slave_0) entered disabled state [ 854.444958][ T9890] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 854.486590][ T9890] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 854.504670][ T9890] bond0 (unregistering): Released all slaves [ 854.804255][ T9890] hsr_slave_0: left promiscuous mode [ 854.815197][ T9890] hsr_slave_1: left promiscuous mode [ 854.830860][ T9890] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 854.846894][ T9890] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 855.541164][ T9890] team0 (unregistering): Port device team_slave_1 removed [ 855.634724][ T9890] team0 (unregistering): Port device team_slave_0 removed [ 858.762406][T10168] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 858.782483][T10168] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 858.796056][T10168] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 858.823419][T10168] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 858.846324][T10168] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 859.354693][T10571] xt_CONNSECMARK: invalid mode: 66 [ 859.596655][T10571] loop6: detected capacity change from 0 to 2048 [ 860.263239][T10571] loop6: p3 < > p4 < > [ 860.267801][T10571] loop6: partition table partially beyond EOD, truncated [ 860.277211][T10571] loop6: p3 start 4284289 is beyond EOD, truncated [ 860.968635][T10168] Bluetooth: hci3: command tx timeout [ 861.754952][T10581] loop6: detected capacity change from 0 to 512 [ 861.923891][T10581] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1139: inode has both inline data and extents flags [ 861.940115][T10581] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 861.948372][ C0] EXT4-fs (loop6): error count since last fsck: 1 [ 861.964229][ C0] EXT4-fs (loop6): initial error at time 1778648109: ext4_orphan_get:1397: inode 15 [ 861.973854][ C0] EXT4-fs (loop6): last error at time 1778648109: ext4_orphan_get:1397: inode 15 [ 861.985008][T10581] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1139: couldn't read orphan inode 15 (err -117) [ 861.997696][T10581] loop6: lost filesystem error report for type 5 error -117 [ 861.999136][T10567] udevd[10567]: inotify_add_watch(7, /dev/loop6p4, 10) failed: No such file or directory [ 862.020611][T10581] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 862.444870][ T9260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 863.048566][T10168] Bluetooth: hci3: command tx timeout [ 863.311899][ T8953] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 863.329141][ T8953] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 863.347357][ T8953] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 863.374566][ T8953] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 863.397510][ T8953] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 864.621627][T10607] syzkaller0: entered promiscuous mode [ 864.640139][T10607] syzkaller0: entered allmulticast mode [ 865.138722][T10168] Bluetooth: hci3: command tx timeout [ 865.224765][T10500] bridge0: port 1(bridge_slave_0) entered blocking state [ 865.241881][T10500] bridge0: port 1(bridge_slave_0) entered disabled state [ 865.274890][T10500] bridge_slave_0: entered allmulticast mode [ 865.318806][T10500] bridge_slave_0: entered promiscuous mode [ 865.360420][ T12] bridge_slave_1: left allmulticast mode [ 865.386210][ T12] bridge_slave_1: left promiscuous mode [ 865.436133][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 865.448568][T10168] Bluetooth: hci5: command tx timeout [ 865.506451][ T12] bridge_slave_0: left allmulticast mode [ 865.543965][ T12] bridge_slave_0: left promiscuous mode [ 865.573929][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 866.342882][T10627] loop6: detected capacity change from 0 to 512 [ 866.365235][T10627] ext2: Unknown parameter 'subj_type' [ 867.248694][T10168] Bluetooth: hci3: command tx timeout [ 867.528925][T10168] Bluetooth: hci5: command tx timeout [ 867.544698][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 867.565906][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 867.595022][ T12] bond0 (unregistering): Released all slaves [ 867.621968][T10500] bridge0: port 2(bridge_slave_1) entered blocking state [ 867.661125][T10500] bridge0: port 2(bridge_slave_1) entered disabled state [ 867.691324][T10500] bridge_slave_1: entered allmulticast mode [ 867.739597][T10500] bridge_slave_1: entered promiscuous mode [ 868.075861][T10500] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 868.466195][ T12] hsr_slave_0: left promiscuous mode [ 868.516792][ T12] hsr_slave_1: left promiscuous mode [ 868.546060][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 868.576759][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 869.652144][T10168] Bluetooth: hci5: command tx timeout [ 870.856978][ T12] team0 (unregistering): Port device team_slave_1 removed [ 870.934667][ T12] team0 (unregistering): Port device team_slave_0 removed [ 871.137759][T10500] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 871.217398][T10494] bridge0: port 1(bridge_slave_0) entered blocking state [ 871.239226][T10494] bridge0: port 1(bridge_slave_0) entered disabled state [ 871.251178][T10494] bridge_slave_0: entered allmulticast mode [ 871.262246][T10494] bridge_slave_0: entered promiscuous mode [ 871.280689][T10638] syz_tun: entered allmulticast mode [ 871.288129][T10639] syz_tun: left allmulticast mode [ 871.688641][T10168] Bluetooth: hci5: command tx timeout [ 871.886408][T10500] team0: Port device team_slave_0 added [ 871.914000][T10494] bridge0: port 2(bridge_slave_1) entered blocking state [ 871.933086][T10494] bridge0: port 2(bridge_slave_1) entered disabled state [ 871.949316][T10494] bridge_slave_1: entered allmulticast mode [ 871.962313][T10494] bridge_slave_1: entered promiscuous mode [ 872.075730][T10500] team0: Port device team_slave_1 added [ 872.151030][ T5676] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 872.282164][T10500] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 872.293542][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.322184][T10500] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 872.341599][ T5676] usb 7-1: Using ep0 maxpacket: 32 [ 872.356630][T10494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 872.361554][ T5676] usb 7-1: config 0 has an invalid interface number: 89 but max is 0 [ 872.379517][ T5676] usb 7-1: config 0 has no interface number 0 [ 872.385900][ T5676] usb 7-1: config 0 interface 89 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 114 [ 872.393165][T10494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 872.398714][ T5676] usb 7-1: config 0 interface 89 has no altsetting 0 [ 872.424137][ T5676] usb 7-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4a [ 872.445770][ T5676] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 872.465752][T10500] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 872.473711][ T5676] usb 7-1: Product: syz [ 872.478474][T10500] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 872.510788][ T5676] usb 7-1: Manufacturer: syz [ 872.515925][ T5676] usb 7-1: SerialNumber: syz [ 872.527281][ T5676] usb 7-1: config 0 descriptor?? [ 872.537510][T10645] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 872.563029][T10500] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 872.591931][ T5676] em28xx 7-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 872.618784][ T5676] em28xx 7-1:0.89: Video interface 89 found: bulk [ 872.755444][ T12] bridge_slave_1: left allmulticast mode [ 872.766210][ T12] bridge_slave_1: left promiscuous mode [ 872.783217][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 872.813535][ T12] bridge_slave_0: left allmulticast mode [ 872.819464][ T12] bridge_slave_0: left promiscuous mode [ 872.825748][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 872.829410][ T5676] em28xx 7-1:0.89: unknown em28xx chip ID (0) [ 872.919235][ T5676] em28xx 7-1:0.89: reading from i2c device at 0xa0 failed (error=-5) [ 872.929579][ T5676] em28xx 7-1:0.89: board has no eeprom [ 872.989072][ T5676] em28xx 7-1:0.89: Identified as Terratec Grabby (card=67) [ 872.996598][ T5676] em28xx 7-1:0.89: analog set to bulk mode. [ 873.003778][ T5670] em28xx 7-1:0.89: Registering V4L2 extension [ 873.067341][ T5676] usb 7-1: USB disconnect, device number 6 [ 873.094659][ T5676] em28xx 7-1:0.89: Disconnecting em28xx [ 873.177608][ T5670] em28xx 7-1:0.89: Config register raw data: 0xffffffed [ 873.197513][ T5670] em28xx 7-1:0.89: AC97 chip type couldn't be determined [ 873.215777][ T5670] em28xx 7-1:0.89: No AC97 audio processor [ 873.243007][ T5670] usb 7-1: Decoder not found [ 873.247916][ T5670] em28xx 7-1:0.89: failed to create media graph [ 873.256124][ T5670] em28xx 7-1:0.89: V4L2 device video103 deregistered [ 873.267754][ T5670] em28xx 7-1:0.89: Registering snapshot button... [ 873.285964][ T5670] input: em28xx snapshot button as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.89/input/input16 [ 873.301942][ T5670] em28xx 7-1:0.89: Remote control support is not available for this card. [ 873.307883][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 873.330435][ T5676] em28xx 7-1:0.89: Closing input extension [ 873.344738][ T5676] em28xx 7-1:0.89: Deregistering snapshot button [ 873.356656][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 873.385296][ T12] bond0 (unregistering): Released all slaves [ 873.419965][ T5676] em28xx 7-1:0.89: Freeing device [ 873.589868][T10494] team0: Port device team_slave_0 added [ 873.694183][T10657] loop6: detected capacity change from 0 to 1024 [ 873.727097][T10657] EXT4-fs: Ignoring removed mblk_io_submit option [ 873.776094][T10494] team0: Port device team_slave_1 added [ 873.833022][T10657] EXT4-fs (loop6): mounted filesystem 00000000-0000-0006-0000-000000000000 r/w without journal. Quota mode: none. [ 873.859546][T10657] ext4 filesystem being mounted at /59/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 873.927239][T10657] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 3: comm syz.6.1146: lblock 3 mapped to illegal pblock 3 (length 3) [ 873.945929][T10657] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 3 with max blocks 3 with error 117 [ 873.959088][T10657] EXT4-fs (loop6): This should not happen!! Data will be lost [ 873.959088][T10657] [ 873.972757][T10657] EXT4-fs error (device loop6): ext4_map_blocks:833: inode #15: block 8: comm syz.6.1146: lblock 8 mapped to illegal pblock 8 (length 5) [ 874.000573][T10657] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 8 with max blocks 5 with error 117 [ 874.023470][T10657] EXT4-fs (loop6): This should not happen!! Data will be lost [ 874.023470][T10657] [ 874.192429][ T1047] EXT4-fs error (device loop6): ext4_validate_block_bitmap:441: comm kworker/u8:7: bg 0: block 112: padding at end of block bitmap is not set [ 874.219040][T10494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 874.238382][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.279965][ T1047] EXT4-fs (loop6): Delayed block allocation failed for inode 15 at logical offset 16 with max blocks 52 with error 28 [ 874.298671][T10494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 874.347604][ T1047] EXT4-fs (loop6): This should not happen!! Data will be lost [ 874.347604][ T1047] [ 874.377172][ T1047] EXT4-fs (loop6): Total free blocks count 0 [ 874.401110][ T1047] EXT4-fs (loop6): Free/Dirty block details [ 874.435399][ T1047] EXT4-fs (loop6): free_blocks=0 [ 874.456437][ T9260] EXT4-fs warning (device loop6): ext4_evict_inode:195: inode #15: comm syz-executor: data will be lost [ 874.480731][T10494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 874.490786][T10494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 874.523132][T10494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 874.722848][T10671] loop6: detected capacity change from 0 to 512 [ 874.816693][T10671] EXT4-fs error (device loop6): ext4_orphan_get:1397: inode #15: comm syz.6.1147: inode has both inline data and extents flags [ 874.823762][T10500] hsr_slave_0: entered promiscuous mode [ 874.841583][T10671] loop6: lost file I/O error report for ino 15 type 5 pos 0x0 len 0x0 error -117 [ 874.842442][T10671] EXT4-fs error (device loop6): ext4_orphan_get:1402: comm syz.6.1147: couldn't read orphan inode 15 (err -117) [ 874.849663][T10500] hsr_slave_1: entered promiscuous mode [ 874.852004][ C1] EXT4-fs (loop6): error count since last fsck: 1 [ 874.875954][ C1] EXT4-fs (loop6): initial error at time 1778648122: ext4_orphan_get:1397: inode 15 [ 874.885685][ C1] EXT4-fs (loop6): last error at time 1778648122: ext4_orphan_get:1397: inode 15 [ 874.931354][T10671] loop6: lost filesystem error report for type 5 error -117 [ 874.935960][T10671] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 875.095886][ T12] hsr_slave_0: left promiscuous mode [ 875.117290][ T9260] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 875.134348][ T12] hsr_slave_1: left promiscuous mode [ 875.172256][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 875.195723][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 875.223453][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 875.232333][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 875.284532][ T12] veth1_macvtap: left promiscuous mode [ 875.302723][ T12] veth0_macvtap: left promiscuous mode [ 875.310259][ T12] veth1_vlan: left promiscuous mode [ 875.315707][ T12] veth: left promiscuous mode [ 875.815014][ T12] team0 (unregistering): Port device team_slave_1 removed [ 875.837924][ T12] team0 (unregistering): Port device team_slave_0 removed [ 876.555821][T10494] hsr_slave_0: entered promiscuous mode [ 876.574156][T10494] hsr_slave_1: entered promiscuous mode [ 876.607915][T10494] debugfs: 'hsr0' already exists in 'hsr' [ 876.616524][T10494] Cannot create hsr debugfs directory [ 876.864346][ T12] IPVS: stop unused estimator thread 0... [ 878.146335][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 878.169399][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 878.183639][T10564] bridge_slave_0: entered allmulticast mode [ 878.212005][T10564] bridge_slave_0: entered promiscuous mode [ 878.298874][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 878.319881][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 878.330707][T10564] bridge_slave_1: entered allmulticast mode [ 878.350632][T10564] bridge_slave_1: entered promiscuous mode [ 878.631602][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 878.699654][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 878.916174][T10564] team0: Port device team_slave_0 added [ 878.990557][T10564] team0: Port device team_slave_1 added [ 879.095586][T10595] bridge0: port 1(bridge_slave_0) entered blocking state [ 879.120774][T10595] bridge0: port 1(bridge_slave_0) entered disabled state [ 879.132333][T10595] bridge_slave_0: entered allmulticast mode [ 879.142512][T10595] bridge_slave_0: entered promiscuous mode [ 879.196346][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 879.214153][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.261623][T10701] loop6: detected capacity change from 0 to 32768 [ 879.268304][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 879.283491][T10595] bridge0: port 2(bridge_slave_1) entered blocking state [ 879.295458][T10595] bridge0: port 2(bridge_slave_1) entered disabled state [ 879.303740][T10595] bridge_slave_1: entered allmulticast mode [ 879.320050][T10701] BTRFS: device fsid 14d642db-7b15-43e4-81e6-4b8fac6a25f8 devid 1 transid 8 /dev/loop6 (7:6) scanned by syz.6.1150 (10701) [ 879.336642][T10595] bridge_slave_1: entered promiscuous mode [ 879.381821][T10701] BTRFS info (device loop6): first mount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 879.408896][T10701] BTRFS info (device loop6): using blake2b checksum algorithm [ 879.518997][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 879.556752][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 879.613632][T10701] BTRFS info (device loop6): enabling ssd optimizations [ 879.640631][T10701] BTRFS info (device loop6): turning on async discard [ 879.662181][T10701] BTRFS info (device loop6): enabling free space tree [ 879.673806][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 879.698642][T10701] BTRFS info (device loop6): use zstd compression, level 3 [ 879.939626][ T1309] ieee802154 phy0 wpan0: encryption failed: -22 [ 879.953387][ T1309] ieee802154 phy1 wpan1: encryption failed: -22 [ 880.023729][ T9260] BTRFS info (device loop6): last unmount of filesystem 14d642db-7b15-43e4-81e6-4b8fac6a25f8 [ 880.045764][T10595] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 880.215622][T10595] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 880.455859][T10564] hsr_slave_0: entered promiscuous mode [ 880.481940][T10564] hsr_slave_1: entered promiscuous mode [ 880.501735][T10564] debugfs: 'hsr0' already exists in 'hsr' [ 880.507654][T10564] Cannot create hsr debugfs directory [ 880.572975][T10595] team0: Port device team_slave_0 added [ 880.653948][T10595] team0: Port device team_slave_1 added [ 881.901677][T10595] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 881.918388][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 881.979834][T10595] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 882.022579][T10595] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 882.044366][T10595] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 882.120469][T10595] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 882.583539][T10494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 882.765515][T10494] 8021q: adding VLAN 0 to HW filter on device team0 [ 882.823952][T10745] syz_tun: entered allmulticast mode [ 882.871244][T10746] syz_tun: left allmulticast mode [ 883.235526][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 883.243214][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 883.582825][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 883.590406][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 883.692485][T10595] hsr_slave_0: entered promiscuous mode [ 883.716580][T10595] hsr_slave_1: entered promiscuous mode [ 883.759757][T10595] debugfs: 'hsr0' already exists in 'hsr' [ 883.792716][T10595] Cannot create hsr debugfs directory [ 883.822621][ T5982] ===================================================== [ 883.830122][ T5982] BUG: KMSAN: uninit-value in n_tty_receive_buf_standard+0xd32/0xc780 [ 883.838773][ T5982] n_tty_receive_buf_standard+0xd32/0xc780 [ 883.844784][ T5982] n_tty_receive_buf_common+0x1a63/0x25a0 [ 883.850795][ T5982] n_tty_receive_buf2+0x4c/0x60 [ 883.855756][ T5982] tty_ldisc_receive_buf+0xc6/0x2c0 [ 883.861402][ T5982] tty_port_default_receive_buf+0xd7/0x1a0 [ 883.867415][ T5982] flush_to_ldisc+0x43e/0xe40 [ 883.872426][ T5982] process_scheduled_works+0xb65/0x1e40 [ 883.878314][ T5982] worker_thread+0xee4/0x1590 [ 883.883157][ T5982] kthread+0x53f/0x600 [ 883.887326][ T5982] ret_from_fork+0x20f/0x8d0 [ 883.892111][ T5982] ret_from_fork_asm+0x1a/0x30 [ 883.896972][ T5982] [ 883.899496][ T5982] Uninit was stored to memory at: [ 883.904657][ T5982] n_tty_receive_buf_standard+0xd2b/0xc780 [ 883.910708][ T5982] n_tty_receive_buf_common+0x1a63/0x25a0 [ 883.916539][ T5982] n_tty_receive_buf2+0x4c/0x60 [ 883.921656][ T5982] tty_ldisc_receive_buf+0xc6/0x2c0 [ 883.926944][ T5982] tty_port_default_receive_buf+0xd7/0x1a0 [ 883.933050][ T5982] flush_to_ldisc+0x43e/0xe40 [ 883.937818][ T5982] process_scheduled_works+0xb65/0x1e40 [ 883.943554][ T5982] worker_thread+0xee4/0x1590 [ 883.948442][ T5982] kthread+0x53f/0x600 [ 883.952665][ T5982] ret_from_fork+0x20f/0x8d0 [ 883.957397][ T5982] ret_from_fork_asm+0x1a/0x30 [ 883.962440][ T5982] [ 883.964791][ T5982] Uninit was created at: [ 883.969291][ T5982] __kmalloc_noprof+0x482/0x1660 [ 883.974383][ T5982] __tty_buffer_request_room+0x3d4/0x7a0 [ 883.980218][ T5982] __tty_insert_flip_string_flags+0x157/0x6e0 [ 883.986448][ T5982] uart_insert_char+0x368/0x930 [ 883.991579][ T5982] serial8250_read_char+0x1ba/0x670 [ 883.996859][ T5982] serial8250_handle_irq_locked+0x6d4/0xa40 [ 884.002997][ T5982] serial8250_handle_irq+0x189/0x710 [ 884.008525][ T5982] serial8250_default_handle_irq+0x116/0x350 [ 884.014696][ T5982] serial8250_interrupt+0xcb/0x3f0 [ 884.020063][ T5982] __handle_irq_event_percpu+0x118/0xf30 [ 884.025817][ T5982] handle_irq_event+0xe0/0x2a0 [ 884.030840][ T5982] handle_edge_irq+0x2a9/0xaf0 [ 884.035743][ T5982] __common_interrupt+0x9d/0x180 [ 884.040869][ T5982] common_interrupt+0x94/0xb0 [ 884.045677][ T5982] asm_common_interrupt+0x2b/0x40 [ 884.051227][ T5982] [ 884.053707][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u8:12 Not tainted syzkaller #0 PREEMPT(full) [ 884.063494][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 884.073767][ T5982] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 884.080178][ T5982] ===================================================== [ 884.087154][ T5982] Disabling lock debugging due to kernel taint [ 884.315621][ T5982] Kernel panic - not syncing: kmsan.panic set ... [ 884.322282][ T5982] CPU: 1 UID: 0 PID: 5982 Comm: kworker/u8:12 Tainted: G B syzkaller #0 PREEMPT(full) [ 884.333592][ T5982] Tainted: [B]=BAD_PAGE [ 884.337845][ T5982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/18/2026 [ 884.348036][ T5982] Workqueue: ttyS-serial_8250 flush_to_ldisc [ 884.354216][ T5982] Call Trace: [ 884.357585][ T5982] [ 884.360599][ T5982] __dump_stack+0x26/0x30 [ 884.365084][ T5982] dump_stack_lvl+0x50/0x1c0 [ 884.369781][ T5982] ? dump_stack+0x12/0x25 [ 884.374279][ T5982] dump_stack+0x1e/0x25 [ 884.378582][ T5982] vpanic+0x7b4/0x1430 [ 884.382787][ T5982] panic+0x15d/0x160 [ 884.386870][ T5982] kmsan_report+0x31a/0x320 [ 884.391508][ T5982] ? __msan_warning+0x1b/0x30 [ 884.396328][ T5982] ? n_tty_receive_buf_standard+0xd32/0xc780 [ 884.402507][ T5982] ? n_tty_receive_buf_common+0x1a63/0x25a0 [ 884.408558][ T5982] ? n_tty_receive_buf2+0x4c/0x60 [ 884.413696][ T5982] ? tty_ldisc_receive_buf+0xc6/0x2c0 [ 884.419212][ T5982] ? tty_port_default_receive_buf+0xd7/0x1a0 [ 884.425371][ T5982] ? flush_to_ldisc+0x43e/0xe40 [ 884.430313][ T5982] ? process_scheduled_works+0xb65/0x1e40 [ 884.436200][ T5982] ? worker_thread+0xee4/0x1590 [ 884.441209][ T5982] ? kthread+0x53f/0x600 [ 884.445635][ T5982] ? ret_from_fork+0x20f/0x8d0 [ 884.450595][ T5982] ? ret_from_fork_asm+0x1a/0x30 [ 884.455699][ T5982] ? ret_from_fork_asm+0x1a/0x30 [ 884.460765][ T5982] ? rpm_suspend+0xa4/0x2630 [ 884.465519][ T5982] ? kmsan_get_metadata+0x146/0x160 [ 884.470891][ T5982] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 884.477342][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 884.482573][ T5982] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 884.488516][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 884.493766][ T5982] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 884.499720][ T5982] ? __update_load_avg_cfs_rq+0xc31/0x1050 [ 884.505717][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 884.510971][ T5982] __msan_warning+0x1b/0x30 [ 884.515626][ T5982] n_tty_receive_buf_standard+0xd32/0xc780 [ 884.521656][ T5982] ? kmsan_get_metadata+0xf1/0x160 [ 884.526913][ T5982] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 884.533343][ T5982] ? kmsan_internal_unpoison_memory+0x14/0x20 [ 884.539634][ T5982] n_tty_receive_buf_common+0x1a63/0x25a0 [ 884.545585][ T5982] n_tty_receive_buf2+0x4c/0x60 [ 884.550611][ T5982] ? __pfx_n_tty_receive_buf2+0x10/0x10 [ 884.556261][ T5982] tty_ldisc_receive_buf+0xc6/0x2c0 [ 884.561579][ T5982] tty_port_default_receive_buf+0xd7/0x1a0 [ 884.567532][ T5982] flush_to_ldisc+0x43e/0xe40 [ 884.572370][ T5982] ? __pfx_tty_port_default_receive_buf+0x10/0x10 [ 884.578946][ T5982] ? __pfx_flush_to_ldisc+0x10/0x10 [ 884.584250][ T5982] process_scheduled_works+0xb65/0x1e40 [ 884.589960][ T5982] worker_thread+0xee4/0x1590 [ 884.594777][ T5982] kthread+0x53f/0x600 [ 884.598962][ T5982] ? __pfx_worker_thread+0x10/0x10 [ 884.604206][ T5982] ? __pfx_kthread+0x10/0x10 [ 884.608917][ T5982] ret_from_fork+0x20f/0x8d0 [ 884.613618][ T5982] ? __switch_to+0x573/0x7a0 [ 884.618420][ T5982] ? __pfx_kthread+0x10/0x10 [ 884.623183][ T5982] ret_from_fork_asm+0x1a/0x30 [ 884.628064][ T5982] [ 884.631535][ T5982] Kernel Offset: disabled [ 884.635910][ T5982] Rebooting in 86400 seconds..