last executing test programs: 29m20.462820537s ago: executing program 2 (id=26): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x14, 0x2, 0x6, 0x5}, 0x14}}, 0x0) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 29m20.227978815s ago: executing program 2 (id=27): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 29m19.008359624s ago: executing program 2 (id=29): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(0x0, 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, &(0x7f00000001c0)=0x2001) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, &(0x7f0000000180)=[{0xff, 0x0, 0x0, 0x0, @tick=0x4, {}, {}, @result={0x1, 0x2}}, {0x0, 0x0, 0xff, 0x3, @tick=0xf27, {0x1}, {}, @addr={0x2a, 0x5}}], 0x38) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@version_u}, {@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 29m17.705097728s ago: executing program 2 (id=32): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x48400) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)={0x4840}, 0x18) renameat2(r0, &(0x7f0000000240)='./bus/file0\x00', r0, &(0x7f00000001c0)='./file0\x00', 0x2) 29m15.603518187s ago: executing program 2 (id=40): r0 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_WAIT_VBLANK(r0, 0xc018643a, &(0x7f00000000c0)={0x4000001, 0x71, 0x200000009}) pread64(r0, 0x0, 0x0, 0xce2) 29m10.866741697s ago: executing program 2 (id=49): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 29m9.877697626s ago: executing program 32 (id=49): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x3f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) socket$inet6(0xa, 0x1, 0xfffffff9) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) ioctl$SNDRV_CTL_IOCTL_ELEM_READ(0xffffffffffffffff, 0xc4c85512, 0x0) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x4, &(0x7f00000002c0)={@local={0xac, 0x2, 0x44, 0xa}, @private=0x5000000}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000300)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket(0x10, 0x803, 0x0) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000080)={0xaa, 0x1}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000ff2000/0xe000)=nil, 0xe000}, 0x3}) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000180)={&(0x7f0000ffa000/0x3000)=nil, &(0x7f0000ffe000/0x2000)=nil, &(0x7f0000ff9000/0x4000)=nil, &(0x7f0000ff9000/0x1000)=nil, &(0x7f0000ffa000/0x1000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffd000/0x2000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ff8000/0x7000)=nil, &(0x7f0000ffb000/0x3000)=nil, 0x0}, 0x68) brk(0x200000ffa000) ioctl$UFFDIO_COPY(r4, 0xc028aa05, &(0x7f00000000c0)={&(0x7f0000ff9000/0x2000)=nil, &(0x7f0000ffe000/0x1000)=nil, 0x2000, 0x2}) syz_genetlink_get_family_id$ethtool(0x0, r3) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, @dev, @dev, 0x80, 0x0, 0x1, 0x1}}) 28m8.556675661s ago: executing program 4 (id=164): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) syz_mount_image$bfs(&(0x7f0000000000), &(0x7f0000000240)='./bus\x00', 0x8008, &(0x7f0000000100)=ANY=[@ANYRES64=0x0], 0xf, 0x9e, &(0x7f0000010140)="$eJzs16GKQkEABdC7L+xu27WIzWzxH/wUsxYxKYJ/4CfaDQa7OMJ7AyLYBIOeEwbuXAam3vKXVtkmZTRYHMrNcrWeTefdGd5Sk+QnyW+SYa/Lx0nXfdV+f9rk/9Hj792LfwsAADyjyfg+X0q9ONcV2IZ+OxLqTgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAD4JNcAAAD//0AHJDI=") mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) 28m7.466658349s ago: executing program 4 (id=166): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="12000000040000000400000001"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r0, &(0x7f0000000040), &(0x7f00000000c0)=@udp6, 0x1}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx\x00'}, 0x58) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x2) syz_kvm_setup_cpu$x86(r2, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f0000000000)=[@text64={0x40, 0x0}], 0x1, 0x8, 0x0, 0x0) ioctl$KVM_SET_NESTED_STATE(r3, 0x4080aebf, &(0x7f00000022c0)={{0x0, 0x0, 0x80, {0x0, 0x80af000}}, "cdb372b4dfe02964a59572ecc37526989e90f15cc175ae8c93ae45591f356c6884a1eb49a1ccc74c2260aded1979bfd746a27408d1220c39493a1d3b65f5306464393183b3b654e5237f83855fde05bc36e88baa2c07c6acd1e5d8c2b3736f1ec8fb98c1b5c20bae0c02c146f4182375c277e8647f577021416f8ba515ffa35cddd261d521df3e841a9179cda39879511c2e9ab06778ce9ffa6f2c9370d7af33bc74d16360a42aa2ced6433463ef4bbed671371e8eba18f2aa913f65ff1b5b35c7c67638ba4aaa64a717f556fe32f70ab1f227b75eaace9c63811a4abc99987e6c8964cfac90a0ca3384510dc63e3e3935540ce749bfa6a8785ee00fe862262ce28ff980e350a64be310b5f576ccfb5a2ba166b324b4bbe9f23030a79f16f20258d077d87f7b1e5b8ca402ce6e51b3236729fde5e6f96d7a94c8db3cc00fdab35e2544ebb424632bb9d82cbfb21146bfeb80e5f5e26ed89a6c521920b5c02cd9cf8063e1ef18919946124f64f749f5c2e3d603af2b7a2d2d24acb6ebe5f47b988dc50e690d9aea44fece3a353bae1b80dcae49c8cb6443978623b0ec80cd0feb0a134a51fdd2b1912a45c6ca41414273268c676bbef4ab3e2f7ac5e061d6dcf0041af2cc971a27b616444ae913033933ed4b1d89b96c8ee9edc86ee12d5917695796906d4822fb3a931df763e3a8e8893ae4749765bdbae4377ce47fb5e26890cb5178c03dd0df248bf35caf84f3cea3d778086065dbb0cd51ea04f28dd6ce80820fda0ffa3f33d38adb2d68d41db8ab27d4cad8b7abb026827738fb9c59d043199cd27c2bdf9711acb36926c730e216de7ad2de0326676916586ec8325f4b13735e34c4d60bd27e2fde3edc95dc59cb69c1dc25569da425488b6b6e9a63b17964ce1fa57bf2c7508ed199cf64a5cbc23b01cdf08b1ad4337f1b0aa02a6c137fb90e32fd7e204966170aa80fca868a45d496be7758c47f83760208793eb1600b6ebf4d1d2dcaa2b741f1c0b9f8844b9e68ec7f7123083c6926a1e95fe9b75f16064f213f69f8f1a97b66961279a6aa3498f146f7e517c2f5a9c0b0673b93dca4fe0c48d53c8f5f89bb7ab0476e00a13e020370077a55c28abccb585bcbdf29966a4db1c3ab0f3f58e54640032484e08072aac638b9c9dc9655a525e9016d9b24358ba477695875e3abd484ff3adb92069825841c3bd1870f708cc25288ee5cc4a6d7fab62eaa724a7acb4ee5952db977b4da11597891f5c5af6086ddf387deb19ce0995ba175f830c94b5adac04d8618a262b3059fe96d5b18690e5adf3e592ae77fed8214ef468d0cacdbbdb1712cff009e03146b57bab5b8302a5ed0f75f59c63877ad8fea5ec596c667ffc2337343e1726e79985bf7c663f8dca6ae731dd96486568d0c0e4c3a3860d7250e04373cc55018eda3ac9077cd2c5317df8992b548e34344ca97a9ed3b6f8bf1a97e060231657706c9e8ce8f03805b111d4bf1a559f4cf0822a20cd9ce06b56c5f051317e187d76a303af82d2053286d5d3cee381602170f5bb4036fb34c080992e9f7d509aa230935233dac608f533ae2a26c5e5710e6c2ed1bf61303cc3c47465791333dae385f91de77c3357fbedbbb64ae3b868ee90b98ab647fa0dcc85bfbab33058667b95106519c7ba80246f73391919fb575dedfe436fb190e828fd58ac25537a4ba5ef0a97c595ce67a740d1cfd84a05d3462d9203dd6ea94f60dc03a29c3c81aa25dce4b330fa7500234016373add8120018ea6b5fac8597fcc8404c793658db3277e2a7e042cb56420002922183f14af74d970dec12a781763c1d9d69cf664b065a9b09491b1ff043e9c9a2098975c17e82a5d06b9f1081c43a539669e95991d866f3105e0b327ab8659e23bf1b196603c7406221e47494b765a114077187295dfafc261ea9ad3064b3449c6e8ef5e2517f609995adf82710d6c23a83e06f61c8186017afa6b2de5b28082770edfc81ee72e46fd1365d0a7583e3609ce420e54cc7a2d57542b924c6c5c9c896d068912adf22a97b3547502d0181d2c69729c539921ab16c466ba6d1d518c3e787fb0e9f708c9a1bc6d428355f0a3bd574397a6f8eda6a1503854a1bd4004719db60a9b3fefe434464d9f2aaddf44ee98c503ac606b7d4d8bac4efa557a77fa5a31ed8c8b48cd1ee6e4e7731ffb273bf21838f4e0cb8eec8a2cbd8acd40c15fcc3959ec3b4ea86680fb1e65743acfc164c6ae830f81a00c83102085d6ae8c7b4424ee0e86673015d98449252de73a25bfbe1697ff06aecf299b2a0e7ce452ba6bcba6b6da2c494cf0ce51cbb555cc2a371bf5a595748486825b0798221f40d2c29396431d13a03248874b893c7880d3b87cf845858a31f68fe57b032e3e0204fd4fb23fd5b2357d8e4f6052dd058b3bf6cd913b4341446e62895d6a367e4233e25ef3aabfb7f35a7804938e3181b6f551ac4a947ff016a12dffb53e7101b6ee911fac7637b2786cf95a4611376d0ac7b1e61c763040550e0c00ddb39a11086e08941c518a5ebedcff2c9477f7be26ad4dc48d837b85d082b4a54c8ec3f1caff75f7fb8f1282df6c5b336c2e56c0f35d9c5dd38fc91001e950f5fb41b58a620a9ee5e6b001a637aad4ec9ffd09eb762fd0d1d8058ca0e544329ee8693547095264c46d9b716fe56ff991b28dc056caefb0d08c0c509ab0eafeffc280684f8654b18323eddff28b4e778a674b4d5b85df786bb12ca24e1980e56032d1d32eb472954eed24b99bbc404dc920e16d4f8e792d6fe581efa82420085955ab9716dc642b44e2a9215cdaaf3df4fa5ad66a26804ad87b7520c132fdb595ea560eb408b5d519cb31c2c6ed2a16fe971d7ca71b7530af7478f06509cc988b96b27dd3e667ce4b08ca685ae818527103addba74d71d094e7a58325658343b989a1d973fc9f1cfebe848c35279cfff728928f77af22430daee46cc9242fa4afe5197e6b42811396f9136fbd545826e020a910fa790acf9292472b7ee3b34723d6f56781d5c061be6e535e49bfcc292a1208645c730b6aadc94e56f05c6f8ca71c7fde81b687190accb75b08f131d61d6536cb3810eb2b6006336f700f1e6ea8104de9c9c6c9f4566a3783d253e3153e9550b91d547430bbe6dc23d31b930692f2a2c5b009fa44c416bfbe28e524ee6a2d0b016331037010fa882db5d35cfa359d1c7a173cf913e11b8888d0f37b75011f26ce9f97b132dd6f50cbf4bd7d1f9201c55ade10bdb4e2df4a3b35d2980bf8ee63b8091fed356f764c0bbcc95a91afeb4a2c1deb3fc0c44fa76d768fed87d737bb3380794e4b67932e7492e654cca53599a446664031ef83e6a6d5362d89eac11c767932f477201d2953b4bb6058f4a3baca2968719edbf41ca5da5be2efeb9bceb38e2f1394ff41d9e93ecc746175b8e5fa2f5bf903663cebc1266ca7a2f8c57340c1ef42e4fc8a85d76ce24237d16f1ac13d32bfd1121017e9a72ad3fb0e952a296ff9a79bdc5be6d8691696720d97daa7c27fb9489e47584c00c854779de5980490afbacad0d0774a7f13e424b0ea955a87b7e296a40eca7ab8f45ae76170da77fff6b554c50dcdc6a261e8ebb7d2f24583023d001ff218ec7844fb4640736f04e9f7d968aa74bef26f65eae961a4857a946d3b221818a798d65bf74f8c0ac1b4529e36183c49606890643573722d467f4c464e68069955e561ccfd4423c2a240cfbb96efb668844ba0a1ceb910ad4ef06cd0f13f7ffa85744bdd0dd16ca27f62179b3916868187421b6d9f9c698d6542a02d4c124373ce0f10cbbc6b9a18385d99519f06a24aa9a4f5560157880233ee8352f2e9de0ffa333bb50932587a70153a37f25263693b86dd6a61f7d1f40cac0f205b65fa2faa3098254fb084160c271addea6711ecae589870450b941db419bb27c8b597982b704ba0ea0189e7b5cd6b72e3529cd77e4a79c752f2f7af6aa43ec9eb0bbefc91a02a85871771189c1f9a0742e8e6fc2d71575e20631dee592f0ed44c9d8f6a22e7d7844445066ca5e8bb97dd5c2ca0365d7c33563ceca884e8e14ba21733c4d2415c1be9369298fbd616fd792bd767555aa2deec8f45e92e10fcc88079cf0093ca2e38adc797845548005a0660b5cbf6423d966ebdccb6ce9d5d476bfd562dff0dd1f8e576d424c0f5cbfe68a3a571e860e5665861a133bc8eb3d9838e9a88f18edb12dfec18a488ad1177ca22f6f763beee9c1e0dd61344997dbbc6de56800f15d2b04a4d83a0b79adb12c54aa7c418d8fd0c96b5797a003b8313d14093fdadd4b530233dd1176e86090e0cc5401d6f98529de8bb6094b8e2f02b53f562a4c115655dc2619811d8caade655b767a5d4fac6c10784bf5bb06e9f535fd1304f383e39bbc5ce58a5f2f9deb9af1d6df6b491fbcbb9053f9bc73da0ae2e815ae72aff41c71ab7adc71074dfa6906724f18b74a344f7911994ee8ee843fd991de053dd9fae152d02b4fe0818c6313aee7df2f32009221f6c2d0ef9b53b7c2e795d64dcae34e5fab88e6b112b935fa836c6868f72077c57a42a940d3c0a667f3d0b674a3de2aa8c3443748c3a5ac949f72ed49220a9cbf0896794f58e12b74a1d7c7bbf8bec7d8aa055855c34a6c25d6fddd22a73725ca3daf8e357b8173508be65d329a4b97820cdb1c7a98d222a839b4da2a33ac687ab4004f5e1d90be7dad53a50ab4d6bc04135e0a9f31af27dc75eae3b9e7fd7459455a4cdd7faf94c5fe701d66d2006719b9acb72db3c89ca61bddea7c0be7ec769ec1cbfae11a77f36a59966f042e5dd32ece56932b083f0cb68c92194c6a4ca0267186b5f3ebaa25f63b6a1b60a2a5c78b9b5b488962b2ce4854b51ab2bc001231b6be3fcdc5563b0950165da87745e387c1205ba818287a8cebfaae10ff461c2933d775c6cddaa936d1907e29b5b4e1ef0a000aafab5363dd692560a291a71f06552647144cac4884a8ae8f2dade616384eeafa54f84737d1613beb945faaa4a316ee2e2a3a094187b5edba42358e930c89bfeaf4620bada8aa6d6c8800d1b19548a308b8310a0b51c8ccc7db60aa2a04fd8b21769a32eded238f93f476b69a6548a8a17aee1d0c4476db41e4eba24d9351d3f98fac043f423ffead379b6cbfb05aaf705ff0dca6e5f6ba36d00d1bc98714a92c8ac1e7cbf441521c98e2b913dd7a5d8595e0479537029de96e2991652243fe3093594720a0538b1687711bf0bc46a1453ebe60c5d33bd798b66f19e69c90e55c2b68b62d1a759a3519630798dd4434fa658b013e28fe9befca82abc1f89a3b246f2fd44df84f88dab2792fc67b3ef2ef8eef84e441e2a7ff5a83e3784a5636a7d4775f5b3063d8e190bfcedcd8083d864d0cbb2fcca7af05cee2be552d89c801e760348dadf01ee4dbb9fb09d5b6c993ab9ac9ff7d5e1e104ab3a894f6cc9067ad64c5a97d3e12efd17820b3c07e4ce302a20fd4c5b5de8752bc4e609fbe9e6cebe713f309229883790ab6dffc22864f7b02fd9026a07299f8cf1e799acdd448428199165abf20eee23988cfcad773c7bc483f941f994c07f255e6cd72e7198f34bcbcbd801abb84e6e383d7bf6e217ee0281f4691beba5d17ef8bd59d7474540dda647ca3bdb8e280a2e6b7a7688bc677a25b2186b1e59e637737366733d75f02a597b7cabb18e75a1722d2327f4f2f101955ca88636ae97d5740ba61d7867c5141becd39f7fc5abb5b9614040995046c2ab369ac46c18159d5a3569df964e69e7686471ac756bf0515fee78904fe8fcec2096b5f3e", "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"}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, 0x0, 0x0, 0x1e, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000fe8000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000040)="260f01c32e36260f212366b9090b000066b87a0a000066ba000000000f30b823018ee8ba610066ed0f01c2660f38810f2e0f656c7ff2e3090fa5800500", 0xffffffffffffff96}], 0x1, 0xf, 0x0, 0x0) ioctl$KVM_RUN(r3, 0xae80, 0x0) 28m6.759083446s ago: executing program 4 (id=170): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) 28m6.280181824s ago: executing program 4 (id=171): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)={0x4840}, 0x18) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) 28m5.561593662s ago: executing program 4 (id=173): pipe2$watch_queue(0x0, 0x80) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f000000b1c0)="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", 0x2000, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, 0x0, 0x1, 0xffffffff, 0x0, {{}, {}, {0x14, 0x19, {0xfffffffe, 0x9}}}}, 0x30}}, 0x0) r3 = openat$sndtimer(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, &(0x7f00000002c0)={0x0, 0x0, 0x0, 'queue1\x00', 0x49}) ioctl$SNDRV_TIMER_IOCTL_SELECT(r3, 0x40345410, &(0x7f0000000100)={{0x1, 0x0, 0x0, 0x3}}) ioctl$SNDRV_TIMER_IOCTL_PARAMS(r3, 0x40505412, &(0x7f0000000440)={0x1, 0x20000006}) ioctl$SNDRV_TIMER_IOCTL_START(r3, 0x54a0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000080)) 28m2.026918856s ago: executing program 4 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 28m0.795155095s ago: executing program 33 (id=181): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff000000000200000009000100"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 23m27.944861046s ago: executing program 5 (id=650): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000540), 0x2, 0x0) write$RDMA_USER_CM_CMD_SET_OPTION(r0, &(0x7f0000000080)={0xe, 0x18, 0xfa00, @id_afonly={0x0}}, 0x20) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) connect$unix(r3, &(0x7f00000000c0)=@abs={0x0, 0x0, 0x4e21}, 0x6e) creat(&(0x7f0000000040)='./file0\x00', 0x0) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r6 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) ioctl$SG_SET_FORCE_PACK_ID(r6, 0x227b, 0x0) r7 = fcntl$dupfd(r6, 0x0, r6) write$sndseq(r7, 0x0, 0x0) getsockopt$inet_opts(0xffffffffffffffff, 0x0, 0xd, 0x0, 0x0) mount$9p_fd(0x0, &(0x7f0000000500)='./file0\x00', &(0x7f0000000300), 0x404, &(0x7f0000000bc0)={'trans=fd,', {'rfdno', 0x3d, r4}, 0x2c, {'wfdno', 0x3d, r5}, 0x2c, {[{@nodevmap}, {@cache_fscache}], [{@mask={'mask', 0x3d, '^MAY_READ'}}]}}) 23m26.678193448s ago: executing program 5 (id=652): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000380)={0x1d, r2, 0x0, {0x2, 0xf0, 0x4}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0xd, 0x4) sendmsg$inet(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b6411248000004b6", 0x9}], 0x1}, 0x4048001) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 23m25.318119207s ago: executing program 5 (id=658): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 23m24.208482406s ago: executing program 5 (id=664): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), 0x0, 0xfe37, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)={0x4840}, 0x18) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, &(0x7f00000001c0)='./file0\x00', 0x2) 23m23.708420206s ago: executing program 5 (id=665): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f07ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240"], 0x7c}}, 0x6) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) 23m20.722685275s ago: executing program 5 (id=678): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x840, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x810, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}]}]}}]}, 0x840}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23m19.737337984s ago: executing program 34 (id=678): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xd}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000026c0)=@newtfilter={0x840, 0x2c, 0xd27, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r1, {0xe, 0x6}, {}, {0x8, 0xffe0}}, [@filter_kind_options=@f_basic={{0xa}, {0x810, 0x2, [@TCA_BASIC_POLICE={0x80c, 0x4, [@TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x5, 0x8, 0x401, 0x7, 0xffffffff, 0x6, 0x8, 0x7f, 0x101, 0x3, 0x9, 0x5, 0x4dc6, 0x7fff, 0x6, 0x8, 0x3, 0xd, 0x4, 0x3ae0, 0x5, 0x99, 0x1, 0xff, 0x1, 0x200006, 0x80, 0x7f1b, 0x5, 0x5, 0x80000000, 0xfffffffa, 0xffffffff, 0x800, 0xf20d, 0x800, 0x0, 0x1, 0x4, 0x80000000, 0x6, 0x9, 0x3, 0xff, 0x0, 0x9f0, 0x1ff, 0xdf7a, 0x7fffffff, 0x0, 0x0, 0xc, 0x14, 0x2, 0xc, 0x401, 0xffff, 0x9bf, 0x6f3c, 0x8, 0x9, 0x7ff, 0x3, 0x9, 0x8000, 0x8, 0xffffffc0, 0x4, 0x1, 0x2, 0x8, 0x4, 0x9, 0x200, 0x3ff, 0x8000, 0x81, 0x3, 0x8, 0x800, 0x1, 0x5, 0x80000000, 0x2, 0x5, 0x5, 0x1, 0x0, 0x10001, 0x81, 0xc, 0x6, 0x80000001, 0x401, 0x6, 0x0, 0x3, 0x800, 0xf79, 0x6, 0x1, 0x4, 0xfff, 0x2, 0x1, 0x37800000, 0x0, 0x3, 0xae5, 0x4, 0x4, 0xae, 0xfffffffe, 0x1, 0x6, 0x8, 0x400, 0x1, 0x8000, 0xc, 0x1, 0x8, 0x3, 0x95, 0x1, 0x6, 0x3, 0xca, 0x0, 0x0, 0x3, 0x7, 0xffffb09a, 0x1, 0xe, 0x9, 0x5, 0x6, 0x4b, 0x9, 0x4, 0xfffffffe, 0xfffffffe, 0x4, 0x69, 0x2, 0x2, 0x6c, 0x0, 0x5, 0xffff, 0x4, 0x5, 0x2, 0x6, 0xffffffd1, 0x6, 0x1, 0xb3, 0x5, 0x5, 0x1, 0x9, 0x4, 0x3, 0x9, 0x0, 0x5, 0x2c9, 0x8bf, 0x0, 0xde39067, 0x9, 0x8, 0x6, 0x1534fe8b, 0x5, 0x0, 0x6, 0x2, 0x4, 0x81, 0xd16d, 0x0, 0xf9, 0x8, 0x401, 0xffffffff, 0xe19b, 0x80000000, 0x402, 0x81, 0x800, 0x9, 0x651, 0x10001, 0x6, 0x0, 0x5, 0x1d58, 0x401, 0x3, 0x8002, 0x8, 0x36, 0x15a, 0x2, 0x6, 0x5, 0x7, 0x6, 0x79, 0x8, 0x1da, 0x1, 0x9, 0x30, 0x0, 0xfffffff9, 0x9c06, 0x7, 0x0, 0x27b, 0x5, 0x1001, 0x3, 0x1, 0x6, 0x5, 0x64c, 0x4, 0xfffffff7, 0x9, 0x4, 0x80000000, 0x8000, 0x7, 0x7, 0x7, 0x3, 0xa, 0x8, 0xffff, 0x22, 0x9, 0x4, 0x3, 0x3, 0x9, 0xfffffffa, 0x1, 0x6, 0x3321, 0x9, 0x5]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x80000001, 0x7, 0x3ff, 0x7, 0x4, 0x2, 0xffffffc0, 0x7ff, 0x86, 0x9, 0x9, 0x2, 0x8c, 0x1000200, 0x5, 0x5, 0x40000000, 0x5, 0x7, 0x1, 0x0, 0x4, 0x0, 0xc, 0xd, 0x3, 0x9, 0x49, 0x80000000, 0xd35, 0x25431060, 0xd2, 0x5, 0x9, 0xb5f0, 0x401, 0x7, 0x2, 0x6, 0x80000001, 0xa, 0x8, 0x9, 0x1, 0xccf1793, 0x2c800000, 0x5d, 0x1, 0x239, 0x100005, 0x5a5057fd, 0x5, 0x4, 0x6, 0x8, 0x5, 0x200, 0x6, 0x10000, 0xf9, 0x6, 0x8, 0x7, 0x3, 0xfffffeff, 0x9, 0x1, 0x401, 0x1ff, 0x2, 0x0, 0x0, 0x800, 0x3, 0x0, 0x8, 0x10000, 0x6, 0x7c, 0x1, 0x9, 0xffffff01, 0x9, 0x8, 0x8052, 0x9, 0x5, 0x8, 0x142, 0x2d, 0x7, 0x8, 0xb, 0x81, 0x9, 0x3ff, 0x1, 0x10000, 0x9, 0x1, 0x7, 0xffffffff, 0x5, 0xe8, 0x6, 0x8, 0xf, 0x3, 0x0, 0xff, 0xfffffffa, 0xfffffff7, 0x8001, 0x5, 0x9, 0x8, 0x5, 0x9, 0x2, 0x2, 0x10001, 0x8, 0x0, 0x6, 0x4, 0x866, 0x7fff, 0xe0, 0x8, 0xd3a, 0x6000000, 0xfffffffc, 0x9, 0x7fff, 0x7, 0x10000, 0x3, 0x7fff, 0x40000000, 0x1, 0x7, 0xfffffffb, 0x3, 0x1, 0x9, 0x0, 0x7, 0x6, 0x4, 0x700, 0x4, 0x1, 0x2, 0x0, 0x5, 0x7, 0x4, 0x7, 0x8, 0x8, 0xc, 0x9, 0x6, 0x5, 0x0, 0x5, 0x2, 0x2, 0x8, 0x9, 0x9, 0x9, 0x5847cb5c, 0x9, 0x2, 0xffffffd8, 0x10001, 0xfffffffc, 0x5, 0x401, 0x8, 0x1, 0x2, 0x0, 0x0, 0x1200, 0x2, 0x0, 0xef2c, 0x80000001, 0xac5ae1dd, 0x0, 0x800, 0x1ff, 0x2, 0x3, 0x1, 0x8, 0x7785, 0x8001, 0x4, 0x5, 0x4, 0x7, 0x0, 0x6, 0xffffff2f, 0x8001, 0x3, 0x5, 0x3, 0x4, 0x7, 0x5, 0x7, 0xabd, 0x0, 0x10001, 0x6, 0x4, 0x30000000, 0x5, 0x13c1, 0x3, 0x7, 0x1, 0x8, 0x2, 0x6, 0x1, 0x2, 0x2, 0xb, 0x8, 0xa, 0x9, 0xfffffff9, 0x7, 0x7, 0x3, 0x8, 0x9, 0xfffffffc, 0x6, 0xe7a9, 0x10001, 0x6, 0x0, 0xb9, 0x8cca, 0xdda5, 0x1, 0xa, 0x7fffffff, 0x10, 0x31f]}]}]}}]}, 0x840}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 23m12.484277316s ago: executing program 3 (id=705): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 23m12.266935243s ago: executing program 3 (id=707): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001600)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x24008090}, 0x40000) recvmmsg(r1, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 23m12.05340466s ago: executing program 3 (id=708): r0 = openat$userio(0xffffffffffffff9c, &(0x7f0000000080), 0x22242, 0x0) write$USERIO_CMD_SET_PORT_TYPE(r0, &(0x7f00000002c0)={0x1, 0x5}, 0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mremap(&(0x7f0000002000/0x1000)=nil, 0x1000, 0x2000, 0x3, &(0x7f0000ffb000/0x2000)=nil) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@can_delroute={0x14, 0x19, 0x1, 0x70bd29, 0x25dfdbfd, {0x1d, 0x1, 0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x80800}, 0x400c054) r4 = socket$can_j1939(0x1d, 0x2, 0x7) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) getsockopt$SO_J1939_PROMISC(r4, 0x6b, 0x2, 0x0, &(0x7f0000000200)) write$USERIO_CMD_REGISTER(r0, &(0x7f00000000c0), 0x2) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x1e) 23m11.016540263s ago: executing program 3 (id=709): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$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") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)={0x4840}, 0x18) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, 0x0, 0x2) 23m10.467304168s ago: executing program 3 (id=710): sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x44, 0x9, 0x6, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @local}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x44000) 23m7.594388078s ago: executing program 3 (id=719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$eJzs3d9rW1UcAPDvTdv91nUwhvoghT04mUvX1h8TfJiPosOBvs/Q3pXRZBlNOtY6cHtwL77IEEQciH+A7z4O/wH/ioEOhoyiD75EbnrTZWvSZm22Zubzgduec89Nzz0593t6bk5CAhhaE9mPQsSrEfFtEnG4rWw08sKJteNWH16fzbYkGo3P/koiyfe1jk/y3wfzzCsR8dvXEScLG+utLa8slMrldDHPT9YrVyZryyunLlVK8+l8enl6ZubMOzPT77/3bt/a+ub5f3749O5HZ745vvr9L/eP3E7ibBzKy9rbsQM32jMTMZE/J2Nx9okDp/pQ2SBJdvsE2JaRPM7HIhsDDsdIHvXA/99XEdEAhlQi/mFIteYBrXv7Pt0HvzAefLh2A7Sx/aNrr43Evua90YHV5LE7o+x+d7wP9Wd1/PrnndvZFv17HQJgSzduRsTp0dGN41+Sj3/bd7qHY56sw/gHz8/dbP7zVqf5T2F9/hMd5j8HO8Tudmwd/4X7faimq2z+90HH+e/6otX4SJ57qTnnG0suXiqn2dj2ckSciLG9WX6z9Zwzq/ca3cra53/ZltXfmgvm53F/dO/jj5kr1Us7aXO7BzcjXus4/03W+z/p0P/Z83G+xzqOpXde71a2dfufrcbPEW907P9HK1rJ5uuTk83rYbJ1VWz0961jv3erf7fbn/X/gc3bP560r9fWnr6On/b9m3Yr2+71vyf5vJnek++7VqrXF6ci9iSfbNw//eixrXzr+Kz9J45vPv51uv73R8QXPbb/1tFbXQ8dhP6fe6r+f/rEvY+//LFb/b31/9vN1Il8Ty/jX68nuJPnDgAAAAAAAAZNISIORVIorqcLhWJx7f0dR+NAoVyt1U9erC5dnovmZ2XHY6zQWuk+3PZ+iKn8/bCt/PQT+ZmIOBIR343sb+aLs9Xy3G43HgAAAAAAAAAAAAAAAAAAAAbEwYh9nT7/n/ljZLfPDnjmfOU3DK/u8Z+X9OObnoCB5P8/DC/xD8NL/MPwEv8wvMQ/DC/xD8NL/MPwEv8AAAAAAAAAAAAAAAAAAAAAAAAAAADQV+fPncu2xurD67NZfu7q8tJC9eqpubS2UKwszRZnq4tXivPV6nw5Lc5WK1v9vXK1emVqOpauTdbTWn2ytrxyoVJduly/cKlSmk8vpGPPpVUAAAAAAAAAAAAAAAAAAADwYqktryyUyuV0UUJiW4nRwTgNiT4ndntkAgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAIBH/gsAAP//sQI4ww==") r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r0, &(0x7f0000000480)=""/243, 0xf3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)={0x7c, 0x7d, 0x1, {{0x0, 0x63, 0x0, 0x9, {0x0, 0x1, 0x3}, 0x29150000, 0xb, 0x7ff, 0x0, 0x3, '#}]', 0x1, '&', 0x28, 'system_u:object_r:removable_device_t:s0\x00', 0x4, '#[!/'}, 0x4, 'GPL\x00', 0x0, 0xee00, r3}}, 0x7c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000003c0)={0x0, 0x1, {0x2, 0x0, 0x9, 0x2, 0xb3}, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 23m7.148778134s ago: executing program 35 (id=719): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000240)={[{@stripe={'stripe', 0x3d, 0x3}}, {@noauto_da_alloc}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@delalloc}, {@mb_optimize_scan={'mb_optimize_scan', 0x3d, 0x1}}, {@oldalloc}, {@jqfmt_vfsv1}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r0 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) getdents64(r0, &(0x7f0000000480)=""/243, 0xf3) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet_udp(0x2, 0x2, 0x0) lstat(&(0x7f0000000640)='./file0\x00', &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0}) write$P9_RSTATu(0xffffffffffffffff, &(0x7f0000000780)={0x7c, 0x7d, 0x1, {{0x0, 0x63, 0x0, 0x9, {0x0, 0x1, 0x3}, 0x29150000, 0xb, 0x7ff, 0x0, 0x3, '#}]', 0x1, '&', 0x28, 'system_u:object_r:removable_device_t:s0\x00', 0x4, '#[!/'}, 0x4, 'GPL\x00', 0x0, 0xee00, r3}}, 0x7c) ioctl$SNDRV_SEQ_IOCTL_SET_QUEUE_TIMER(r0, 0x40605346, &(0x7f00000003c0)={0x0, 0x1, {0x2, 0x0, 0x9, 0x2, 0xb3}, 0x3}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@allocspi={0x100, 0x16, 0x1, 0x70bd2b, 0x25dfdbfe, {{{@in=@private=0xa010101, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e23, 0x0, 0x4e24, 0x0, 0xa, 0x80, 0x20, 0x1d}, {@in6=@local, 0x4d9, 0x33}, @in=@dev={0xac, 0x14, 0x14, 0x10}, {0x8, 0x7b5, 0x0, 0x6, 0x9, 0xfffffffffffffffa, 0xffffffff, 0x3}, {0x2, 0x3, 0x1, 0xfffffffffffffffa}, {0x0, 0x10001, 0xfffffff9}, 0x70bd2a, 0x0, 0x0, 0x2, 0x6, 0x1}, 0x8, 0x74f}, [@XFRMA_IF_ID={0x8, 0x1f, 0x4}]}, 0x100}, 0x1, 0x0, 0x0, 0x10}, 0x400c8c0) connect$unix(r0, &(0x7f0000000340)=@abs={0x1, 0x0, 0x4e23}, 0x6e) 22m48.910877146s ago: executing program 0 (id=750): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000200)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_io_uring_setup(0x7b, &(0x7f0000000540)={0x0, 0x3bca, 0x10100, 0x0, 0x313}, &(0x7f00000005c0)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x50, 0x0, 0xffffffffffffffff, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x40000103, 0x0, {0x4}}) io_uring_enter(r3, 0x46f3, 0x0, 0x0, 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) write(0xffffffffffffffff, &(0x7f0000000200)='~', 0x1) r6 = syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r7 = syz_open_dev$dri(0x0, 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r7, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r7, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(r6, 0xc02064b6, &(0x7f00000002c0)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r9 = socket$inet_udp(0x2, 0x2, 0x0) sendto$inet(r9, &(0x7f0000000000)="170cf31f8e85bcdbb6ad484c26dfa6be3180020cc3ad083eb719a8495180e3411bca5a3904d99c037e2d8e3c1c72fa92fbc31f328a0634a228ba73fca36ab95455c2429a396c437ae822453d5dbfd246cfc6e49f4b77fbb58e3e23beae7970b5bdb6c5d6a4b76a6e910402706986d2c4da7f3cab1ec82c46628456875bad37ebb5c0bef76aeae81b5489235cc4a3533c44fae97f864aa56771761bf7b68f404289dfd955fc20d7c7eb05951df334942d46ba78c78f3c72a7e827134798ba9e611ff2de814c88b7ee20d6163a99b26f4756f5ed20986bfe8de8c2292656a566df0117b53931975aaafdc881", 0xeb, 0x4000810, &(0x7f0000000100)={0x2, 0x4e21, @remote}, 0x10) setsockopt$IPT_SO_SET_REPLACE(r9, 0x4000000000000, 0x40, &(0x7f00000019c0)=@raw={'raw\x00', 0x4001, 0x3, 0xa38, 0x0, 0xb, 0x148, 0x0, 0x148, 0x9a0, 0x240, 0x240, 0x9a0, 0x215, 0x3, 0x0, {[{{@ip={@local, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth0\x00', {}, {}, 0x11}, 0x2e8, 0x880, 0x8e8, 0x0, {0xff0f000000000000}, [@common=@inet=@udp={{0x30}}, @common=@unspec=@u32={{0x7e0}, {[], 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz1\x00'}}}, {{@ip={@broadcast, @broadcast, 0x0, 0x0, 'team0\x00', 'netpci0\x00'}, 0xec010000, 0x98, 0xb8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa98) setsockopt$sock_int(r9, 0x1, 0xa, &(0x7f0000000140)=0x3, 0x4) 22m47.808420305s ago: executing program 0 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r1, 0x0, 0x10) recvmmsg(r1, &(0x7f000000a140)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000001980)=""/109, 0x6d}], 0x1}, 0x8}], 0x1, 0x40010061, 0x0) 22m47.473580271s ago: executing program 0 (id=763): syz_open_dev$vim2m(&(0x7f0000000480), 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f00000001c0)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r1, &(0x7f00000004c0)=@abs, 0x6e) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x23, 0x0, &(0x7f00000001c0)) getsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x6, 0x0, &(0x7f0000000740)) r2 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0}, 0x18) sendmsg$TIPC_CMD_GET_REMOTE_MNG(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000003c0)={0x0}}, 0x40) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[@ANYBLOB="1600000000000000080000000100000000000000", @ANYRES32=0x1, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000020400"/28], 0x50) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(authencesn(streebog256-generic,xchacha12-generic))\x00'}, 0x58) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="040f0489010504"], 0x7) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$sock_inet_SIOCSIFADDR(r2, 0x8916, &(0x7f00000002c0)={'veth1_to_batadv\x00', {0x2, 0x4e21, @broadcast}}) r4 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace$PTRACE_GETSIGMASK(0x420a, r4, 0x8, &(0x7f0000000140)) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(0xffffffffffffffff, &(0x7f0000000000)={&(0x7f0000000400)={0x2, 0x4e23, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000002c0)=[@rdma_map={0x30, 0x114, 0x3, {{&(0x7f0000000580)=""/144, 0x90}, &(0x7f0000000180), 0x2}}], 0x30, 0x40014}, 0x200000000000000) mount(&(0x7f0000000280)=@nullb, &(0x7f0000000680)='./cgroup/file0\x00', &(0x7f0000000640)='ocfs2\x00', 0x80208a, 0x0) 22m46.377258559s ago: executing program 0 (id=765): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f0000000200)='./file1\x00', 0x200000, &(0x7f0000000300)={[{@noauto_da_alloc}, {@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@dioread_lock}, {@norecovery}, {@discard}, {@lazytime}, {@noload}, {@usrquota}, {@noauto_da_alloc}]}, 0xfe, 0x54d, &(0x7f0000000400)="$eJzs3d9rW1UcAPDvTdv96nQdjKE+SGEPTubStfXHBB/mo+hwoO8ztHdlNFlGk461Dtwe3IsvMgQRB+If4LuPw3/Av2KggyGj6IMvkZvedNmatFmXrZn5fOC259x703NPzv2enpOTkACG1mT2oxDxakR8m0Qcajs2GvnByfXz1h5cm8u2JBqNz/5KIsn3tc5P8t/jeeaViPjt64gThc3l1lZWF0vlcrqU56fqlctTtZXVkxcrpYV0Ib00Mzt7+p3Zmfffe7dvdX3z3D8/fHrno9PfHFv7/pd7h28lcSYO5sfa6/EUrrdnJmMyf07G4sxjJ073obBBkuz2BbAjI3mcj0XWBxyKkTzqgf+/ryKiAQypRPzDkGqNA1pz+z7Ng18Y9z9cnwBtrv/o+msjsa85NzqwljwyM8rmuxN9KD8r49c/b9/Ktujf6xAA27p+IyJOjY5u7v+SvP/buVM9nPN4Gfo/eH7uZOOftzqNfwob45/oMP4Z7xC7O7F9/Bfu9aGYrrLx3wcdx78bi1YTI3nupeaYbyy5cLGcZn3byxFxPMb2Zvmt1nNOr91tdDvWPv7Ltqz81lgwv457o3sffcx8qV56mjq3u38j4rWO499ko/2TDu2fPR/neizjaHr79W7Htq//s9X4OeKNju3/cEUr2Xp9cqp5P0y17orN/r559Pdu5e92/bP2P7B1/SeS9vXa2pOX8dO+f9Nux3Z6/+9JPm+m9+T7rpbq9aXpiD3JJ5v3zzx8bCvfOj+r//FjW/d/ne7//RHxRY/1v3nkZtdTB6H955+o/Z88cffjL3/sVn5v7f92M3U839NL/9frBT7NcwcAAAAAAACDphARByMpFDfShUKxuP7+jiNxoFCu1uonLlSXL81H87OyEzFWaK10j7e9H2I6fz9sKz/zWH42Ig5HxHcj+5v54ly1PL/blQcAAAAAAAAAAAAAAAAAAIABMd7l8/+ZP0Z2++qAZ85XfsPw2jb++/FNT8BA8v8fhpf4h+El/mF4iX8YXuIfhpf4h+El/mF4iX8AAAAAAAAAAAAAAAAAAAAAAAAAAADoq3Nnz2ZbY+3BtbksP39lZXmxeuXkfFpbLFaW54pz1aXLxYVqdaGcFueqle3+XrlavTw9E8tXp+pprT5VW1k9X6kuX6qfv1gpLaTn07HnUisAAAAAAAAAAAAAAAAAAAB4sdRWVhdL5XK6JCGxo8ToYFyGRJ8Tu90zAQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMBD/wUAAP//y284sw==") mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x48400) lsetxattr$trusted_overlay_upper(&(0x7f0000000100)='./file1\x00', &(0x7f00000000c0), &(0x7f0000000040)=ANY=[], 0xfe37, 0x0) chdir(&(0x7f00000000c0)='./bus\x00') mkdir(&(0x7f0000000240)='./bus\x00', 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./bus/file0\x00', &(0x7f00000000c0)={0x4840}, 0x18) renameat2(r1, &(0x7f0000000240)='./bus/file0\x00', r1, 0x0, 0x2) 22m45.503381649s ago: executing program 0 (id=761): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x5411, 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) r5 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r5, &(0x7f0000000000), 0x12) 22m40.594871153s ago: executing program 0 (id=774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x5411, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000000), 0x12) 22m39.234722582s ago: executing program 36 (id=774): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f00000000c0)={'vxcan1\x00'}) fcntl$notify(0xffffffffffffffff, 0x402, 0xd) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f00000000c0)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SET_TAGGED_ADDR_CTRL(0x37, 0x1) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCADDRT(r2, 0x5411, 0xffffffffffffffff) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setpriority(0x0, r1, 0x3) madvise(&(0x7f000059e000/0x5000)=nil, 0x5000, 0x9) read$usbfs(0xffffffffffffffff, &(0x7f0000000080)=""/4, 0x4) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$x25(r3, &(0x7f0000000000), 0x12) 2.766893589s ago: executing program 6 (id=4194): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001100)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32=r2], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 2.707832454s ago: executing program 6 (id=4196): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x24, 0x2b, 0xb, 0x0, 0x0, {0x8}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}]}, 0x24}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) listen(r0, 0xa1) accept4$bt_l2cap(r0, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r2}, 0x10) r3 = socket$kcm(0x2, 0x1, 0x84) sendmsg$inet(r3, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000380)=[{&(0x7f0000000640)}], 0x1}, 0xfc) sendmsg$inet(r3, 0x0, 0x240448c4) 1.824225374s ago: executing program 8 (id=4204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac09, 0xfac12, 0xfac01]}]]}, 0x7c}}, 0x0) 1.75129819s ago: executing program 6 (id=4205): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 1.61989235s ago: executing program 8 (id=4206): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 1.550350856s ago: executing program 6 (id=4208): socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2}}, {{@in=@multicast2}}}, &(0x7f00000000c0)=0xfffffffffffffd96) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000041) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) 1.243659551s ago: executing program 1 (id=4211): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) listen(0xffffffffffffffff, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmmsg$inet6(r2, &(0x7f0000019680)=[{{&(0x7f0000000100)={0xa, 0x0, 0x0, @loopback={0x0, 0xac141414}}, 0x1c, 0x0}}], 0x1, 0x20004855) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x40, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x40}, @val={0x8, 0x3, r5}, @val={0xc}}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1374}, @NL80211_ATTR_VENDOR_SUBCMD={0x8}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r7, @ANYBLOB="01000b00000000000000070000000c0001800500020001"], 0x20}}, 0x0) 1.118859131s ago: executing program 8 (id=4213): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9c, 0xa, 0x4, 0x75e}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4049000}, 0x4000080) 914.859267ms ago: executing program 1 (id=4215): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x7c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0x10, 0x4c, [0xfac09, 0x1b, 0xfac01]}]]}, 0x7c}}, 0x0) 852.169552ms ago: executing program 1 (id=4216): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r5, &(0x7f0000000140), 0x4924b68, 0x0) 834.133513ms ago: executing program 7 (id=4217): r0 = socket$nl_generic(0x11, 0x3, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb79100a6c52d922ba2a05dd42"], 0xfdef) sendmsg(r0, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f08", 0xd}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) 744.476201ms ago: executing program 8 (id=4218): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) 708.204953ms ago: executing program 7 (id=4219): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003c0007010000000000000000017c00000400fc800c000180060006"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc000) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, 0x0) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="310301000000000000000900000008000300", @ANYRES32], 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x200480c4) 605.911542ms ago: executing program 1 (id=4220): socket$netlink(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) sendmsg$NL80211_CMD_DEL_PMKSA(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x40}, 0x400c4) r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) syz_emit_ethernet(0x74, &(0x7f0000000000)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private=0x300, @multicast1}, {0x0, 0x0, 0xfffffe9a, 0x0, @gue={{0x2}}}}}}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a0500"], 0x140}}, 0x0) 519.515219ms ago: executing program 6 (id=4221): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000001280)=@newtfilter={0x38, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_HASH={0x8, 0x2, 0x8001}]}}]}, 0x38}}, 0x0) 482.122902ms ago: executing program 8 (id=4222): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) r6 = socket$inet6(0xa, 0x3, 0x87) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) readv(r7, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r9 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r9, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r9, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) 481.362802ms ago: executing program 7 (id=4223): socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0100000002000000e27f"], 0x48) r1 = socket(0x11, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104"], 0x44}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, 0x14) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000280)=ANY=[@ANYRES8, @ANYRES16=r0], 0xdd12}], 0x1, 0x0, 0x0, 0x4008084}, 0x10) 370.75278ms ago: executing program 1 (id=4224): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000006c0)={0x78, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x2a, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @val, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x6006}, @NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x8, 0x49, [0xfac0b]}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}, @NL80211_ATTR_AKM_SUITES={0xc, 0x4c, [0x1b, 0xfac01]}]]}, 0x78}}, 0x0) 330.354894ms ago: executing program 7 (id=4225): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x58, 0x10, 0x401, 0x2, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0xe59bca127d81b0fa, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MCAST_EHT_HOSTS_LIMIT={0x8}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x20000000) 253.44408ms ago: executing program 1 (id=4226): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0xa30e, 0x1, 0xfffffffa}}}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newqdisc={0x4c, 0x28, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffdfc, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x2, 0xb}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x6, 0x9c, 0xa, 0x4, 0x75e}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4049000}, 0x4000080) 217.385433ms ago: executing program 6 (id=4227): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x64, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}]]}, 0x64}}, 0x0) 114.699721ms ago: executing program 7 (id=4228): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) socket(0x1e, 0x4, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x24, r2, 0x201, 0x400000, 0x0, {{}, {}, {0x8, 0x11, 0xc}}}, 0x24}, 0x1, 0x0, 0x0, 0x40800}, 0x0) 83.540873ms ago: executing program 8 (id=4229): socket$inet6_sctp(0xa, 0x801, 0x84) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$pptp(0x18, 0x1, 0x2) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r1, 0x84, 0x6c, 0x0, &(0x7f0000001080)) bind$pptp(r0, &(0x7f0000000000)={0x18, 0x2, {0x3, @local}}, 0x1e) connect$pptp(r0, &(0x7f0000000080)={0x18, 0x2, {0x0, @rand_addr=0x64010102}}, 0x1e) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000540)={{{@in=@initdev, @in=@multicast2}}, {{@in=@multicast2}}}, &(0x7f00000000c0)=0xfffffffffffffd96) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x4000041) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000100), 0x2300, 0x0) ioctl$PPPIOCATTCHAN(r2, 0x40047438, &(0x7f0000000040)=0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r3, 0x0) ioctl$PPPIOCSFLAGS1(r2, 0x40047459, &(0x7f0000000140)=0x86) 0s ago: executing program 7 (id=4230): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) syz_emit_ethernet(0x32, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080045"], 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f00000001c0)=[{&(0x7f0000000000)="89e7ee2c7cdad9b4b47380c988ca", 0x140}], 0x1) kernel console output (not intermixed with test programs): s 2 [ 1466.766559][ T9781] usb 7-1: Using ep0 maxpacket: 16 [ 1466.774550][ T9781] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1466.828105][ T9781] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1466.866177][T19355] loop8: detected capacity change from 0 to 512 [ 1466.905542][ T9781] usb 7-1: config 0 has no interface number 0 [ 1466.940099][ T9781] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1466.966120][ T9781] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1466.988327][ T9781] usb 7-1: Product: syz [ 1466.991096][T19355] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1467.006121][T19355] ext4 filesystem being mounted at /548/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1467.031293][ T9781] usb 7-1: Manufacturer: syz [ 1467.083024][ T9781] usb 7-1: SerialNumber: syz [ 1467.100547][ T9512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1467.708693][ T9781] usb 7-1: config 0 descriptor?? [ 1467.727750][ T9781] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1467.734333][ T9781] usb 7-1: No valid video chain found. [ 1469.749964][ T9781] usb 7-1: USB disconnect, device number 69 [ 1470.121770][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1470.425243][T18756] Bluetooth: hci2: unexpected event for opcode 0x0005 [ 1471.405941][T19379] loop6: detected capacity change from 0 to 512 [ 1471.429069][T19379] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1471.458165][T19379] EXT4-fs (loop6): 1 orphan inode deleted [ 1471.464057][T19379] EXT4-fs (loop6): 1 truncate cleaned up [ 1471.483738][T19379] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1473.236656][T18756] Bluetooth: hci1: unexpected event for opcode 0x0005 [ 1474.146581][T19381] EXT4-fs error (device loop6): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1474.164987][T19393] loop7: detected capacity change from 0 to 512 [ 1474.195592][T19393] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1474.216492][T19381] EXT4-fs (loop6): Remounting filesystem read-only [ 1474.510337][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1474.526157][T19393] EXT4-fs (loop7): 1 orphan inode deleted [ 1474.806581][T19393] EXT4-fs (loop7): 1 truncate cleaned up [ 1474.821552][T19393] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1475.229866][T19409] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3114'. [ 1475.241957][T19409] loop1: detected capacity change from 0 to 8 [ 1475.249053][T19409] squashfs: Unknown parameter '' [ 1476.281799][T19419] loop8: detected capacity change from 0 to 512 [ 1476.474287][T19419] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1476.599357][T19419] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3117: casefold flag without casefold feature [ 1478.047465][T19419] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3117: couldn't read orphan inode 15 (err -117) [ 1478.106384][T18756] Bluetooth: hci1: command 0x0406 tx timeout [ 1478.137957][T19419] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1478.174228][ T9512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1478.611133][T19434] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3117'. [ 1479.068154][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1479.748149][T19443] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3123'. [ 1479.760059][T19443] loop8: detected capacity change from 0 to 8 [ 1479.767175][T19443] squashfs: Unknown parameter '' [ 1479.925207][T19440] hub 6-0:1.0: USB hub found [ 1480.147865][T19440] hub 6-0:1.0: 1 port detected [ 1480.982948][T19445] loop8: detected capacity change from 0 to 512 [ 1481.033461][T19445] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1481.107934][T19445] EXT4-fs (loop8): 1 orphan inode deleted [ 1481.136914][T19445] EXT4-fs (loop8): 1 truncate cleaned up [ 1481.183844][T19445] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1481.256578][T19455] loop1: detected capacity change from 0 to 512 [ 1481.332425][T19457] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3121'. [ 1481.355807][T19457] loop6: detected capacity change from 0 to 8 [ 1481.369965][T19457] squashfs: Unknown parameter '' [ 1481.848849][T19458] hub 6-0:1.0: USB hub found [ 1481.854946][T19458] hub 6-0:1.0: 1 port detected [ 1482.455932][T19450] EXT4-fs error (device loop8): ext4_mb_generate_buddy:1220: group 0, block bitmap and bg descriptor inconsistent: 191 vs 220 free clusters [ 1482.547397][T19450] EXT4-fs (loop8): Remounting filesystem read-only [ 1482.640701][T19455] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1482.727969][T19455] ext4 filesystem being mounted at /277/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1483.680045][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1484.796968][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1484.803530][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1485.021641][T19489] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3131'. [ 1485.033345][T19489] loop7: detected capacity change from 0 to 8 [ 1485.040524][T19489] squashfs: Unknown parameter '€' [ 1485.976798][T17980] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1487.383371][T16287] Bluetooth: hci1: command 0x0406 tx timeout [ 1488.759177][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1489.263687][T19505] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3135'. [ 1489.281631][T19505] loop1: detected capacity change from 0 to 8 [ 1489.292171][T19505] squashfs: Unknown parameter '' [ 1489.803548][T17980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1489.884167][T19509] loop6: detected capacity change from 0 to 512 [ 1489.943159][T19509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1490.106616][T19509] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3133: casefold flag without casefold feature [ 1490.159011][T19509] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3133: couldn't read orphan inode 15 (err -117) [ 1490.213843][T19513] loop7: detected capacity change from 0 to 512 [ 1490.235144][T19509] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1490.256807][T19513] EXT4-fs (loop7): encrypted files will use data=ordered instead of data journaling mode [ 1490.353500][T19513] EXT4-fs (loop7): 1 orphan inode deleted [ 1490.386404][T19513] EXT4-fs (loop7): 1 truncate cleaned up [ 1490.413795][T19513] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1490.930270][T19522] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3133'. [ 1491.513814][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1491.923466][T19528] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3138'. [ 1491.935316][T19528] loop8: detected capacity change from 0 to 8 [ 1491.942428][T19528] squashfs: Unknown parameter '' [ 1491.952507][T19527] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3139'. [ 1491.964146][T19527] loop1: detected capacity change from 0 to 8 [ 1491.971889][T19527] squashfs: Unknown parameter '' [ 1492.092867][T17980] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1492.909847][ T9512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1493.407978][T19542] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3141'. [ 1493.418889][T19542] loop8: detected capacity change from 0 to 8 [ 1493.476857][T19542] squashfs: Unknown parameter '€' [ 1494.499898][T17984] I/O error, dev loop8, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1495.043468][T19554] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3143'. [ 1495.237447][T19554] loop7: detected capacity change from 0 to 8 [ 1495.355217][T19554] squashfs: Unknown parameter '' [ 1495.622170][T19555] loop8: detected capacity change from 0 to 512 [ 1495.647524][T17980] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1495.687703][T19555] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1496.166664][T16287] Bluetooth: hci1: command 0x0406 tx timeout [ 1496.476526][T19555] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3145: casefold flag without casefold feature [ 1496.547115][T19555] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3145: couldn't read orphan inode 15 (err -117) [ 1496.593674][T19555] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1498.088735][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1498.228645][T19576] loop7: detected capacity change from 0 to 512 [ 1498.266719][T19576] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1498.328487][T19576] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3149: casefold flag without casefold feature [ 1498.386371][T19576] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3149: couldn't read orphan inode 15 (err -117) [ 1498.452005][T19576] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1498.477802][T19585] loop6: detected capacity change from 0 to 8 [ 1499.334969][T19590] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3149'. [ 1500.040004][ T9512] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1501.364504][T19603] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3152'. [ 1501.382620][T19603] loop7: detected capacity change from 0 to 8 [ 1501.393018][T19603] squashfs: Unknown parameter '' [ 1503.264405][ T5850] usb 7-1: new high-speed USB device number 70 using dummy_hcd [ 1503.466417][ T5850] usb 7-1: Using ep0 maxpacket: 16 [ 1503.538649][ T5850] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1503.548424][ T5850] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1503.571673][ T5850] usb 7-1: config 0 has no interface number 0 [ 1503.665852][ T5850] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1503.682899][ T5850] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1503.695158][ T5850] usb 7-1: Product: syz [ 1503.704781][ T5850] usb 7-1: Manufacturer: syz [ 1503.712290][ T5850] usb 7-1: SerialNumber: syz [ 1503.752131][ T5850] usb 7-1: config 0 descriptor?? [ 1503.771060][ T5850] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1503.786414][ T5850] usb 7-1: No valid video chain found. [ 1504.660258][ T5850] usb 7-1: USB disconnect, device number 70 [ 1504.916935][T19626] loop6: detected capacity change from 0 to 512 [ 1504.992553][T19626] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1505.477199][T18756] Bluetooth: hci1: command 0x0406 tx timeout [ 1505.700382][T19626] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3159: casefold flag without casefold feature [ 1505.733974][T19626] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3159: couldn't read orphan inode 15 (err -117) [ 1505.749033][T19626] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1506.089755][T19635] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3159'. [ 1506.432844][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1506.565392][T19639] loop8: detected capacity change from 0 to 512 [ 1506.845414][T19639] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1506.861256][T19639] EXT4-fs (loop8): 1 truncate cleaned up [ 1506.870142][T19639] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1507.840828][T19651] loop1: detected capacity change from 0 to 512 [ 1508.237367][T19655] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3163'. [ 1508.249067][T19655] loop7: detected capacity change from 0 to 8 [ 1508.256004][T19655] squashfs: Unknown parameter '€' [ 1508.476444][T19651] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1508.520472][T19651] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3162: casefold flag without casefold feature [ 1508.561330][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1508.566591][T19651] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3162: couldn't read orphan inode 15 (err -117) [ 1508.588070][T19651] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1508.604921][T17984] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1510.202728][T19665] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3162'. [ 1511.971074][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1512.216375][ T5773] usb 9-1: new high-speed USB device number 70 using dummy_hcd [ 1512.291673][T19683] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3172'. [ 1512.309141][T19683] loop1: detected capacity change from 0 to 8 [ 1512.319630][T19683] squashfs: Unknown parameter '' [ 1513.134903][T19687] loop1: detected capacity change from 0 to 512 [ 1513.182210][T19687] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1513.191130][ T5773] usb 9-1: Using ep0 maxpacket: 16 [ 1513.221626][ T5773] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1513.236703][ T5773] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1513.255352][T19687] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3174: casefold flag without casefold feature [ 1513.268099][ T5773] usb 9-1: config 0 has no interface number 0 [ 1513.287622][ T5773] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1513.296787][ T5773] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1513.298176][T19687] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3174: couldn't read orphan inode 15 (err -117) [ 1513.304772][ T5773] usb 9-1: Product: syz [ 1513.321554][ T5773] usb 9-1: Manufacturer: syz [ 1513.326177][ T5773] usb 9-1: SerialNumber: syz [ 1513.334612][T19687] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1513.367476][ T5773] usb 9-1: config 0 descriptor?? [ 1513.990252][ T5773] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1513.991009][T16287] Bluetooth: hci1: command 0x0406 tx timeout [ 1513.996830][ T5773] usb 9-1: No valid video chain found. [ 1514.104024][T19693] sit0: left promiscuous mode [ 1514.865034][T19697] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3174'. [ 1515.324584][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1516.213460][T19707] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3177'. [ 1516.225368][T19707] loop1: detected capacity change from 0 to 8 [ 1516.232405][T19707] squashfs: Unknown parameter '€' [ 1516.764071][T19709] loop6: detected capacity change from 0 to 512 [ 1516.784905][T19709] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1516.797674][T19709] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1516.866496][T19713] loop1: detected capacity change from 0 to 1024 [ 1517.003275][T19713] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1518.901070][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1519.751043][ T5773] usb 9-1: USB disconnect, device number 70 [ 1519.975707][T16287] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1520.015551][T16287] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1520.026462][T16287] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1520.035653][T16287] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1520.046467][T16287] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1520.053919][T16287] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1520.166721][T19737] loop8: detected capacity change from 0 to 512 [ 1520.213222][T19737] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1520.283693][T19737] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3183: casefold flag without casefold feature [ 1520.322015][T19737] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3183: couldn't read orphan inode 15 (err -117) [ 1520.355948][T19737] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1520.647708][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1520.806840][T19742] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3183'. [ 1521.379535][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1521.384620][T19734] chnl_net:caif_netlink_parms(): no params data found [ 1521.745970][T19734] bridge0: port 1(bridge_slave_0) entered blocking state [ 1521.753564][T19734] bridge0: port 1(bridge_slave_0) entered disabled state [ 1521.764841][T19734] bridge_slave_0: entered allmulticast mode [ 1521.875667][T19755] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3185'. [ 1521.887675][T19755] loop6: detected capacity change from 0 to 8 [ 1521.894725][T19755] squashfs: Unknown parameter '' [ 1522.171068][T18756] Bluetooth: hci1: command 0x0406 tx timeout [ 1522.178587][T16287] Bluetooth: hci4: command tx timeout [ 1522.398441][T19734] bridge_slave_0: entered promiscuous mode [ 1522.414580][T19734] bridge0: port 2(bridge_slave_1) entered blocking state [ 1522.421899][T19734] bridge0: port 2(bridge_slave_1) entered disabled state [ 1522.429644][T19734] bridge_slave_1: entered allmulticast mode [ 1522.437163][T19734] bridge_slave_1: entered promiscuous mode [ 1522.443928][T17980] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1522.754256][T19734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1522.783242][T19759] loop6: detected capacity change from 0 to 512 [ 1522.785723][T19734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1522.816585][T19759] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 1522.970035][T19759] EXT4-fs (loop6): 1 truncate cleaned up [ 1522.983331][T19759] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1523.993211][T19734] team0: Port device team_slave_0 added [ 1524.772849][T18756] Bluetooth: hci4: command tx timeout [ 1524.805394][T19734] team0: Port device team_slave_1 added [ 1525.079117][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1525.240240][T17344] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 1525.287687][T19734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1525.426316][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.070239][T17344] usb 2-1: Using ep0 maxpacket: 16 [ 1526.075576][T19734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1526.092902][T17344] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1526.106773][T17344] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1526.126461][T17344] usb 2-1: config 0 has no interface number 0 [ 1526.140041][T17344] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1526.167107][T17344] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1526.185629][T17344] usb 2-1: Product: syz [ 1526.186268][T19734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1526.195491][T17344] usb 2-1: Manufacturer: syz [ 1526.201506][T17344] usb 2-1: SerialNumber: syz [ 1526.216455][T19734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1526.229208][T17344] usb 2-1: config 0 descriptor?? [ 1526.280034][T17344] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1526.288667][T19734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1526.298502][T17344] usb 2-1: No valid video chain found. [ 1526.410722][T19734] hsr_slave_0: entered promiscuous mode [ 1526.427399][T19734] hsr_slave_1: entered promiscuous mode [ 1526.437356][T19734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1526.456340][T19734] Cannot create hsr debugfs directory [ 1526.816703][T18756] Bluetooth: hci4: command tx timeout [ 1527.373255][ T1089] tipc: Left network mode [ 1527.488358][T19784] loop6: detected capacity change from 0 to 512 [ 1527.489617][T19783] loop8: detected capacity change from 0 to 512 [ 1527.523288][T19784] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1527.559821][T19783] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1527.567674][T19784] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3193: casefold flag without casefold feature [ 1527.572805][T19783] ext4 filesystem being mounted at /568/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1527.787057][T19784] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3193: couldn't read orphan inode 15 (err -117) [ 1528.247042][T19784] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1528.455252][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1528.836588][T19798] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3193'. [ 1528.897983][T18756] Bluetooth: hci4: command tx timeout [ 1529.338343][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1530.426306][ T9] usb 2-1: USB disconnect, device number 49 [ 1534.304766][T19836] loop8: detected capacity change from 0 to 512 [ 1534.360447][T19836] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1534.371329][T19734] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 1534.374993][T19836] ext4 filesystem being mounted at /573/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1534.542625][T19734] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 1535.090707][T19848] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3197'. [ 1535.120300][T19848] loop1: detected capacity change from 0 to 8 [ 1535.607770][T19848] squashfs: Unknown parameter '' [ 1535.666615][T19734] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 1535.690165][T17984] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1535.740284][T19734] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 1535.752417][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1536.178991][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1536.202678][T19868] hub 6-0:1.0: USB hub found [ 1536.203084][ T1089] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1536.230472][T19868] hub 6-0:1.0: 1 port detected [ 1536.233229][ T1089] bridge_slave_1: left allmulticast mode [ 1536.262058][ T1089] bridge0: port 2(bridge_slave_1) entered disabled state [ 1536.267716][T19870] loop6: detected capacity change from 0 to 1024 [ 1536.311690][T19870] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1536.326382][ T1089] bridge_slave_0: left allmulticast mode [ 1536.364055][ T1089] bridge0: port 1(bridge_slave_0) entered disabled state [ 1536.406412][ T9781] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 1536.508252][ T1089] bond1 (unregistering): Released all slaves [ 1536.628341][ T9781] usb 2-1: Using ep0 maxpacket: 16 [ 1536.648216][ T9781] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1536.656910][ T9781] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1536.679664][ T9781] usb 2-1: config 0 has no interface number 0 [ 1536.689005][ T9781] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1536.698629][ T9781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1536.716328][ T9781] usb 2-1: Product: syz [ 1536.725162][ T9781] usb 2-1: Manufacturer: syz [ 1536.740497][ T9781] usb 2-1: SerialNumber: syz [ 1536.756473][ T9781] usb 2-1: config 0 descriptor?? [ 1536.777094][ T9781] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1536.806389][ T9781] usb 2-1: No valid video chain found. [ 1537.222891][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1539.198616][ T1089] team0 (unregistering): Port device team_slave_1 removed [ 1540.331361][T19897] loop6: detected capacity change from 0 to 512 [ 1540.460193][ T1089] team0 (unregistering): Port device team_slave_0 removed [ 1540.469447][T19897] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1540.482283][T19897] ext4 filesystem being mounted at /605/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1541.276432][ T12] kworker/dying (12) used greatest stack depth: 20072 bytes left [ 1541.316501][ T1089] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1541.921381][ T1089] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1542.136949][ T9781] usb 2-1: USB disconnect, device number 50 [ 1542.551782][T19909] loop8: detected capacity change from 0 to 1024 [ 1542.668805][T19909] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1543.564691][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1544.643158][ T1089] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1544.926576][T19927] hub 6-0:1.0: USB hub found [ 1544.988100][T19927] hub 6-0:1.0: 1 port detected [ 1547.397299][ T1089] bond0 (unregistering): Released all slaves [ 1547.402736][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1547.409659][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1547.599663][T19925] sit0: left promiscuous mode [ 1547.644948][ T9322] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1547.762004][T19734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1547.826770][T19734] 8021q: adding VLAN 0 to HW filter on device team0 [ 1547.902904][T17784] bridge0: port 1(bridge_slave_0) entered blocking state [ 1547.910138][T17784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1547.928309][T17784] bridge0: port 2(bridge_slave_1) entered blocking state [ 1547.935522][T17784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1548.071094][T19734] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1548.244944][T17344] usb 9-1: new high-speed USB device number 71 using dummy_hcd [ 1548.430577][T17344] usb 9-1: Using ep0 maxpacket: 16 [ 1548.444465][T17344] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1548.471887][T17344] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1548.483260][T17344] usb 9-1: config 0 has no interface number 0 [ 1548.493686][T17344] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1548.523463][T17344] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1548.548958][T17344] usb 9-1: Product: syz [ 1548.553175][T17344] usb 9-1: Manufacturer: syz [ 1548.578059][T17344] usb 9-1: SerialNumber: syz [ 1548.584246][T19734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1548.597931][T17344] usb 9-1: config 0 descriptor?? [ 1548.612728][T17344] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1548.628491][T17344] usb 9-1: No valid video chain found. [ 1549.645615][T19960] loop1: detected capacity change from 0 to 8 [ 1550.275848][T19734] veth0_vlan: entered promiscuous mode [ 1550.296124][T19734] veth1_vlan: entered promiscuous mode [ 1550.348837][T19734] veth0_macvtap: entered promiscuous mode [ 1550.363749][T19734] veth1_macvtap: entered promiscuous mode [ 1550.390106][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1550.405045][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.432749][T19734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1550.470017][T19734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1550.514492][T19734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1550.534387][T19734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1550.553598][T19734] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.564515][T19734] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.603484][T19734] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.612607][T19734] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1550.805625][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1550.825479][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1550.832658][T17344] usb 9-1: USB disconnect, device number 71 [ 1551.470141][T17251] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1551.501955][T17251] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1551.749205][T19972] loop1: detected capacity change from 0 to 1024 [ 1552.005825][T19972] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1553.156181][T19989] loop7: detected capacity change from 0 to 512 [ 1553.207934][T19989] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1553.220647][T19989] ext4 filesystem being mounted at /2/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1554.420537][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.454014][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1554.745762][T20001] hub 6-0:1.0: USB hub found [ 1554.750806][T20001] hub 6-0:1.0: 1 port detected [ 1555.939262][T20006] loop7: detected capacity change from 0 to 8 [ 1558.255428][T20020] hub 6-0:1.0: USB hub found [ 1558.260454][T20020] hub 6-0:1.0: 1 port detected [ 1558.549480][ T9322] syz_tun (unregistering): left allmulticast mode [ 1558.625730][T16287] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1558.645855][T16287] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1558.660290][T16287] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1558.674136][T16287] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1558.697734][T16287] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 1558.705766][T16287] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1559.744340][T20031] loop8: detected capacity change from 0 to 512 [ 1559.810002][T20031] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1559.822733][T20031] ext4 filesystem being mounted at /582/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1560.725040][T20021] chnl_net:caif_netlink_parms(): no params data found [ 1560.755876][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1560.819246][T16287] Bluetooth: hci0: command tx timeout [ 1561.108306][T20021] bridge0: port 1(bridge_slave_0) entered blocking state [ 1561.115484][T20021] bridge0: port 1(bridge_slave_0) entered disabled state [ 1561.157897][T20021] bridge_slave_0: entered allmulticast mode [ 1561.165211][T20021] bridge_slave_0: entered promiscuous mode [ 1561.209175][T17784] tipc: Left network mode [ 1561.217187][T20021] bridge0: port 2(bridge_slave_1) entered blocking state [ 1561.224525][T20021] bridge0: port 2(bridge_slave_1) entered disabled state [ 1561.273658][T20021] bridge_slave_1: entered allmulticast mode [ 1561.283937][T20021] bridge_slave_1: entered promiscuous mode [ 1561.529596][T20021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1561.595501][T20021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1561.757844][T20021] team0: Port device team_slave_0 added [ 1561.847725][T20021] team0: Port device team_slave_1 added [ 1561.876346][ T5850] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 1562.049781][T20021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1562.066499][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.076451][ T5850] usb 2-1: Using ep0 maxpacket: 16 [ 1562.123565][T20021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1562.158067][ T5850] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1562.186781][ T5850] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1562.212618][T20021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1562.225722][ T5850] usb 2-1: config 0 has no interface number 0 [ 1562.249470][ T5850] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1562.266779][ T5850] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1562.274820][ T5850] usb 2-1: Product: syz [ 1562.279229][T20021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1562.326619][ T5850] usb 2-1: Manufacturer: syz [ 1562.331268][ T5850] usb 2-1: SerialNumber: syz [ 1562.351842][T20021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1562.356890][ T5850] usb 2-1: config 0 descriptor?? [ 1562.400284][ T5850] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1562.409192][ T5850] usb 2-1: No valid video chain found. [ 1563.016313][T16287] Bluetooth: hci0: command tx timeout [ 1563.312508][T20021] hsr_slave_0: entered promiscuous mode [ 1563.446571][T20021] hsr_slave_1: entered promiscuous mode [ 1563.475766][T20021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1563.501308][T20021] Cannot create hsr debugfs directory [ 1565.076523][T16287] Bluetooth: hci0: command tx timeout [ 1565.152472][ T27] usb 2-1: USB disconnect, device number 51 [ 1566.216506][T17784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1566.232539][T17784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1566.287129][T17784] bridge_slave_1: left allmulticast mode [ 1566.293000][T17784] bridge0: port 2(bridge_slave_1) entered disabled state [ 1566.941460][T17784] bridge_slave_0: left allmulticast mode [ 1566.961627][T17784] bridge0: port 1(bridge_slave_0) entered disabled state [ 1567.136515][T16287] Bluetooth: hci0: command tx timeout [ 1567.808088][T20097] loop7: detected capacity change from 0 to 512 [ 1567.904276][T20097] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1567.919366][T20097] ext4 filesystem being mounted at /9/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1569.436970][T20115] loop8: detected capacity change from 0 to 1024 [ 1569.495923][T20115] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1569.532367][T20118] hub 6-0:1.0: USB hub found [ 1569.537544][T20118] hub 6-0:1.0: 1 port detected [ 1569.806898][T17784] team0 (unregistering): Port device team_slave_1 removed [ 1569.874475][T17784] team0 (unregistering): Port device team_slave_0 removed [ 1569.932135][T17784] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1569.990704][T17784] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1570.314794][T17784] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 1570.348891][T20121] loop1: detected capacity change from 0 to 1024 [ 1570.395056][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1570.401260][T20121] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1571.524968][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1571.791937][T17784] bond0 (unregistering): Released all slaves [ 1572.338161][ T9] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 1572.599916][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1573.239571][ T9] usb 2-1: Using ep0 maxpacket: 16 [ 1573.374582][ T9] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1573.485208][ T9] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1573.595475][ T9] usb 2-1: config 0 has no interface number 0 [ 1573.746689][ T9] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1573.820592][ T9] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1573.850038][ T9] usb 2-1: Product: syz [ 1573.854416][ T9] usb 2-1: Manufacturer: syz [ 1573.864221][ T9] usb 2-1: SerialNumber: syz [ 1573.887424][ T9] usb 2-1: config 0 descriptor?? [ 1574.001154][ T9] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1574.022078][ T9] usb 2-1: No valid video chain found. [ 1574.731665][ T8] usb 2-1: USB disconnect, device number 52 [ 1576.270185][T20021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 1576.377230][T20021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 1576.632470][T20021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 1577.108171][T20021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 1578.840811][T20190] loop7: detected capacity change from 0 to 1024 [ 1578.900584][T20190] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1579.172127][T20021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1579.190419][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1579.285881][T20021] 8021q: adding VLAN 0 to HW filter on device team0 [ 1579.359101][T17251] bridge0: port 1(bridge_slave_0) entered blocking state [ 1579.366377][T17251] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1579.392875][T17251] bridge0: port 2(bridge_slave_1) entered blocking state [ 1579.400123][T17251] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1579.532330][T20201] loop7: detected capacity change from 0 to 512 [ 1579.623559][T20201] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1579.636475][T20201] ext4 filesystem being mounted at /15/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1580.531691][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1580.882068][T20021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1581.096511][ T8] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1581.269558][T20228] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3262'. [ 1581.281377][T20228] loop1: detected capacity change from 0 to 8 [ 1581.288806][T20228] squashfs: Unknown parameter '' [ 1581.336534][ T8] usb 8-1: Using ep0 maxpacket: 16 [ 1581.349274][ T8] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1581.372113][ T8] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1581.415820][ T8] usb 8-1: config 0 has no interface number 0 [ 1581.443868][ T8] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1581.474043][ T8] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1581.536529][ T8] usb 8-1: Product: syz [ 1581.550665][ T8] usb 8-1: Manufacturer: syz [ 1581.567764][ T8] usb 8-1: SerialNumber: syz [ 1581.592429][ T8] usb 8-1: config 0 descriptor?? [ 1581.611093][ T8] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 1581.625559][ T8] usb 8-1: No valid video chain found. [ 1581.830737][T20021] veth0_vlan: entered promiscuous mode [ 1581.855176][T20021] veth1_vlan: entered promiscuous mode [ 1581.968888][T20021] veth0_macvtap: entered promiscuous mode [ 1582.025631][T20021] veth1_macvtap: entered promiscuous mode [ 1582.103238][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1582.146429][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.176627][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1582.198483][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.240606][T20021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1582.295535][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.350221][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.377304][T20021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1582.408164][T20021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1582.444138][T20021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1582.490138][T20021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.535363][T20021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.570466][T20021] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.604880][T20021] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1582.662374][T20247] hub 6-0:1.0: USB hub found [ 1582.667550][T20247] hub 6-0:1.0: 1 port detected [ 1582.854633][T17784] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1582.896740][T17784] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.012774][T17336] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1583.066326][T17336] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1583.623507][T20264] hub 6-0:1.0: USB hub found [ 1583.632478][T20264] hub 6-0:1.0: 1 port detected [ 1584.178830][T20267] hub 6-0:1.0: USB hub found [ 1584.326333][T20267] hub 6-0:1.0: 1 port detected [ 1584.450231][T20138] usb 8-1: USB disconnect, device number 54 [ 1584.651155][T20275] loop8: detected capacity change from 0 to 512 [ 1584.814576][T20275] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1584.829235][T20275] ext4 filesystem being mounted at /594/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1586.202717][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1587.319993][T20302] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3270'. [ 1587.331674][T20302] loop8: detected capacity change from 0 to 8 [ 1587.338975][T20302] squashfs: Unknown parameter '€' [ 1588.440613][T20315] hub 6-0:1.0: USB hub found [ 1588.446494][T20315] hub 6-0:1.0: 1 port detected [ 1590.378992][ T23] usb 7-1: new high-speed USB device number 71 using dummy_hcd [ 1590.474844][T20329] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3273'. [ 1590.487078][T20329] loop8: detected capacity change from 0 to 8 [ 1590.494064][T20329] squashfs: Unknown parameter '' [ 1590.504738][T20331] hub 6-0:1.0: USB hub found [ 1590.510256][T20331] hub 6-0:1.0: 1 port detected [ 1590.767814][ T23] usb 7-1: Using ep0 maxpacket: 16 [ 1590.807794][ T23] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1591.399979][ T23] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1591.439944][ T23] usb 7-1: config 0 has no interface number 0 [ 1591.452693][ T23] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1591.475827][ T23] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1591.542876][ T23] usb 7-1: Product: syz [ 1591.576305][ T23] usb 7-1: Manufacturer: syz [ 1591.586534][ T23] usb 7-1: SerialNumber: syz [ 1591.612559][ T23] usb 7-1: config 0 descriptor?? [ 1591.633443][T20341] loop1: detected capacity change from 0 to 512 [ 1591.658293][ T23] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1591.682496][ T23] usb 7-1: No valid video chain found. [ 1591.712495][T20341] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1591.725168][T20341] ext4 filesystem being mounted at /322/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1592.642802][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1592.674282][ T9] usb 7-1: USB disconnect, device number 71 [ 1593.059202][T20364] hub 6-0:1.0: USB hub found [ 1593.064803][T20364] hub 6-0:1.0: 1 port detected [ 1595.635466][T20382] hub 6-0:1.0: USB hub found [ 1595.641359][T20382] hub 6-0:1.0: 1 port detected [ 1595.671069][T20380] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3282'. [ 1595.684123][T20380] loop1: detected capacity change from 0 to 8 [ 1595.691077][T20380] squashfs: Unknown parameter '€' [ 1596.548543][T20388] hub 6-0:1.0: USB hub found [ 1596.553465][T20388] hub 6-0:1.0: 1 port detected [ 1598.320594][T20395] loop8: detected capacity change from 0 to 512 [ 1599.200954][T20395] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1599.214211][T20395] ext4 filesystem being mounted at /598/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1599.698908][T20411] loop1: detected capacity change from 0 to 8 [ 1599.971573][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1600.087647][T20138] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1600.398413][T20138] usb 8-1: Using ep0 maxpacket: 16 [ 1600.686150][T20138] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1600.748625][T20138] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1600.768364][T20138] usb 8-1: config 0 has no interface number 0 [ 1600.801143][T20138] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1600.823851][T20138] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1600.864088][T20138] usb 8-1: Product: syz [ 1600.864213][T20417] loop8: detected capacity change from 0 to 512 [ 1600.885125][T20138] usb 8-1: Manufacturer: syz [ 1600.890160][T20138] usb 8-1: SerialNumber: syz [ 1600.900044][T20417] EXT4-fs (loop8): encrypted files will use data=ordered instead of data journaling mode [ 1600.900405][T20138] usb 8-1: config 0 descriptor?? [ 1600.932211][T20138] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 1600.933190][T20417] EXT4-fs (loop8): 1 truncate cleaned up [ 1600.956208][T20417] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1600.957432][T20138] usb 8-1: No valid video chain found. [ 1601.211154][T20421] hub 6-0:1.0: USB hub found [ 1601.216075][T20421] hub 6-0:1.0: 1 port detected [ 1601.885241][ T9916] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1602.785351][T20432] hub 6-0:1.0: USB hub found [ 1602.790932][T20432] hub 6-0:1.0: 1 port detected [ 1603.679763][T20138] usb 8-1: USB disconnect, device number 55 [ 1603.721737][T20437] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3297'. [ 1603.733554][T20437] loop6: detected capacity change from 0 to 8 [ 1603.740656][T20437] squashfs: Unknown parameter '€' [ 1603.911113][T17980] I/O error, dev loop6, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1605.490597][T18756] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1605.502301][T18756] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1605.512831][T18756] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1605.526730][T18756] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1605.534783][T18756] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1605.564732][T18756] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1605.820890][T20456] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3301'. [ 1605.847282][T20456] loop1: detected capacity change from 0 to 8 [ 1605.854176][T20456] squashfs: Unknown parameter '€' [ 1605.911533][T20459] loop6: detected capacity change from 0 to 1024 [ 1605.929457][T17980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1605.960582][T20461] loop7: detected capacity change from 0 to 8 [ 1605.991544][T20459] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1605.995158][ T9916] syz_tun (unregistering): left allmulticast mode [ 1606.013079][ T9916] bridge0: port 3(syz_tun) entered disabled state [ 1606.030897][T20459] fuse: Bad value for 'fd' [ 1606.312511][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1606.933284][T20471] hub 6-0:1.0: USB hub found [ 1606.943439][T20471] hub 6-0:1.0: 1 port detected [ 1606.998000][T20473] loop1: detected capacity change from 0 to 8 [ 1607.030881][T20454] chnl_net:caif_netlink_parms(): no params data found [ 1607.667225][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1607.675683][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1607.856529][T16287] Bluetooth: hci3: command tx timeout [ 1608.433089][T20454] bridge0: port 1(bridge_slave_0) entered blocking state [ 1608.441678][T20454] bridge0: port 1(bridge_slave_0) entered disabled state [ 1608.449340][T20454] bridge_slave_0: entered allmulticast mode [ 1608.459406][T20454] bridge_slave_0: entered promiscuous mode [ 1608.468555][T20454] bridge0: port 2(bridge_slave_1) entered blocking state [ 1608.475941][T20454] bridge0: port 2(bridge_slave_1) entered disabled state [ 1608.483217][T20454] bridge_slave_1: entered allmulticast mode [ 1608.490916][T20454] bridge_slave_1: entered promiscuous mode [ 1608.530149][T20454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1608.558257][T20454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1608.601740][T20454] team0: Port device team_slave_0 added [ 1608.614990][T20454] team0: Port device team_slave_1 added [ 1608.866723][ T23] usb 8-1: new high-speed USB device number 56 using dummy_hcd [ 1609.180038][ T23] usb 8-1: Using ep0 maxpacket: 16 [ 1609.248682][ T23] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1609.257843][ T23] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1609.268631][ T23] usb 8-1: config 0 has no interface number 0 [ 1609.287750][ T23] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1609.305675][ T23] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1609.314364][ T23] usb 8-1: Product: syz [ 1609.324373][ T23] usb 8-1: Manufacturer: syz [ 1609.329801][ T23] usb 8-1: SerialNumber: syz [ 1609.366487][T20454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1609.373470][T20454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.412251][T20454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1609.434507][ T23] usb 8-1: config 0 descriptor?? [ 1609.448711][ T23] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 1609.470058][T20454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1609.477845][ T23] usb 8-1: No valid video chain found. [ 1609.496556][T20454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1609.565950][T20454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1610.036426][T16287] Bluetooth: hci3: command tx timeout [ 1610.341043][T20454] hsr_slave_0: entered promiscuous mode [ 1610.347399][T20454] hsr_slave_1: entered promiscuous mode [ 1611.628528][T20508] loop6: detected capacity change from 0 to 1024 [ 1611.872075][T20508] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1612.115310][T16287] Bluetooth: hci3: command tx timeout [ 1612.753028][T20249] usb 8-1: USB disconnect, device number 56 [ 1612.761095][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1614.204509][T16287] Bluetooth: hci3: command tx timeout [ 1617.371462][T20454] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 1617.429571][T20454] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 1617.456172][T20554] loop7: detected capacity change from 0 to 1024 [ 1617.472274][T20454] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 1617.508602][T20556] hub 6-0:1.0: USB hub found [ 1617.513504][T20556] hub 6-0:1.0: 1 port detected [ 1617.548360][T20454] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 1617.575606][T20554] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1617.927112][T20454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1617.948433][T20454] 8021q: adding VLAN 0 to HW filter on device team0 [ 1617.969125][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 1617.976351][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1618.264027][T17336] bridge0: port 2(bridge_slave_1) entered blocking state [ 1618.271707][T17336] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1618.684920][T20454] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 1618.696009][T20454] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 1618.751241][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1619.029255][T20454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1619.366992][T17344] usb 7-1: new high-speed USB device number 72 using dummy_hcd [ 1619.586496][T17344] usb 7-1: Using ep0 maxpacket: 16 [ 1619.681049][T17344] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1619.826915][T17344] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1619.847320][T17344] usb 7-1: config 0 has no interface number 0 [ 1619.910367][T17344] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1619.947311][T17344] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1619.955352][T17344] usb 7-1: Product: syz [ 1620.000137][T17344] usb 7-1: Manufacturer: syz [ 1620.004784][T17344] usb 7-1: SerialNumber: syz [ 1620.038494][T17344] usb 7-1: config 0 descriptor?? [ 1620.080781][T20454] veth0_vlan: entered promiscuous mode [ 1620.091876][T17344] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1620.118622][T17344] usb 7-1: No valid video chain found. [ 1620.197889][T20454] veth1_vlan: entered promiscuous mode [ 1621.265977][T20454] veth0_macvtap: entered promiscuous mode [ 1621.312293][T20454] veth1_macvtap: entered promiscuous mode [ 1621.400630][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.044334][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.054828][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.065545][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.084809][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1622.133707][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1622.298295][T20454] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1623.445191][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.467328][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.477477][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.488376][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.503874][T20454] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1623.514402][T20454] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1623.527888][T20454] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1623.580900][T20454] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.616875][T20454] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.625622][T20454] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.670956][T20454] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1623.834333][T20614] loop7: detected capacity change from 0 to 1024 [ 1623.943893][T20614] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1623.967241][ T48] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1623.975303][ T48] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.106900][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1624.126652][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1624.531306][T20249] usb 7-1: USB disconnect, device number 72 [ 1626.647480][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1627.092460][T20648] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3337'. [ 1627.123426][T20648] loop8: detected capacity change from 0 to 8 [ 1627.728769][T20648] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1627.739757][T20648] SQUASHFS error: Failed to read block 0x9b: -5 [ 1627.746051][T20648] SQUASHFS error: Unable to read metadata cache entry [99] [ 1627.753810][T20648] SQUASHFS error: Unable to read inode 0x127 [ 1631.548948][T20679] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3347'. [ 1631.560648][T20679] loop7: detected capacity change from 0 to 8 [ 1631.687493][T20679] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1631.695486][T20679] SQUASHFS error: Failed to read block 0x9b: -5 [ 1631.701808][T20679] SQUASHFS error: Unable to read metadata cache entry [99] [ 1631.709062][T20679] SQUASHFS error: Unable to read inode 0x127 [ 1631.812426][T20683] loop8: detected capacity change from 0 to 8 [ 1631.827783][T20683] squashfs: Unknown parameter '' [ 1632.894215][T20690] loop7: detected capacity change from 0 to 8 [ 1632.930803][T20689] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1632.946306][T20689] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3350'. [ 1632.974919][T20689] loop1: detected capacity change from 0 to 8 [ 1633.000569][T20690] squashfs: Unknown parameter '' [ 1633.234942][T20689] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1633.243355][T20689] SQUASHFS error: Failed to read block 0x9b: -5 [ 1633.249900][T20689] SQUASHFS error: Unable to read metadata cache entry [99] [ 1633.257325][T20689] SQUASHFS error: Unable to read inode 0x127 [ 1633.322508][T20692] loop8: detected capacity change from 0 to 512 [ 1633.330782][T20692] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1633.489030][T20692] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3351: casefold flag without casefold feature [ 1633.600084][T20692] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3351: couldn't read orphan inode 15 (err -117) [ 1633.618207][T20692] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1633.913355][T20700] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1633.924559][T20700] netlink: 144 bytes leftover after parsing attributes in process `syz.7.3352'. [ 1633.936013][T20700] loop7: detected capacity change from 0 to 8 [ 1634.132210][T20701] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3351'. [ 1634.422183][T20704] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3353'. [ 1634.434196][T20704] loop1: detected capacity change from 0 to 8 [ 1634.442033][T20704] squashfs: Unknown parameter '' [ 1634.589065][T20700] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1634.597498][T20700] SQUASHFS error: Failed to read block 0x9b: -5 [ 1634.603837][T20700] SQUASHFS error: Unable to read metadata cache entry [99] [ 1634.611216][T20700] SQUASHFS error: Unable to read inode 0x127 [ 1634.642261][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1634.693828][T18918] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1635.145108][T20710] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3354'. [ 1635.157450][T20710] loop8: detected capacity change from 0 to 8 [ 1635.214291][T20710] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1635.222336][T20710] SQUASHFS error: Failed to read block 0x9b: -5 [ 1635.228766][T20710] SQUASHFS error: Unable to read metadata cache entry [99] [ 1635.236265][T20710] SQUASHFS error: Unable to read inode 0x127 [ 1636.454789][T20714] loop6: detected capacity change from 0 to 40427 [ 1636.477362][T20714] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1636.484848][T20714] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1636.508703][T20714] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1639.103141][T20733] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3360'. [ 1639.415166][T20744] loop1: detected capacity change from 0 to 8 [ 1639.425489][T20744] squashfs: Unknown parameter '' [ 1640.083783][T17980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1640.541496][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3363'. [ 1640.552360][T20747] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3363'. [ 1640.563914][T20747] loop6: detected capacity change from 0 to 8 [ 1640.580519][T20747] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1640.588717][T20747] SQUASHFS error: Failed to read block 0x9b: -5 [ 1640.594976][T20747] SQUASHFS error: Unable to read metadata cache entry [99] [ 1640.602289][T20747] SQUASHFS error: Unable to read inode 0x127 [ 1640.804798][T20752] netlink: 144 bytes leftover after parsing attributes in process `syz.8.3364'. [ 1640.831887][T20752] loop8: detected capacity change from 0 to 8 [ 1640.848538][T20752] squashfs: Unknown parameter '' [ 1641.748552][T20758] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1641.759621][T20758] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3365'. [ 1641.771318][T20758] loop1: detected capacity change from 0 to 8 [ 1641.807561][T20758] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1641.816139][T20758] SQUASHFS error: Failed to read block 0x9b: -5 [ 1641.822571][T20758] SQUASHFS error: Unable to read metadata cache entry [99] [ 1641.829969][T20758] SQUASHFS error: Unable to read inode 0x127 [ 1641.893348][T17980] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1642.053410][T20761] loop6: detected capacity change from 0 to 8 [ 1642.070287][T20761] squashfs: Unknown parameter '' [ 1643.185486][T20770] loop7: detected capacity change from 0 to 512 [ 1643.203552][T20770] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1643.234957][T20770] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3362: casefold flag without casefold feature [ 1643.286795][T20770] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3362: couldn't read orphan inode 15 (err -117) [ 1643.300260][T20770] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1643.590470][T20775] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3362'. [ 1644.201938][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1644.362229][T20780] loop8: detected capacity change from 0 to 512 [ 1644.383782][T20780] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1644.592645][T20780] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3373: casefold flag without casefold feature [ 1644.664542][T20786] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1644.678149][T20786] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3372'. [ 1644.695323][T20786] loop6: detected capacity change from 0 to 8 [ 1644.960924][T20786] squashfs: Unknown parameter '' [ 1645.135772][T20780] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3373: couldn't read orphan inode 15 (err -117) [ 1645.174308][T20780] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1646.279437][T20795] netlink: 144 bytes leftover after parsing attributes in process `syz.1.3383'. [ 1646.291359][T20795] loop1: detected capacity change from 0 to 8 [ 1646.308205][T20795] SQUASHFS error: zlib decompression failed, data probably corrupt [ 1646.316683][T20795] SQUASHFS error: Failed to read block 0x9b: -5 [ 1646.322932][T20795] SQUASHFS error: Unable to read metadata cache entry [99] [ 1646.330294][T20795] SQUASHFS error: Unable to read inode 0x127 [ 1646.401945][T20796] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3373'. [ 1646.723084][T17984] I/O error, dev loop1, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1647.319468][T20804] loop6: detected capacity change from 0 to 8 [ 1647.388812][T20804] squashfs: Unknown parameter '' [ 1648.890544][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1649.117018][T20809] loop1: detected capacity change from 0 to 40427 [ 1649.132452][T20809] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1649.139537][T20809] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1649.149526][T20809] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1649.704553][T20814] netlink: 144 bytes leftover after parsing attributes in process `syz.6.3376'. [ 1649.730194][T20814] loop6: detected capacity change from 0 to 8 [ 1649.745421][T20814] squashfs: Unknown parameter '' [ 1651.064973][T20821] loop1: detected capacity change from 0 to 512 [ 1651.105188][T20821] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1651.305598][T20821] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3380: casefold flag without casefold feature [ 1651.375041][T20821] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3380: couldn't read orphan inode 15 (err -117) [ 1651.424399][T20821] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1651.451383][T20828] loop8: detected capacity change from 0 to 8 [ 1652.148838][T20833] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3380'. [ 1652.620580][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1653.148222][T20840] loop6: detected capacity change from 0 to 512 [ 1653.237942][T20839] loop1: detected capacity change from 0 to 40427 [ 1653.262611][T20844] loop7: detected capacity change from 0 to 8 [ 1653.353297][T20844] squashfs: Unknown parameter '' [ 1653.601072][T20839] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1653.608227][T20839] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1653.618627][T20839] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1653.637803][T20840] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1653.734070][T20842] loop8: detected capacity change from 0 to 40427 [ 1653.808316][T17984] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1653.837569][T20842] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1653.844685][T20842] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1653.861250][T20842] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1653.948023][T20840] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3387: casefold flag without casefold feature [ 1654.031102][T20840] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3387: couldn't read orphan inode 15 (err -117) [ 1654.157146][T20840] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1654.868400][T20854] netlink: 28 bytes leftover after parsing attributes in process `syz.6.3387'. [ 1655.784809][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1656.518250][T20861] loop7: detected capacity change from 0 to 40427 [ 1657.116419][T20861] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1657.123433][T20861] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1657.132350][T20861] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1659.174537][T20874] loop1: detected capacity change from 0 to 40427 [ 1659.197365][T20874] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1659.204344][T20874] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1659.212971][T20874] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1659.263663][T20877] loop8: detected capacity change from 0 to 512 [ 1659.291104][T20877] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1660.410383][T20877] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3394: casefold flag without casefold feature [ 1660.504515][T20877] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3394: couldn't read orphan inode 15 (err -117) [ 1660.646671][T20877] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1661.471919][T18756] Bluetooth: hci4: command 0x0406 tx timeout [ 1661.869736][T20893] netlink: 28 bytes leftover after parsing attributes in process `syz.8.3394'. [ 1662.207343][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1662.781723][T20900] loop8: detected capacity change from 0 to 40427 [ 1662.866383][T20900] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1662.873402][T20900] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1662.883501][T20900] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1662.932789][T20902] loop1: detected capacity change from 0 to 512 [ 1663.086357][T20902] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1663.992762][T20902] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3400: casefold flag without casefold feature [ 1664.076423][T20902] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3400: couldn't read orphan inode 15 (err -117) [ 1664.191992][T20902] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1664.580659][T20910] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3400'. [ 1664.949474][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1665.317665][T20912] loop8: detected capacity change from 0 to 40427 [ 1665.330453][T20912] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1665.337473][T20912] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1665.347287][T20912] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1665.785952][T20914] loop1: detected capacity change from 0 to 40427 [ 1665.800944][T20914] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1665.807968][T20914] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1665.832586][T20914] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1665.874809][T20916] loop6: detected capacity change from 0 to 8 [ 1665.961654][T17984] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1668.352260][T20928] loop6: detected capacity change from 0 to 40427 [ 1668.372580][T20928] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1668.379664][T20928] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1668.390075][T20927] loop1: detected capacity change from 0 to 512 [ 1668.396489][T20928] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1668.421967][T20927] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1668.610939][T20927] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3406: casefold flag without casefold feature [ 1668.676025][T20927] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3406: couldn't read orphan inode 15 (err -117) [ 1668.780979][T20927] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1669.075344][T20249] usb 9-1: new high-speed USB device number 72 using dummy_hcd [ 1669.519865][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1669.526211][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1670.122112][T20249] usb 9-1: Using ep0 maxpacket: 16 [ 1670.148488][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1670.162012][T20249] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1670.203821][T20249] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1670.280307][T20249] usb 9-1: config 0 has no interface number 0 [ 1670.319711][T20249] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1670.372283][T20249] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1670.424808][T20249] usb 9-1: Product: syz [ 1670.433108][T20249] usb 9-1: Manufacturer: syz [ 1670.441359][T20249] usb 9-1: SerialNumber: syz [ 1670.468889][T20249] usb 9-1: config 0 descriptor?? [ 1670.483414][T20249] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1670.506013][T20249] usb 9-1: No valid video chain found. [ 1671.026579][T20946] loop6: detected capacity change from 0 to 40427 [ 1671.058535][T20948] loop7: detected capacity change from 0 to 40427 [ 1671.066948][T20948] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1671.073892][T20948] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1671.082497][T20948] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1671.126476][T20946] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1671.133515][T20946] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1671.142019][T20946] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1673.092052][T20956] loop7: detected capacity change from 0 to 512 [ 1673.141879][T20956] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1673.639370][T20956] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3412: casefold flag without casefold feature [ 1673.655497][T20956] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3412: couldn't read orphan inode 15 (err -117) [ 1673.681909][T20956] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1674.148550][T20966] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3412'. [ 1674.539019][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1674.861513][T20968] loop6: detected capacity change from 0 to 40427 [ 1674.872384][T20968] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1674.879404][T20968] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1674.895633][T20968] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1676.618708][T20973] loop7: detected capacity change from 0 to 8 [ 1677.776955][ T9781] usb 9-1: USB disconnect, device number 72 [ 1678.643333][T20995] loop7: detected capacity change from 0 to 1024 [ 1678.698731][T20995] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1679.004569][T21000] loop6: detected capacity change from 0 to 40427 [ 1679.041085][T21000] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1679.048178][T21000] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1679.059483][T21000] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1680.137636][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1680.337793][T21006] loop6: detected capacity change from 0 to 40427 [ 1680.349909][T21006] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1680.356919][T21006] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1680.371358][T21006] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1681.914663][T21012] loop6: detected capacity change from 0 to 40427 [ 1681.919577][T21014] loop8: detected capacity change from 0 to 40427 [ 1681.933227][T21012] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1681.940632][T21012] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1681.949356][T21014] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1681.957129][T21014] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1681.965712][T21014] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1681.996431][T21012] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1682.124727][T21018] loop7: detected capacity change from 0 to 8 [ 1682.349638][T17984] I/O error, dev loop8, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1685.408745][T21037] loop1: detected capacity change from 0 to 512 [ 1685.439236][T21037] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1685.548231][ T27] usb 9-1: new high-speed USB device number 73 using dummy_hcd [ 1685.564175][T21037] EXT4-fs error (device loop1): ext4_orphan_get:1399: inode #15: comm syz.1.3421: casefold flag without casefold feature [ 1685.585188][T21037] EXT4-fs error (device loop1): ext4_orphan_get:1404: comm syz.1.3421: couldn't read orphan inode 15 (err -117) [ 1685.604260][T21037] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1686.426328][ T27] usb 9-1: Using ep0 maxpacket: 16 [ 1686.435518][T21043] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3421'. [ 1686.469633][ T27] usb 9-1: config 0 has an invalid interface number: 105 but max is 0 [ 1686.535921][ T27] usb 9-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1686.635598][ T27] usb 9-1: config 0 has no interface number 0 [ 1686.662514][ T27] usb 9-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1686.696832][ T27] usb 9-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1686.733135][ T27] usb 9-1: Product: syz [ 1686.741625][T18756] Bluetooth: hci0: command 0x0406 tx timeout [ 1686.774235][ T27] usb 9-1: Manufacturer: syz [ 1686.795416][ T27] usb 9-1: SerialNumber: syz [ 1686.828409][ T27] usb 9-1: config 0 descriptor?? [ 1686.878133][ T27] usb 9-1: Found UVC 0.00 device syz (046d:08f3) [ 1686.902130][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1686.912707][ T27] usb 9-1: No valid video chain found. [ 1687.631961][T21054] loop6: detected capacity change from 0 to 1024 [ 1687.704435][T21054] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1688.505658][T21062] loop7: detected capacity change from 0 to 40427 [ 1688.610753][T21062] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1688.618020][T21062] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1688.628342][T21062] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1688.754991][T21064] loop1: detected capacity change from 0 to 40427 [ 1688.765226][T21064] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1688.772384][T21064] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1688.787065][T21064] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1688.809541][T17980] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1688.970675][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1691.688322][T17344] usb 9-1: USB disconnect, device number 73 [ 1691.788432][T21081] loop6: detected capacity change from 0 to 8 [ 1693.959363][T21097] loop1: detected capacity change from 0 to 40427 [ 1695.052320][T21097] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1695.059682][T21097] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1695.069324][T21097] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1695.240856][T17980] I/O error, dev loop1, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1695.761683][T21104] loop1: detected capacity change from 0 to 40427 [ 1696.941561][T21104] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1696.948650][T21104] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1696.971724][T21104] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1706.308702][T21166] loop1: detected capacity change from 0 to 8 [ 1709.095231][T21183] loop7: detected capacity change from 0 to 40427 [ 1709.123519][T21183] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1709.130611][T21183] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1709.143518][T21183] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1709.536717][ T8] usb 7-1: new high-speed USB device number 73 using dummy_hcd [ 1709.756414][ T8] usb 7-1: Using ep0 maxpacket: 16 [ 1709.784189][ T8] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1709.843425][ T8] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1709.915850][ T8] usb 7-1: config 0 has no interface number 0 [ 1710.142099][ T8] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1710.173914][ T8] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1710.784758][ T8] usb 7-1: Product: syz [ 1710.824128][ T8] usb 7-1: Manufacturer: syz [ 1710.926385][ T8] usb 7-1: SerialNumber: syz [ 1710.968159][ T8] usb 7-1: config 0 descriptor?? [ 1711.027733][ T8] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1711.053530][ T8] usb 7-1: No valid video chain found. [ 1711.078816][T21198] loop8: detected capacity change from 0 to 512 [ 1711.093893][T21198] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1711.124186][T21198] EXT4-fs error (device loop8): ext4_orphan_get:1399: inode #15: comm syz.8.3470: casefold flag without casefold feature [ 1711.166906][T21198] EXT4-fs error (device loop8): ext4_orphan_get:1404: comm syz.8.3470: couldn't read orphan inode 15 (err -117) [ 1711.324212][T21198] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1712.026893][ T9781] usb 7-1: USB disconnect, device number 73 [ 1712.248251][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1712.690796][T21207] loop8: detected capacity change from 0 to 40427 [ 1712.700395][T21207] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1712.707447][T21207] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1712.717742][T21207] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1713.157298][T21200] loop1: detected capacity change from 0 to 40427 [ 1713.262821][T21200] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1713.307167][T21200] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1713.354489][T21200] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1713.370954][T21214] loop7: detected capacity change from 0 to 40427 [ 1713.387068][T21214] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1713.394080][T21214] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1713.403409][T21214] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1714.662919][T21220] loop7: detected capacity change from 0 to 8 [ 1715.536637][ C0] vkms_vblank_simulate: vblank timer overrun [ 1719.043055][T21237] loop6: detected capacity change from 0 to 512 [ 1719.123343][T21237] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1719.136088][T21237] ext4 filesystem being mounted at /52/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1719.631434][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1719.829669][T21249] loop1: detected capacity change from 0 to 40427 [ 1719.873749][T21249] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1719.880943][T21249] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1719.908991][T21249] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1723.746343][ T27] usb 7-1: new high-speed USB device number 74 using dummy_hcd [ 1723.986675][ T27] usb 7-1: Using ep0 maxpacket: 16 [ 1724.030326][ T27] usb 7-1: config 0 has an invalid interface number: 105 but max is 0 [ 1724.057909][ T27] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1724.088731][ T27] usb 7-1: config 0 has no interface number 0 [ 1724.147759][T21275] loop7: detected capacity change from 0 to 8 [ 1724.369096][T21274] loop8: detected capacity change from 0 to 40427 [ 1724.382318][ T27] usb 7-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1724.395403][T21274] F2FS-fs (loop8): Insane cp_payload (553648128 >= 504) [ 1724.402406][T21274] F2FS-fs (loop8): Can't find valid F2FS filesystem in 1th superblock [ 1724.411153][ T27] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1724.419357][T21274] F2FS-fs (loop8): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1724.437437][ T27] usb 7-1: Product: syz [ 1724.441778][ T27] usb 7-1: Manufacturer: syz [ 1724.446916][ T27] usb 7-1: SerialNumber: syz [ 1724.467473][ T27] usb 7-1: config 0 descriptor?? [ 1724.627985][ T27] usb 7-1: Found UVC 0.00 device syz (046d:08f3) [ 1725.483793][ T27] usb 7-1: No valid video chain found. [ 1725.499815][ T27] usb 7-1: USB disconnect, device number 74 [ 1725.709998][T21281] loop1: detected capacity change from 0 to 512 [ 1725.748160][T21281] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1725.761573][T21281] ext4 filesystem being mounted at /382/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1726.674868][T14415] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1728.746305][ C0] vkms_vblank_simulate: vblank timer overrun [ 1730.478133][T21315] loop6: detected capacity change from 0 to 40427 [ 1730.489337][T21315] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1730.496998][T21315] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1730.505907][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1730.512378][T21315] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1730.532985][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1730.561372][T21320] loop8: detected capacity change from 0 to 512 [ 1730.730911][T21320] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1730.744103][T21320] ext4 filesystem being mounted at /42/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1730.748864][ T9781] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1731.065650][ T9781] usb 8-1: Using ep0 maxpacket: 16 [ 1731.141937][ T9781] usb 8-1: config 0 has an invalid interface number: 105 but max is 0 [ 1731.480261][ T9781] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1731.490840][ T9781] usb 8-1: config 0 has no interface number 0 [ 1731.499918][ T9781] usb 8-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1731.538870][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1731.548113][ T9781] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1731.556126][ T9781] usb 8-1: Product: syz [ 1731.602317][ T9781] usb 8-1: Manufacturer: syz [ 1731.658608][ T9781] usb 8-1: SerialNumber: syz [ 1731.694882][ T9781] usb 8-1: config 0 descriptor?? [ 1731.707674][ T9781] usb 8-1: Found UVC 0.00 device syz (046d:08f3) [ 1731.714101][ T9781] usb 8-1: No valid video chain found. [ 1732.812856][T21333] loop8: detected capacity change from 0 to 8 [ 1733.116928][ T9781] usb 8-1: USB disconnect, device number 57 [ 1735.049937][T21346] loop6: detected capacity change from 0 to 1024 [ 1735.144625][T21346] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1735.409151][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1736.586370][T21359] loop1: detected capacity change from 0 to 40427 [ 1736.635021][T21359] F2FS-fs (loop1): Insane cp_payload (553648128 >= 504) [ 1736.642088][T21359] F2FS-fs (loop1): Can't find valid F2FS filesystem in 1th superblock [ 1736.665386][T21359] F2FS-fs (loop1): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1737.773556][T21366] loop8: detected capacity change from 0 to 512 [ 1737.839328][T21366] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1737.851943][T21366] ext4 filesystem being mounted at /45/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1738.964206][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1740.930675][T21388] loop8: detected capacity change from 0 to 65536 [ 1741.043248][T21388] XFS (loop8): Mounting V5 Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1741.126574][T21388] XFS (loop8): Ending clean mount [ 1741.929090][T21406] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 1741.987532][ T9781] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 1742.119853][T20454] XFS (loop8): Unmounting Filesystem 9b7348e5-2fa0-41a5-9526-c53a678b01f3 [ 1742.836524][ T9781] usb 2-1: Using ep0 maxpacket: 16 [ 1742.852056][ T9781] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1742.904103][ T9781] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1742.934798][ T9781] usb 2-1: config 0 has no interface number 0 [ 1742.958711][ T9781] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1743.004379][ T9781] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1743.020592][ T9781] usb 2-1: Product: syz [ 1743.034411][ T9781] usb 2-1: Manufacturer: syz [ 1743.039641][ T9781] usb 2-1: SerialNumber: syz [ 1743.093977][ T9781] usb 2-1: config 0 descriptor?? [ 1743.112868][ T9781] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1743.139160][ T9781] usb 2-1: No valid video chain found. [ 1744.074433][T21418] loop8: detected capacity change from 0 to 1024 [ 1744.114440][T21418] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1744.351262][T21425] loop6: detected capacity change from 0 to 8 [ 1744.630858][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1745.037452][T21430] loop8: detected capacity change from 0 to 512 [ 1745.092848][T20138] usb 2-1: USB disconnect, device number 53 [ 1745.122204][T21430] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1745.135201][T21430] ext4 filesystem being mounted at /49/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1745.454102][T21435] loop6: detected capacity change from 0 to 512 [ 1745.474565][T21435] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1745.505833][T21435] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3524: casefold flag without casefold feature [ 1745.555010][T21435] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3524: couldn't read orphan inode 15 (err -117) [ 1745.611273][T21435] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1746.175345][T21438] loop7: detected capacity change from 0 to 40427 [ 1746.465743][T21438] F2FS-fs (loop7): Insane cp_payload (553648128 >= 504) [ 1746.472862][T21438] F2FS-fs (loop7): Can't find valid F2FS filesystem in 1th superblock [ 1746.508618][T21438] F2FS-fs (loop7): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1746.552193][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.627672][T17984] I/O error, dev loop7, sector 40192 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1746.742345][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1746.891481][T21445] loop6: detected capacity change from 0 to 512 [ 1746.924055][T21445] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1746.943841][T21445] EXT4-fs error (device loop6): ext4_orphan_get:1399: inode #15: comm syz.6.3526: casefold flag without casefold feature [ 1746.962442][T21445] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3526: couldn't read orphan inode 15 (err -117) [ 1746.983684][T21445] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1748.185554][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1748.397283][ T8] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 1748.518377][T21462] loop8: detected capacity change from 0 to 1024 [ 1748.708963][T21462] EXT4-fs (loop8): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1748.771994][ T8] usb 2-1: Using ep0 maxpacket: 16 [ 1748.946456][T21468] loop6: detected capacity change from 0 to 1764 [ 1749.191800][T21468] loop6: detected capacity change from 0 to 512 [ 1749.201376][T21468] EXT4-fs: inline encryption not supported [ 1749.207377][T21468] EXT4-fs: Ignoring removed mblk_io_submit option [ 1749.264203][ T8] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 1749.436499][ T8] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1749.462961][ T8] usb 2-1: config 0 has no interface number 0 [ 1749.487398][ T8] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 1749.505007][ T8] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1749.513579][ T8] usb 2-1: Product: syz [ 1749.523381][ T8] usb 2-1: Manufacturer: syz [ 1749.528820][ T8] usb 2-1: SerialNumber: syz [ 1749.557737][ T8] usb 2-1: config 0 descriptor?? [ 1749.572663][T20454] EXT4-fs (loop8): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1749.593814][ T8] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 1749.602469][ T8] usb 2-1: No valid video chain found. [ 1749.621018][T21468] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1749.632483][T21468] EXT4-fs (loop6): Test dummy encryption mode enabled [ 1749.668590][T21468] EXT4-fs (loop6): orphan cleanup on readonly fs [ 1749.675596][T21468] EXT4-fs error (device loop6): ext4_orphan_get:1399: comm syz.6.3527: inode #13: comm syz.6.3527: iget: illegal inode # [ 1749.692734][T21468] EXT4-fs error (device loop6): ext4_orphan_get:1404: comm syz.6.3527: couldn't read orphan inode 13 (err -117) [ 1749.709937][T21468] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1750.178845][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1751.833107][T20249] usb 2-1: USB disconnect, device number 54 [ 1753.397565][T21491] loop6: detected capacity change from 0 to 512 [ 1753.449060][T21491] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1753.462190][T21491] ext4 filesystem being mounted at /65/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 1753.545237][T21495] loop7: detected capacity change from 0 to 1764 [ 1753.700979][T17980] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1753.807991][T21495] loop7: detected capacity change from 0 to 512 [ 1753.814757][T17980] I/O error, dev loop7, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 1753.835368][T21495] EXT4-fs: inline encryption not supported [ 1753.843404][T21495] EXT4-fs: Ignoring removed mblk_io_submit option [ 1753.862244][T21495] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 1753.877413][T21495] EXT4-fs (loop7): Test dummy encryption mode enabled [ 1753.891706][T21500] loop8: detected capacity change from 0 to 8 [ 1753.906070][T21495] EXT4-fs (loop7): orphan cleanup on readonly fs [ 1753.943510][T21495] EXT4-fs error (device loop7): ext4_orphan_get:1399: comm syz.7.3536: inode #13: comm syz.7.3536: iget: illegal inode # [ 1754.157463][T21495] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3536: couldn't read orphan inode 13 (err -117) [ 1754.241043][T21495] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 ro without journal. Quota mode: none. [ 1754.419878][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.526813][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1754.725843][T21509] loop7: detected capacity change from 0 to 512 [ 1754.760788][T21509] EXT4-fs: Quota format mount options ignored when QUOTA feature is enabled [ 1754.796077][T21509] EXT4-fs error (device loop7): ext4_orphan_get:1399: inode #15: comm syz.7.3537: casefold flag without casefold feature [ 1754.834912][T21509] EXT4-fs error (device loop7): ext4_orphan_get:1404: comm syz.7.3537: couldn't read orphan inode 15 (err -117) [ 1754.850626][T21515] loop6: detected capacity change from 0 to 1024 [ 1754.886140][T21509] EXT4-fs (loop7): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 1754.941881][T21515] EXT4-fs (loop6): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 1755.209417][T21522] netlink: 28 bytes leftover after parsing attributes in process `syz.7.3537'. [ 1755.714641][T20021] EXT4-fs (loop6): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.744943][T19734] EXT4-fs (loop7): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 1755.950895][T21525] ksmbd: Unknown IPC event: 6, ignore. [ 1756.128016][T21527] loop6: detected capacity change from 0 to 40427 [ 1756.136327][T21527] F2FS-fs (loop6): Insane cp_payload (553648128 >= 504) [ 1756.143338][T21527] F2FS-fs (loop6): Can't find valid F2FS filesystem in 1th superblock [ 1756.156967][T21527] F2FS-fs (loop6): Unrecognized mount option "ÏÝÙž¼?c¦Yõ—tð·rÉ7X•¼Ò7ÐÄ—æÖ}·Ÿªë%" or missing value [ 1757.050004][T21537] netlink: 32 bytes leftover after parsing attributes in process `syz.7.3545'. [ 1757.489910][T21543] netlink: 'syz.6.3549': attribute type 10 has an invalid length. [ 1757.563196][T21543] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1758.088192][T21569] tipc: Started in network mode [ 1758.115164][T21569] tipc: Node identity c, cluster identity 4711 [ 1758.122858][T21569] tipc: Node number set to 12 [ 1758.284556][T21574] tipc: Started in network mode [ 1758.296195][T21574] tipc: Node identity be7c5ff2cd46, cluster identity 4711 [ 1758.312901][T21574] tipc: Enabled bearer , priority 0 [ 1758.330204][T21574] syzkaller0: entered promiscuous mode [ 1758.342277][T21574] syzkaller0: entered allmulticast mode [ 1758.485819][T21581] tipc: Resetting bearer [ 1758.520578][T21573] tipc: Resetting bearer [ 1758.640490][T21585] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 1758.647843][T19620] IPVS: starting estimator thread 0... [ 1758.661205][T21573] tipc: Disabling bearer [ 1758.767038][T21592] netdevsim netdevsim6 netdevsim0: entered promiscuous mode [ 1758.776449][T21589] IPVS: using max 25 ests per chain, 60000 per kthread [ 1759.068433][T21604] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3574'. [ 1759.086069][T21608] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3577'. [ 1759.136053][T21608] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3577'. [ 1759.281181][T21610] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3578'. [ 1759.355528][T21610] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1759.470741][T21614] bond1: (slave veth3): Enslaving as an active interface with an up link [ 1759.493700][T21619] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 1759.503624][T21619] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 1759.527428][T21626] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3581'. [ 1759.551886][T21618] tipc: Started in network mode [ 1759.560719][T21618] tipc: Node identity 0ad06dc9a882, cluster identity 4711 [ 1759.579127][T21618] tipc: Enabled bearer , priority 0 [ 1759.661156][T21624] syzkaller0: entered promiscuous mode [ 1759.667352][T21624] syzkaller0: entered allmulticast mode [ 1759.673502][T21624] tipc: Resetting bearer [ 1759.697435][T21615] tipc: Resetting bearer [ 1759.816680][ T23] IPVS: starting estimator thread 0... [ 1759.921214][T21635] IPVS: using max 21 ests per chain, 50400 per kthread [ 1760.708963][T20138] tipc: Node number set to 2723311049 [ 1760.742332][T21643] IPVS: wlc: UDP 224.0.0.2:0 - no destination available [ 1760.742616][T19620] IPVS: starting estimator thread 0... [ 1760.836372][T21645] IPVS: using max 19 ests per chain, 45600 per kthread [ 1761.005845][T21649] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3593'. [ 1762.677239][T21615] tipc: Disabling bearer [ 1763.109542][T21664] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3599'. [ 1764.139702][T21706] netlink: 'syz.8.3615': attribute type 4 has an invalid length. [ 1764.537577][T21720] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3619'. [ 1764.769766][T21727] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3624'. [ 1764.780296][T21727] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3624'. [ 1765.442808][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ef99800: rx timeout, send abort [ 1765.455398][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ef99800: 0x3ff02: (3) A timeout occurred and this is the connection abort to close the session. [ 1765.470420][ C0] vcan0: j1939_tp_rxtimer: 0xffff88801ef99000: rx timeout, send abort [ 1765.479609][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff88801ef99000: 0x3fe01: (3) A timeout occurred and this is the connection abort to close the session. [ 1765.576814][T21753] smc: net device bond0 applied user defined pnetid SYZ2 [ 1765.602181][T21753] smc: net device bond0 erased user defined pnetid SYZ2 [ 1766.159791][T21765] team0 (unregistering): Port device team_slave_0 removed [ 1766.178973][T21765] team0 (unregistering): Port device team_slave_1 removed [ 1766.392579][T21781] netlink: 'syz.7.3647': attribute type 3 has an invalid length. [ 1766.888960][T21797] tipc: Enabled bearer , priority 0 [ 1766.906771][T21797] syzkaller0: entered promiscuous mode [ 1766.916303][T21797] syzkaller0: entered allmulticast mode [ 1767.001329][T21797] tipc: Resetting bearer [ 1767.038736][T21796] tipc: Resetting bearer [ 1767.133936][T21796] tipc: Disabling bearer [ 1767.389638][T21812] tipc: Enabled bearer , priority 0 [ 1767.502030][T21812] syzkaller0: entered promiscuous mode [ 1767.516322][T21812] syzkaller0: entered allmulticast mode [ 1767.522595][T21812] tipc: Resetting bearer [ 1767.614271][T21811] tipc: Resetting bearer [ 1770.799030][T21811] tipc: Disabling bearer [ 1770.855633][T21838] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3670'. [ 1770.884665][T21839] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3670'. [ 1771.589327][T21873] tipc: Enabled bearer , priority 0 [ 1771.659643][T21873] syzkaller0: entered promiscuous mode [ 1771.665303][T21873] syzkaller0: entered allmulticast mode [ 1771.671975][T21873] tipc: Resetting bearer [ 1771.784910][T21872] tipc: Resetting bearer [ 1772.639297][T19620] tipc: Node number set to 1933205490 [ 1774.559692][T21872] tipc: Disabling bearer [ 1775.089343][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1775.113546][T21916] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3700'. [ 1775.186149][T21918] warning: `syz.1.3701' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 1775.201799][T21920] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1775.252189][T21920] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3702'. [ 1775.858527][T21942] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3711'. [ 1776.047519][T21951] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1776.473585][T21951] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3714'. [ 1776.850673][T21972] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3723'. [ 1777.452032][T21990] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1777.478922][T21990] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3731'. [ 1777.747378][T21999] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3734'. [ 1777.918919][T22006] tipc: Enabled bearer , priority 0 [ 1777.961581][T22005] tipc: Disabling bearer [ 1778.307389][T22019] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3745'. [ 1778.331896][T22019] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3745'. [ 1778.581482][T22032] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3751'. [ 1778.739808][T22034] tipc: Enabled bearer , priority 0 [ 1778.760162][T22033] tipc: Disabling bearer [ 1778.877459][T22040] netlink: 'syz.1.3756': attribute type 10 has an invalid length. [ 1778.901772][T22040] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1779.452309][T22063] tipc: Enabled bearer , priority 0 [ 1779.465122][T22061] tipc: Disabling bearer [ 1779.986769][T22081] netlink: 'syz.8.3773': attribute type 10 has an invalid length. [ 1780.013504][T22081] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1780.374219][T22092] tipc: Enabled bearer , priority 0 [ 1780.564983][T22092] syzkaller0: entered promiscuous mode [ 1780.602902][T22092] syzkaller0: entered allmulticast mode [ 1780.624383][T22092] tipc: Resetting bearer [ 1780.661233][T22090] tipc: Resetting bearer [ 1783.511850][T22090] tipc: Disabling bearer [ 1783.538395][T22107] __nla_validate_parse: 6 callbacks suppressed [ 1783.538411][T22107] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3785'. [ 1783.554676][T22109] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3786'. [ 1783.585348][T22112] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3785'. [ 1783.753554][T22124] netlink: 'syz.1.3789': attribute type 10 has an invalid length. [ 1784.199734][T22139] tipc: Enabled bearer , priority 0 [ 1784.279169][T22139] syzkaller0: entered promiscuous mode [ 1784.289257][T22139] syzkaller0: entered allmulticast mode [ 1784.304612][T22139] tipc: Resetting bearer [ 1784.322744][T22138] tipc: Resetting bearer [ 1787.059948][T22138] tipc: Disabling bearer [ 1787.078163][T22146] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3799'. [ 1787.289261][T22164] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1787.322269][T22164] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3802'. [ 1787.599169][T22173] netlink: 'syz.8.3807': attribute type 10 has an invalid length. [ 1787.819228][T22184] tipc: Started in network mode [ 1787.824194][T22184] tipc: Node identity 22d5d9b05ef5, cluster identity 4711 [ 1787.848164][T22184] tipc: Enabled bearer , priority 0 [ 1787.933769][T22184] syzkaller0: entered promiscuous mode [ 1787.954496][T22184] syzkaller0: entered allmulticast mode [ 1787.962066][T22184] tipc: Resetting bearer [ 1787.968495][T22186] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3813'. [ 1788.002241][T22183] tipc: Resetting bearer [ 1788.881359][T20249] tipc: Node number set to 2082527664 [ 1790.904767][T22183] tipc: Disabling bearer [ 1790.995651][T22205] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3818'. [ 1791.285521][T22213] netlink: 'syz.8.3822': attribute type 10 has an invalid length. [ 1791.677837][T22229] tipc: Enabled bearer , priority 0 [ 1791.773660][T22229] syzkaller0: entered promiscuous mode [ 1791.784244][T22229] syzkaller0: entered allmulticast mode [ 1791.792175][T22229] tipc: Resetting bearer [ 1791.817910][T22228] tipc: Resetting bearer [ 1791.942079][ T1278] ieee802154 phy0 wpan0: encryption failed: -22 [ 1791.948800][ T1278] ieee802154 phy1 wpan1: encryption failed: -22 [ 1794.788336][T22228] tipc: Disabling bearer [ 1794.812425][T22237] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3832'. [ 1795.087316][T22262] netlink: 'syz.8.3840': attribute type 10 has an invalid length. [ 1795.427555][T22274] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3846'. [ 1795.606443][T22278] syzkaller0: entered promiscuous mode [ 1795.626424][T22278] syzkaller0: entered allmulticast mode [ 1798.910194][T22305] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3856'. [ 1798.998848][T22313] netlink: 'syz.8.3857': attribute type 10 has an invalid length. [ 1799.558694][T22334] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3866'. [ 1799.625067][T22338] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3867'. [ 1799.764792][T22340] syzkaller0: entered promiscuous mode [ 1799.770499][T22340] syzkaller0: entered allmulticast mode [ 1802.856204][T22353] netlink: 'syz.1.3872': attribute type 10 has an invalid length. [ 1802.906054][T22360] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3876'. [ 1803.111359][T22368] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3877'. [ 1803.505216][T22387] netlink: 'syz.6.3886': attribute type 10 has an invalid length. [ 1803.621973][T22389] syzkaller0: entered promiscuous mode [ 1803.638284][T22389] syzkaller0: entered allmulticast mode [ 1806.623847][T22400] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3889'. [ 1806.800720][T22419] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3893'. [ 1807.127308][T22430] netlink: 'syz.8.3897': attribute type 10 has an invalid length. [ 1807.205100][T22436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1807.231657][T22436] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3900'. [ 1807.485826][T22443] syzkaller0: entered promiscuous mode [ 1807.498721][T22443] syzkaller0: entered allmulticast mode [ 1810.562476][T22459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3907'. [ 1810.744883][T22477] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1810.786627][T22477] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3912'. [ 1810.932220][T22480] netlink: 'syz.7.3914': attribute type 10 has an invalid length. [ 1810.961479][T22480] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1811.201442][T22496] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3920'. [ 1811.509920][T22502] syzkaller0: entered promiscuous mode [ 1811.515530][T22502] syzkaller0: entered allmulticast mode [ 1814.452027][T22522] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3928'. [ 1814.461072][T22525] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3928'. [ 1814.817497][T22541] netlink: 'syz.7.3934': attribute type 10 has an invalid length. [ 1815.194671][T22557] syzkaller0: entered promiscuous mode [ 1815.200910][T22557] syzkaller0: entered allmulticast mode [ 1818.082502][T22560] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1818.094418][T22561] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3942'. [ 1818.402569][T22592] netlink: 'syz.7.3951': attribute type 10 has an invalid length. [ 1818.871348][T22609] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3958'. [ 1818.898683][T22609] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3958'. [ 1819.051733][T22616] netlink: 'syz.8.3959': attribute type 4 has an invalid length. [ 1819.119334][T22621] netlink: 'syz.8.3959': attribute type 4 has an invalid length. [ 1819.151243][T22622] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3962'. [ 1819.647227][T22637] netlink: 'syz.8.3967': attribute type 10 has an invalid length. [ 1819.664657][T22641] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1819.712235][T22641] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3970'. [ 1820.014957][T22653] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3975'. [ 1820.462007][T22670] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3983'. [ 1820.488711][T22672] netlink: 'syz.7.3984': attribute type 10 has an invalid length. [ 1820.776677][T22678] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3987'. [ 1821.213339][T22691] tipc: Enabled bearer , priority 0 [ 1821.240534][T22696] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3996'. [ 1821.313010][T22690] tipc: Disabling bearer [ 1821.327097][T22700] netlink: 4 bytes leftover after parsing attributes in process `syz.7.3998'. [ 1821.340270][T22700] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3998'. [ 1821.573323][T22706] netlink: 'syz.1.3999': attribute type 10 has an invalid length. [ 1822.136203][T22725] tipc: Enabled bearer , priority 0 [ 1822.155057][T22729] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1822.183247][T22724] tipc: Disabling bearer [ 1822.203082][T22729] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4009'. [ 1822.643499][T22743] netlink: 'syz.6.4016': attribute type 10 has an invalid length. [ 1822.740359][T22749] tipc: Enabled bearer , priority 0 [ 1822.765201][T22748] tipc: Disabling bearer [ 1823.463944][T22775] tipc: Enabled bearer , priority 0 [ 1823.488705][T22774] tipc: Disabling bearer [ 1823.551527][T22779] netlink: 'syz.1.4033': attribute type 10 has an invalid length. [ 1824.205913][T22800] tipc: Enabled bearer , priority 0 [ 1824.224660][T22798] tipc: Disabling bearer [ 1824.800167][T22822] netlink: 'syz.6.4051': attribute type 10 has an invalid length. [ 1825.201106][T22832] __nla_validate_parse: 10 callbacks suppressed [ 1825.201124][T22832] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4056'. [ 1825.226195][T22830] tipc: Enabled bearer , priority 0 [ 1825.260014][T22829] tipc: Disabling bearer [ 1825.343563][T22836] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1825.379162][T22836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4058'. [ 1825.831888][T22857] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4066'. [ 1825.889773][T22858] netlink: 'syz.6.4065': attribute type 10 has an invalid length. [ 1826.020740][T22862] tipc: Enabling of bearer rejected, failed to enable media [ 1826.302454][T22873] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4072'. [ 1826.545573][T22886] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4077'. [ 1826.859305][T22901] netlink: 'syz.1.4081': attribute type 10 has an invalid length. [ 1826.982035][T22903] tipc: Enabling of bearer rejected, failed to enable media [ 1827.362065][T22916] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4087'. [ 1827.463782][T22919] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4088'. [ 1827.904320][T22944] netlink: 'syz.1.4096': attribute type 10 has an invalid length. [ 1828.047512][T22947] tipc: Enabling of bearer rejected, failed to enable media [ 1828.275428][T22954] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4101'. [ 1828.324979][T22956] netlink: 12 bytes leftover after parsing attributes in process `syz.6.4100'. [ 1828.810940][T22973] tipc: Enabling of bearer rejected, failed to enable media [ 1828.897437][T22980] netlink: 'syz.7.4111': attribute type 10 has an invalid length. [ 1829.627460][T23010] tipc: Enabling of bearer rejected, failed to enable media [ 1829.812688][T23020] netlink: 'syz.6.4125': attribute type 10 has an invalid length. [ 1830.387033][T23039] __nla_validate_parse: 4 callbacks suppressed [ 1830.387050][T23039] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4132'. [ 1830.501507][T23045] tipc: Enabling of bearer rejected, failed to enable media [ 1830.547187][T23046] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4135'. [ 1830.987184][T23070] netlink: 'syz.1.4140': attribute type 10 has an invalid length. [ 1831.269155][T23078] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4145'. [ 1831.457034][T23084] tipc: Enabling of bearer rejected, failed to enable media [ 1831.599410][T23091] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4149'. [ 1831.916494][T23106] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4155'. [ 1831.938024][T23108] trusted_key: syz.6.4156 sent an empty control message without MSG_MORE. [ 1832.081524][T23111] netlink: 'syz.1.4157': attribute type 10 has an invalid length. [ 1832.165639][T23115] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4159'. [ 1832.520714][T23127] tipc: Enabling of bearer rejected, failed to enable media [ 1832.673942][T23135] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4167'. [ 1832.864242][T23142] netlink: 4 bytes leftover after parsing attributes in process `syz.8.4170'. [ 1833.253929][T23158] netlink: 'syz.8.4174': attribute type 10 has an invalid length. [ 1833.396770][T23161] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4177'. [ 1833.413356][T23163] tipc: Enabling of bearer rejected, failed to enable media [ 1833.553383][T23171] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4180'. [ 1834.264804][T23200] netlink: 'syz.8.4190': attribute type 10 has an invalid length. [ 1834.374842][T23202] tipc: Enabling of bearer rejected, failed to enable media [ 1834.921125][T23220] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input33 [ 1835.649163][T23240] tipc: Enabling of bearer rejected, failed to enable media [ 1835.668886][T23243] __nla_validate_parse: 3 callbacks suppressed [ 1835.668901][T23243] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4203'. [ 1835.859438][T23251] netlink: 'syz.8.4206': attribute type 10 has an invalid length. [ 1836.055077][T23259] netlink: 4 bytes leftover after parsing attributes in process `syz.7.4210'. [ 1836.412782][T23264] syz.1.4211 (23264) used greatest stack depth: 19944 bytes left [ 1836.639331][T23279] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4216'. [ 1836.687787][T23281] tipc: Enabling of bearer rejected, failed to enable media [ 1836.983954][T23291] netlink: 4 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1837.013710][T23291] netlink: 28 bytes leftover after parsing attributes in process `syz.6.4221'. [ 1837.031560][T23293] netlink: 'syz.8.4222': attribute type 10 has an invalid length. [ 1837.393854][ C0] ------------[ cut here ]------------ [ 1837.399394][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 1837.410345][ C0] WARNING: CPU: 0 PID: 17980 at net/mac80211/rate.c:385 __rate_control_send_low+0x635/0x880 [ 1837.420527][ C0] Modules linked in: [ 1837.424462][ C0] CPU: 0 PID: 17980 Comm: udevd Not tainted 6.6.101-syzkaller #0 [ 1837.432295][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1837.442430][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1837.448767][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 85 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9b e7 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1837.455931][T23308] tipc: Enabled bearer , priority 0 [ 1837.468593][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 1837.468639][ C0] RAX: 471d76eacfbec000 RBX: 000000000000000c RCX: ffff88802be51e00 [ 1837.468653][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1837.468665][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 1837.468679][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 1837.468693][ C0] R13: dffffc0000000000 R14: ffff888076d83358 R15: ffff888025755ca8 [ 1837.468707][ C0] FS: 00007fcc03375880(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 1837.468723][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1837.468736][ C0] CR2: 00007ff6faee56c0 CR3: 000000002e341000 CR4: 00000000003506f0 [ 1837.468758][ C0] Call Trace: [ 1837.468766][ C0] [ 1837.468797][ C0] rate_control_send_low+0x194/0x790 [ 1837.556539][ C0] rate_control_get_rate+0x20b/0x5c0 [ 1837.561871][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 1837.567774][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 1837.573771][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1837.579206][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1837.584110][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 1837.589843][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 1837.594998][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1837.600460][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1837.606034][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 1837.611623][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1837.617216][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1837.622676][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1837.629503][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1837.635071][ C0] __iterate_interfaces+0x243/0x500 [ 1837.640305][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1837.646601][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1837.653829][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1837.660113][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1837.667205][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1837.672455][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1837.677763][ C0] ? hw_scan_work+0xf40/0xf40 [ 1837.682476][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1837.687660][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1837.693757][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1837.698947][ C0] handle_softirqs+0x280/0x820 [ 1837.703737][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1837.708578][ C0] ? do_softirq+0x180/0x180 [ 1837.713101][ C0] __irq_exit_rcu+0xc7/0x190 [ 1837.717738][ C0] ? irq_exit_rcu+0x20/0x20 [ 1837.722271][ C0] irq_exit_rcu+0x9/0x20 [ 1837.726558][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1837.732214][ C0] [ 1837.735230][ C0] [ 1837.738196][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1837.744209][ C0] RIP: 0010:kasan_check_range+0x1c0/0x290 [ 1837.750014][ C0] Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 75 61 41 f7 c7 00 ff 00 00 75 5d [ 1837.769662][ C0] RSP: 0018:ffffc90004fe7780 EFLAGS: 00000256 [ 1837.775724][ C0] RAX: ffffffff81f27c01 RBX: ffff88801fe58ab8 RCX: ffffffff81f27cd6 [ 1837.783736][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88801fe58ab8 [ 1837.792028][ C0] RBP: 0000000000000003 R08: ffff88801fe58ab8 R09: 1ffff11003fcb157 [ 1837.800093][ C0] R10: dffffc0000000000 R11: ffffed1003fcb158 R12: ffff88805e2cd521 [ 1837.808121][ C0] R13: ffff88801fe58ab8 R14: ffffed1003fcb158 R15: 1ffff11003fcb157 [ 1837.816346][ C0] ? umount_check+0x111/0x1d0 [ 1837.821054][ C0] ? read_word_at_a_time+0x16/0x20 [ 1837.826196][ C0] read_word_at_a_time+0x16/0x20 [ 1837.831198][ C0] __d_lookup_rcu+0x2a5/0x4c0 [ 1837.835879][ C0] lookup_fast+0xca/0x4d0 [ 1837.840247][ C0] ? inode_permission+0xf3/0x480 [ 1837.845218][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 1837.850731][ C0] ? security_inode_permission+0xb0/0xf0 [ 1837.856429][ C0] link_path_walk+0x5ff/0xe00 [ 1837.861133][ C0] ? handle_lookup_down+0x130/0x130 [ 1837.866388][ C0] path_openat+0x283/0x3190 [ 1837.870960][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1837.875992][ C0] ? __x64_sys_openat+0x139/0x160 [ 1837.881058][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.887196][ C0] ? verify_lock_unused+0x140/0x140 [ 1837.892418][ C0] ? do_filp_open+0x3d0/0x3d0 [ 1837.897142][ C0] ? __virt_addr_valid+0x18c/0x540 [ 1837.902274][ C0] do_filp_open+0x1c5/0x3d0 [ 1837.906828][ C0] ? vfs_tmpfile+0x490/0x490 [ 1837.911443][ C0] ? _raw_spin_unlock+0x28/0x40 [ 1837.916341][ C0] ? alloc_fd+0x58f/0x630 [ 1837.920694][ C0] do_sys_openat2+0x12c/0x1c0 [ 1837.925367][ C0] ? do_sys_open+0xe0/0xe0 [ 1837.929831][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1837.935840][ C0] ? lock_chain_count+0x20/0x20 [ 1837.940754][ C0] __x64_sys_openat+0x139/0x160 [ 1837.945640][ C0] do_syscall_64+0x55/0xb0 [ 1837.950129][ C0] ? clear_bhb_loop+0x40/0x90 [ 1837.954815][ C0] ? clear_bhb_loop+0x40/0x90 [ 1837.959532][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1837.965444][ C0] RIP: 0033:0x7fcc02ca7407 [ 1837.969898][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1837.989648][ C0] RSP: 002b:00007fff983f0230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1837.998153][ C0] RAX: ffffffffffffffda RBX: 00007fcc03375880 RCX: 00007fcc02ca7407 [ 1838.006154][ C0] RDX: 0000000000080000 RSI: 00005601935196f0 RDI: ffffffffffffff9c [ 1838.014179][ C0] RBP: 00005601935196f0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.022186][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1838.030218][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 1838.038239][ C0] [ 1838.041258][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1838.048532][ C0] CPU: 0 PID: 17980 Comm: udevd Not tainted 6.6.101-syzkaller #0 [ 1838.056345][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1838.066403][ C0] Call Trace: [ 1838.069677][ C0] [ 1838.072531][ C0] dump_stack_lvl+0x16c/0x230 [ 1838.077216][ C0] ? show_regs_print_info+0x20/0x20 [ 1838.082406][ C0] ? load_image+0x3b0/0x3b0 [ 1838.086919][ C0] panic+0x2c0/0x710 [ 1838.090813][ C0] ? bpf_jit_dump+0xd0/0xd0 [ 1838.095322][ C0] __warn+0x2e0/0x470 [ 1838.099313][ C0] ? __rate_control_send_low+0x635/0x880 [ 1838.104948][ C0] ? __rate_control_send_low+0x635/0x880 [ 1838.110576][ C0] report_bug+0x2be/0x4f0 [ 1838.114931][ C0] ? __rate_control_send_low+0x635/0x880 [ 1838.120564][ C0] ? __rate_control_send_low+0x635/0x880 [ 1838.126193][ C0] ? __rate_control_send_low+0x637/0x880 [ 1838.131825][ C0] handle_bug+0xcf/0x120 [ 1838.136081][ C0] exc_invalid_op+0x1a/0x50 [ 1838.140576][ C0] asm_exc_invalid_op+0x1a/0x20 [ 1838.145421][ C0] RIP: 0010:__rate_control_send_low+0x635/0x880 [ 1838.151655][ C0] Code: 30 42 0f b6 04 28 84 c0 0f 85 e6 01 00 00 41 8b 0e 48 c7 c7 00 85 be 8b 48 8b 74 24 10 44 8b 44 24 1c 45 89 e1 e8 9b e7 6a f7 <0f> 0b e9 78 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c 03 fa ff [ 1838.171255][ C0] RSP: 0018:ffffc90000007560 EFLAGS: 00010246 [ 1838.177314][ C0] RAX: 471d76eacfbec000 RBX: 000000000000000c RCX: ffff88802be51e00 [ 1838.185278][ C0] RDX: 0000000000000100 RSI: 0000000000000000 RDI: 0000000000000002 [ 1838.193235][ C0] RBP: 0000000000000084 R08: ffffc90000007167 R09: 1ffff92000000e2c [ 1838.201202][ C0] R10: dffffc0000000000 R11: fffff52000000e2d R12: 0000000000000040 [ 1838.209163][ C0] R13: dffffc0000000000 R14: ffff888076d83358 R15: ffff888025755ca8 [ 1838.217144][ C0] rate_control_send_low+0x194/0x790 [ 1838.222486][ C0] rate_control_get_rate+0x20b/0x5c0 [ 1838.227776][ C0] ieee80211_beacon_get_finish+0x38d/0x6b0 [ 1838.233581][ C0] ? ieee80211_set_beacon_cntdwn+0x660/0x660 [ 1838.239549][ C0] ? __local_bh_enable_ip+0x12e/0x1c0 [ 1838.244914][ C0] ? _local_bh_enable+0xa0/0xa0 [ 1838.249844][ C0] ieee80211_beacon_get_ap+0x1429/0x1970 [ 1838.255484][ C0] ? ieee80211_tx_8023+0x3c0/0x3c0 [ 1838.260610][ C0] ? read_lock_is_recursive+0x20/0x20 [ 1838.265981][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1838.271521][ C0] __ieee80211_beacon_get+0x10eb/0x1600 [ 1838.277068][ C0] ? __ieee80211_beacon_get+0x36/0x1600 [ 1838.282614][ C0] ieee80211_beacon_get_tim+0xb8/0x560 [ 1838.288069][ C0] ? ieee80211_beacon_get_template_ema_list+0x90/0x90 [ 1838.294830][ C0] mac80211_hwsim_beacon_tx+0x3c7/0x780 [ 1838.300377][ C0] __iterate_interfaces+0x243/0x500 [ 1838.305574][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1838.311807][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x180 [ 1838.318995][ C0] ? mac80211_hwsim_vendor_cmd_test+0x2b0/0x2b0 [ 1838.325237][ C0] ieee80211_iterate_active_interfaces_atomic+0xdb/0x180 [ 1838.332257][ C0] mac80211_hwsim_beacon+0xbb/0x1b0 [ 1838.337451][ C0] __hrtimer_run_queues+0x51e/0xc40 [ 1838.342645][ C0] ? hw_scan_work+0xf40/0xf40 [ 1838.347319][ C0] ? hrtimer_interrupt+0x9c0/0x9c0 [ 1838.352416][ C0] ? ktime_get_update_offsets_now+0x3d2/0x3f0 [ 1838.358480][ C0] hrtimer_run_softirq+0x187/0x2b0 [ 1838.363585][ C0] handle_softirqs+0x280/0x820 [ 1838.368339][ C0] ? __irq_exit_rcu+0xc7/0x190 [ 1838.373098][ C0] ? do_softirq+0x180/0x180 [ 1838.377600][ C0] __irq_exit_rcu+0xc7/0x190 [ 1838.382179][ C0] ? irq_exit_rcu+0x20/0x20 [ 1838.386675][ C0] irq_exit_rcu+0x9/0x20 [ 1838.390910][ C0] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1838.396540][ C0] [ 1838.399469][ C0] [ 1838.402397][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1838.408388][ C0] RIP: 0010:kasan_check_range+0x1c0/0x290 [ 1838.414107][ C0] Code: 49 8d 5c 24 07 4d 85 e4 49 0f 49 dc 48 83 e3 f8 49 29 dc 74 12 41 80 3b 00 0f 85 a6 00 00 00 49 ff c3 49 ff cc 75 ee 5b 41 5c <41> 5d 41 5e 41 5f 5d c3 45 84 ff 75 61 41 f7 c7 00 ff 00 00 75 5d [ 1838.433706][ C0] RSP: 0018:ffffc90004fe7780 EFLAGS: 00000256 [ 1838.439765][ C0] RAX: ffffffff81f27c01 RBX: ffff88801fe58ab8 RCX: ffffffff81f27cd6 [ 1838.447725][ C0] RDX: 0000000000000000 RSI: 0000000000000001 RDI: ffff88801fe58ab8 [ 1838.455687][ C0] RBP: 0000000000000003 R08: ffff88801fe58ab8 R09: 1ffff11003fcb157 [ 1838.463645][ C0] R10: dffffc0000000000 R11: ffffed1003fcb158 R12: ffff88805e2cd521 [ 1838.471611][ C0] R13: ffff88801fe58ab8 R14: ffffed1003fcb158 R15: 1ffff11003fcb157 [ 1838.479581][ C0] ? umount_check+0x111/0x1d0 [ 1838.484255][ C0] ? read_word_at_a_time+0x16/0x20 [ 1838.489366][ C0] read_word_at_a_time+0x16/0x20 [ 1838.494291][ C0] __d_lookup_rcu+0x2a5/0x4c0 [ 1838.498973][ C0] lookup_fast+0xca/0x4d0 [ 1838.503289][ C0] ? inode_permission+0xf3/0x480 [ 1838.508223][ C0] ? bpf_lsm_inode_permission+0x9/0x10 [ 1838.513674][ C0] ? security_inode_permission+0xb0/0xf0 [ 1838.519301][ C0] link_path_walk+0x5ff/0xe00 [ 1838.523976][ C0] ? handle_lookup_down+0x130/0x130 [ 1838.529179][ C0] path_openat+0x283/0x3190 [ 1838.533694][ C0] ? __kasan_slab_alloc+0x6c/0x80 [ 1838.538715][ C0] ? __x64_sys_openat+0x139/0x160 [ 1838.543728][ C0] ? entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.549790][ C0] ? verify_lock_unused+0x140/0x140 [ 1838.554981][ C0] ? do_filp_open+0x3d0/0x3d0 [ 1838.559654][ C0] ? __virt_addr_valid+0x18c/0x540 [ 1838.564766][ C0] do_filp_open+0x1c5/0x3d0 [ 1838.569268][ C0] ? vfs_tmpfile+0x490/0x490 [ 1838.573885][ C0] ? _raw_spin_unlock+0x28/0x40 [ 1838.578743][ C0] ? alloc_fd+0x58f/0x630 [ 1838.583069][ C0] do_sys_openat2+0x12c/0x1c0 [ 1838.587758][ C0] ? do_sys_open+0xe0/0xe0 [ 1838.592189][ C0] ? lockdep_hardirqs_on_prepare+0x400/0x760 [ 1838.598176][ C0] ? lock_chain_count+0x20/0x20 [ 1838.603057][ C0] __x64_sys_openat+0x139/0x160 [ 1838.607902][ C0] do_syscall_64+0x55/0xb0 [ 1838.612307][ C0] ? clear_bhb_loop+0x40/0x90 [ 1838.616975][ C0] ? clear_bhb_loop+0x40/0x90 [ 1838.621643][ C0] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 1838.627542][ C0] RIP: 0033:0x7fcc02ca7407 [ 1838.631945][ C0] Code: 48 89 fa 4c 89 df e8 38 aa 00 00 8b 93 08 03 00 00 59 5e 48 83 f8 fc 74 1a 5b c3 0f 1f 84 00 00 00 00 00 48 8b 44 24 10 0f 05 <5b> c3 0f 1f 80 00 00 00 00 83 e2 39 83 fa 08 75 de e8 23 ff ff ff [ 1838.651635][ C0] RSP: 002b:00007fff983f0230 EFLAGS: 00000202 ORIG_RAX: 0000000000000101 [ 1838.660128][ C0] RAX: ffffffffffffffda RBX: 00007fcc03375880 RCX: 00007fcc02ca7407 [ 1838.668351][ C0] RDX: 0000000000080000 RSI: 00005601935196f0 RDI: ffffffffffffff9c [ 1838.676318][ C0] RBP: 00005601935196f0 R08: 0000000000000000 R09: 0000000000000000 [ 1838.684276][ C0] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000000 [ 1838.692233][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000009 [ 1838.700208][ C0] [ 1838.703467][ C0] Kernel Offset: disabled [ 1838.707824][ C0] Rebooting in 86400 seconds..