last executing test programs: 2m30.913822996s ago: executing program 0 (id=2195): r0 = socket$kcm(0x10, 0x2, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = epoll_create1(0x0) r4 = socket(0x1, 0x80802, 0x0) r5 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, 0xffffffffffffffff, &(0x7f0000000280)) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r4, &(0x7f00000000c0)={0x10000001}) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e88370200c54c1960b89c40", 0x36}], 0x1}, 0x0) close_range(r0, 0xffffffffffffffff, 0x0) 2m29.285886593s ago: executing program 0 (id=2197): ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, 0x0, 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setrlimit(0xb, &(0x7f0000000340)={0xa00000000, 0x7abc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x4, 0xfffffff8) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x1, &(0x7f0000000080)=[0xee00]) r1 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r2, 0xffffffffffffffff, 0x2d, 0x71fe, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a30000000000800024000"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb250100bea8c6e1120700140000ae7b2aaa34610252aa54343412582413dcf04fc6f08b0996279ae3d388b6cbceb6b6ba88570a794443d74e32db9287bd7901fd76e12a9126a8ef543767453e0edc898d85e91c3d9711d1e120ea1a006aaa4728c0da2478d5da1e0aeedf31e5feca614d5ef01c983f2b019cc102155f4b599b5d25f7d3a058f727fba4c9436833498628"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) rmdir(&(0x7f00000006c0)='./file0\x00') r5 = add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="d54d90db83a43a99291a1f50b08e63349911e0f010758fb465423fdd207311b38cb03015ad2dcceaad85283ab791d1b132a8c2bfd0ea7d41fe1f5433270213bfdeac0a9f882b02b3065920ecdb24b5", 0x4f, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x37, 0x35, 0x35, 0x33, 0x36, 0x63, 0x61, 0x32, 0x66, 0x30, 0x34, 0x35, 0x65, 0x36, 0x36]}, &(0x7f0000000400)={0x0, "05e5d3cf846fda2e61f1806faed4723537ccf5933d4ee1350e8caa020f9b7d28164544d963a3e405745726f45ffaef4229975229a00ed77ea7674320fb099fac", 0x3c}, 0x48, r5) 2m27.459260833s ago: executing program 0 (id=2205): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, 0x0) timer_settime(0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102400, 0x19000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={0xffffffffffffffff, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = syz_open_dev$sndctrl(&(0x7f0000001440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r4, 0x40045532, &(0x7f0000000000)=0x7) syz_open_dev$sndpcmp(&(0x7f0000000b00), 0x0, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000440), 0x0, 0x0) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) close_range(r5, 0xffffffffffffffff, 0x0) 2m25.693729091s ago: executing program 0 (id=2206): syz_mount_image$ext4(&(0x7f0000000180)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x800714, &(0x7f0000000500), 0xff, 0x485, &(0x7f0000001040)="$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") creat(&(0x7f0000000300)='./bus\x00', 0x0) mount(&(0x7f0000000440)=@loop={'/dev/loop', 0x0}, &(0x7f0000000080)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r0, 0x4c04, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7fffffffffffffff, 0x400, 0x0, 0x0, 0x1, 0x0, "ef35af413bb901527fe4d0ce5d29c3ee5e5c3676345a41499db7aac63a01000000000000004faa2ae2c084a0ea0000000000000000000c00002000", "036c47c67808200400000000000000335263bdbcef549ba197fce47ddfdd753abd950100002a00ffffffffffffffff00000000e8f20000000200", "b7326736181c208220000000b9000000000000000000f0fffffffff2ff00", [0x4]}) syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f00000004c0)='./file1\x00', 0x804c10, &(0x7f0000000180)=ANY=[], 0xfe, 0x669, &(0x7f0000000640)="$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") mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2200020, 0x0) 2m20.745498732s ago: executing program 0 (id=2219): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x94) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$packet(0x11, 0x2, 0x300) syz_io_uring_setup(0x24fa, &(0x7f00000006c0)={0x0, 0x0, 0x10100, 0x0, 0x1c5}, &(0x7f0000000100), &(0x7f0000000180)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r3, &(0x7f0000000040)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r3, 0x0) ioctl$sock_bt_hidp_HIDPCONNDEL(r1, 0x400448c9, &(0x7f0000000000)={@none}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) 2m19.099164259s ago: executing program 0 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$nl_route(0x10, 0x3, 0x0) 2m18.251681833s ago: executing program 32 (id=2226): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, 0x0, 0x0) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$KVM_SET_PIT(0xffffffffffffffff, 0x8048ae66, &(0x7f00000000c0)={[{0x0, 0x800, 0x0, 0x0, 0x0, 0xa5, 0xfd, 0x9, 0xa9, 0x4, 0x0, 0x2, 0x40000000}, {0x8, 0x4005, 0x0, 0x0, 0x41, 0x0, 0x0, 0x0, 0x6, 0xff, 0x0, 0x2, 0x6}, {0x3fe, 0x4, 0x0, 0x5e, 0x0, 0x0, 0xb3, 0x0, 0x3, 0xfe, 0x80, 0xf6, 0x7}], 0x5}) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e000000020013000200000000000000ff0800ed05000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r4, &(0x7f0000000180), 0x400008a, 0x0) sendmsg$key(r4, &(0x7f0000000140)={0x9, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="0209000002"], 0x10}}, 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101b01) socket$nl_route(0x10, 0x3, 0x0) 1m33.152153429s ago: executing program 1 (id=2334): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2401, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setrlimit(0xb, 0x0) sched_setscheduler(0x0, 0x2, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res(&(0x7f0000000300), 0x4, 0xfffffff8) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x1, &(0x7f0000000080)=[0xee00]) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000000c0)={r3, 0xffffffffffffffff, 0x2d, 0x71fe, @val=@netfilter={0xa, 0x4000000, 0xfffffed4, 0x20}}, 0x12) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a30000000000800024000"], 0x7c}}, 0x0) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x3c, r4, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb250100bea8c6e1120700140000ae7b2aaa34610252aa54343412582413dcf04fc6f08b0996279ae3d388b6cbceb6b6ba88570a794443d74e32db9287bd7901fd76e12a9126a8ef543767453e0edc898d85e91c3d9711d1e120ea1a006aaa4728c0da2478d5da1e0aeedf31e5feca614d5ef01c983f2b019cc102155f4b599b5d25f7d3a058f727fba4c9436833498628"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) rmdir(&(0x7f00000006c0)='./file0\x00') r6 = add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="d54d90db83a43a99291a1f50b08e63349911e0f010758fb465423fdd207311b38cb03015ad2dcceaad85283ab791d1b132a8c2bfd0ea7d41fe1f5433270213bfdeac0a9f882b02b3065920ecdb24b5", 0x4f, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x37, 0x35, 0x35, 0x33, 0x36, 0x63, 0x61, 0x32, 0x66, 0x30, 0x34, 0x35, 0x65, 0x36, 0x36]}, &(0x7f0000000400)={0x0, "05e5d3cf846fda2e61f1806faed4723537ccf5933d4ee1350e8caa020f9b7d28164544d963a3e405745726f45ffaef4229975229a00ed77ea7674320fb099fac", 0x3c}, 0x48, r6) 1m24.57608886s ago: executing program 1 (id=2357): openat$sndseq(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) unshare(0x2a020400) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x88, 0x30, 0x9, 0x0, 0x25dfdbfb, {}, [{0x74, 0x1, [@m_bpf={0x70, 0x1, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_OPS={0x3c, 0x4, [{}, {0x35, 0x0, 0x5}, {}, {0x0, 0x1}, {0xab}, {0x2}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x88}}, 0x0) r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) ioctl$PTP_EXTTS_REQUEST2(r1, 0x40383d0c, &(0x7f0000000040)) 1m23.249924962s ago: executing program 1 (id=2361): prctl$PR_SET_MM_AUXV(0x23, 0xc, &(0x7f0000000080)="111a992cef0aeb1e11ed4f48", 0xc) r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x600, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x100000000000000, 0x80, 0x0, 0xd2) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0xad5, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x0) 1m23.043007815s ago: executing program 1 (id=2362): syz_mount_image$ext4(&(0x7f0000000040)='ext4\x00', &(0x7f00000001c0)='./file0\x00', 0x2a08000, &(0x7f0000000140)={[{@mblk_io_submit}, {@resuid={'resuid', 0x3d, 0xee00}}]}, 0xfc, 0x474, &(0x7f00000003c0)="$eJzs3MtrXFUYAPBv7mTSpM/4qNqHGl9YfDRN+rALN4qCCwVBF9VdTNNSm1ppIthSTBSpSym4F5eCf4Er3Yi6EtzqXgpBsml8gFfunXvzfk0yyUTn94MJ59x7Zu75zrlncu65MxNA2+rN/lQidkfEL1k6ybMz0qJQVm566vrQH1PXhyqRpq/9Xsn33Z66PlSWLZ+3u8gcSSKSjytxaInjjl69dnFwZGT4SpHvG7v0bt/o1WtPX7g0eH74/PA7A6dPnzje/8ypgZNNiXNPVteDH1w+fOClN26+MnTm5ls/fNVR1nVBHM3SG73z2nKux5p9sBbbMydd6WhhRWhINSKy7qrl439fVGO28/bFix+1tHLApkrTNN27/O6JFPgfq0SrawC0RvmP/vZUd3Rt0nXwdjb5XP0CKIt7unjU93REUpSpLbi+baauYt3kzMSfn0fe/jvaqv0BgK33TTb/eao+/ykf9T09cc+ccnvz9eBsa8QdEXFnRNwVEXdHxP6IvOy9EXFfg8fvXZBfPP9Mbq0rsDXK5n/PFve25s//itnfP2lPtcjtie7oiVrl3IWR4WNFmxyJ2o4s37/CMb594edPl9vXW8z9ykd2/HIuWNTjVseO+c85Ozg2uLGoZ01+mK8Bji+Of/bOVZY6EBEH1/H62bz5whNfHl5u/+rxr6AJ95nSLyIer/f/RKwQ/8L7k93FvlMDJ/u6YmT4WF95Viz24083Xl3u+BuKvwmy/t+55Pk/E39PZe792tHGj3Hj10+WvaZp4Px/s9ySnf+dldfzdGex7f3BsbEr/RGdlZcXbx+YfbUyX5af3L0/4pGlx3/2HpedY1n8hyIiO4nvj4gHIuLBou4PRcTDkb/EUsanI+L75x99ez3xJ6s1bBNk/X92Xv/HKv3feKJ68buv1xN/Xdb/J/LUkWLLWt7/1lrBjbQdAAAA/Fck+WfgK8nRmXSSHD0asStf292ZjFweHXvy3OX3/jpb/6x8T9SScqWrvh5cXw/tL9aGy/zAgvzxYt34s2p3nt9Z3PsGWmfX3PGfLzjWx3/mt2qLKwdsPt/XgvZl/EP7Mv6hfRn/0L7WOv7TTa4HsPWWGv/jLagHsPXM/6F9Gf/Qvox/aF/GP7SljXyvX2KVxHjDzdsVK5Xp3CZx5YlI8kQ63sJq/F38DMvaCm9efcpfy1i9cK0Yd9uhB1dOtO49CQAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAoJn+DQAA//85XdxN") creat(&(0x7f0000000040)='./bus\x00', 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x185641, 0x0) r0 = open(&(0x7f00000003c0)='./bus\x00', 0x84902, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x11, r0, 0x0) r1 = creat(&(0x7f0000000040)='./bus\x00', 0x0) io_setup(0x202, &(0x7f0000000200)=0x0) io_submit(r2, 0x3b, &(0x7f0000000540)=[&(0x7f00000000c0)={0x25, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f0000000000), 0x4000, 0xa00}]) syz_open_dev$vcsn(0x0, 0x5, 0x8000) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000040)='./file1\x00', 0x10, &(0x7f00000004c0)={[{@i_version}, {@nodiscard}, {@min_batch_time={'min_batch_time', 0x3d, 0x3ff}}]}, 0x1, 0x409, &(0x7f0000000500)="$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") openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x141042, 0x0) 1m21.826174234s ago: executing program 1 (id=2363): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = epoll_create1(0x0) r4 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000140), 0x22400, 0x0) r5 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r5, 0xc0285700, &(0x7f0000000100)={0x1, "5660359c3245d1c42317afad7d48ed51000000000000000100", 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_CREATE_FENCE(r4, 0xc0285700, &(0x7f0000000000)={0x5, "340b7832ceefd131b8e6498c25f58fad9987ffe93bbabd18cf501922de974a27", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r6, 0xc0303e03, &(0x7f0000000180)={"2486910284ed923431d4c5d5fbf514fd00", r7, 0xffffffffffffffff}) ioctl$SW_SYNC_IOC_INC(r4, 0x40045701, &(0x7f0000000200)=0x400a45) ioctl$SW_SYNC_IOC_INC(r5, 0x40045701, &(0x7f00000002c0)=0x3) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r8, &(0x7f0000000300)={0x40000001}) 1m20.068751843s ago: executing program 1 (id=2369): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2800c811) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 1m19.465076093s ago: executing program 33 (id=2369): r0 = socket$inet6(0xa, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2800c811) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) 22.051103531s ago: executing program 4 (id=2516): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='mnt\x00', 0x0, &(0x7f0000000000), 0x0, 0x248, &(0x7f0000000940)="$eJzs3T9oFFkcB/DfzO5eLsly5O6ag4O7g+M47gIh1x3YxEYhICGICCpERGyURIgJdomVjYXWKqlsgtgZrdMEG0Ww8k+K2AgaLAwWWqzsTiLRbDBxN7uS+Xxg2JnZee/3hp3v221mNoDc6omIgYgoRERvRJQiIll/wB/Z0rO6OdO5MBJRqRx8ndSOy7Yza+26I2I6Iv6PiPk0idPFiMm5o0tvH+//+9JE6a8bc0c6W3qSq5aXFg+sXB+6eHvwv8kHj14OJTEQ5U/Oq/mSOvuKScRPO1HsG5EU2z0CtmL4/K0n1dz/HBF/1vJfijSyD+/y+Hfzpfj32mZtr7x6+Gsrxwo0X6VSqn4HTleA3EkjohxJ2hcR2Xqa9vVlv+GfFrrSM2Pj53pPjU2Mnmz3TAU0Szlicd/djjvdn+X/RSHLP7B7VfN/aHj2WXV9pdDu0QCtVM1/7/Gpf0L+IXfkH/JL/iG/5B/yS/4hv+Qf8kv+Ydf4frsN5B/yS/4hv+Qf8mt9/gGAfKl0tPsOZKBd2j3/AAAAAAAAAAAAAAAAAAAAG810LoysLa2qee9qxPLeiCjWq1+o/R/x2qNNu94k1cM+SrJmDTn2e4MdNOjmDt59vZVHuv3wfOfqb8X935rZW3nbLaZGI6YvRER/sbjx+ktWr7+v9+MX3i+daLBAg/Ycbm/997Otq1Wqs2+wkmQr/fXmnzR+qb3Wn3/Km/S5HWffNdgBAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALfMhAAD//+M2bGo=") r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000300)=@file={0x0, 'mnt/file0\x00'}, 0x6e) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = openat$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', 0x0, 0x13) getdents64(r5, &(0x7f0000000f80)=""/4096, 0x1000) 20.361591318s ago: executing program 4 (id=2520): ioperm(0x1, 0x3, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) syz_open_dev$dri(&(0x7f0000000480), 0xf2ef, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_procfs(0x0, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @empty}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) sendto$inet(r4, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) r5 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000000)='/sys/power/pm_debug_messages', 0x149a82, 0x0) write$cgroup_int(r5, &(0x7f0000000040)=0x800000000001c8, 0x12) 20.019785414s ago: executing program 6 (id=2523): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 18.211628113s ago: executing program 4 (id=2525): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) io_setup(0x222, 0x0) r1 = socket(0x10, 0x3, 0x0) bind$netlink(r1, &(0x7f0000177ff4)={0x10, 0x0, 0x1}, 0xc) write(r1, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r1, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write(r1, &(0x7f0000000000)='\"', 0xfdef) 17.549638874s ago: executing program 6 (id=2526): syz_open_dev$video(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 17.526272424s ago: executing program 3 (id=2527): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() socket$netlink(0x10, 0x3, 0x14) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = creat(&(0x7f0000000080)='./file0\x00', 0x0) close(r3) timerfd_create(0x8, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) write$binfmt_elf64(r4, 0x0, 0x10132) mount$9p_fd(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000040), 0x208000, &(0x7f0000000180)={'trans=fd,', {'rfdno', 0x3d, r3}, 0x2c, {'wfdno', 0x3d, r4}}) ioctl$TCXONC(0xffffffffffffffff, 0x540a, 0x2) 15.313644381s ago: executing program 3 (id=2530): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 15.31255109s ago: executing program 6 (id=2531): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2401, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, 0x0, 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setrlimit(0xb, &(0x7f0000000340)={0xa00000000, 0x7abc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x4, 0xfffffff8) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x1, &(0x7f0000000080)=[0xee00]) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a30000000000800024000"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb250100bea8c6e1120700140000ae7b2aaa34610252aa54343412582413dcf04fc6f08b0996279ae3d388b6cbceb6b6ba88570a794443d74e32db9287bd7901fd76e12a9126a8ef543767453e0edc898d85e91c3d9711d1e120ea1a006aaa4728c0da2478d5da1e0aeedf31e5feca614d5ef01c983f2b019cc102155f4b599b5d25f7d3a058f727fba4c9436833498628"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) rmdir(&(0x7f00000006c0)='./file0\x00') r5 = add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="d54d90db83a43a99291a1f50b08e63349911e0f010758fb465423fdd207311b38cb03015ad2dcceaad85283ab791d1b132a8c2bfd0ea7d41fe1f5433270213bfdeac0a9f882b02b3065920ecdb24b5", 0x4f, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x37, 0x35, 0x35, 0x33, 0x36, 0x63, 0x61, 0x32, 0x66, 0x30, 0x34, 0x35, 0x65, 0x36, 0x36]}, &(0x7f0000000400)={0x0, "05e5d3cf846fda2e61f1806faed4723537ccf5933d4ee1350e8caa020f9b7d28164544d963a3e405745726f45ffaef4229975229a00ed77ea7674320fb099fac", 0x3c}, 0x48, r5) 14.560726523s ago: executing program 6 (id=2532): syz_mount_image$hfsplus(&(0x7f00000003c0), &(0x7f0000000100)='./file0\x00', 0x201048c, &(0x7f0000000300)=ANY=[], 0xfd, 0x644, &(0x7f0000000cc0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) syz_mount_image$ext4(&(0x7f00000001c0)='ext2\x00', &(0x7f0000000300)='./file0\x00', 0x0, &(0x7f0000000400), 0x1, 0x51a, &(0x7f0000000f00)="$eJzs3U1vW1kZAODXzpeTCZPMMAtmhJgyDBRU1UncmWjUBR8rhFAlRJcgtSFxoih2HMVOaUIX7X9AohIrWPIDWHfFT0DAig0skPiIQE0lFhfda7txE7txaRI38fNIt/fec27ve07Te4791vUJYGhdiYiHETEeEXcjYqZVnmtt8e3mll73dP/B8sH+g+VcJMntf+ay+rQsOn5PW3rPQkT88LsRP8kdj1vf3dtYqlTK283TyblGdWuuvrt3fb26tFZeK2+WSosLi/Of3fi0dGp9/bA63jwYSRv4jZ+lzZpu1XX24zQ1uz72PE5qNCK+fxbBBmCk1Z/xQTeE/0s+It6NiI+y538mRrKfJgBwmSXJTCQznecAwGWXz3JguXyxlQuYjny+WIx4KyLei6l8pVZvXFut7WyuNHNlszGWX12vlOdbucLZGMul5wvZ8eF56cj5jYh4JyJ+PjGZnReXa5WVQb7wAYAh9taR+f8/E835HwC45AqDbgAAcO7M/wAwfMz/ADB8zP8AMHzM/wAwfMz/ADB8zP8AMFR+cOtWuiUHre+/Xrm3u7NRu3d9pVzfKFZ3lovLte2t4lqttpZ9Z0/1pPtVarWthU9i5/7sN7fqjbn67t6dam1ns3En+17vO+Wxc+kVAPAy73z45I+5iHh4czLbomMtB3M1XG75QTcAGJiRQTcAGBirfcHweo33+NIDcEl0WaL3BYWImDx6dZIkydk2CzhDV9+X/4dh1ZH/7/tTwH/K1gs98aNAwBtO/h+GV7/5/5PyA8DFkyS5ftf8j34vBADebHL8QI/39++29r9p/ePAj1eOXvH4LFsFAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAb7b2+r/F1lrg05HPF4sRn4uI2RjLra5XyvMR8XZE/GFibGJ1vWIpUAC48PJ/y7XW/7o68/H00drx3LOJbB8RP/3l7V/cX2o0tn+flv/reXnjcau8NIj2AwAnac/T2X7hsPzp/oPl9nae7fn7dyKi0Ix/sD8eB8/jj8Zoti/EWERM/TvXOm/KdeQuXsfDRxHxhW79z8V0lgNprnx6NP5pxH61+PkX4uezuuY+/bP4/CtHTmZOqQtwYT1Jx58PJiKOPX/5uJLtuz//hWyEen2t8S+91fJBNgYexm+PfyM9xr8r/cb45Hffax5NHq97FPHBaEQ79kHH+NOOn+sR/+M+4//5i1/6qFdd8quIq9E9fmesuUZ1a66+u3d9vbq0Vl4rb5ZKiwuL85/d+LQ0l+Wo53qPyP+4ee3tXnVp/6d6xC+c0P+v9tn/X//37o++/JL4X/9Kt/j5eO8l8dM58Wt9xl+a+m2hV10af6Vr/9t69//a8dt1/SH85a97x5YNBwAGp767t7FUqZS3z/NgNCZa4QcR3cEFOxg9/NuS/jrw9nQcLL1/WPKt0w3Rfil9vGo8XumGSdLHxZPHSnqNGKeV+QIGrfmsJ+XtiHg26MYAAAAAAAAAAAAAAABdncd/kxp0HwEAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAALi8/hcAAP//R/fFXw==") write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x28011, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) clock_adjtime(0x0, &(0x7f00000001c0)={0x8b8d, 0x1000000000000, 0x2, 0x9, 0x0, 0xfffffffffffffffd, 0xe00, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10007f, 0x0, 0x0, 0x0, 0x60d2, 0x0, 0x5, 0x1, 0x2}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000100)={@cgroup=r1, 0x1f, 0x1, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x9) 13.226292794s ago: executing program 6 (id=2536): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0x10, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x800}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xf535}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xb6}}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r2, 0x0, 0x10, 0x10, &(0x7f00000006c0)="0000000005000000", &(0x7f0000000700)=""/8, 0x2f00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 11.394096974s ago: executing program 6 (id=2541): syz_open_dev$video(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 9.876293199s ago: executing program 34 (id=2541): syz_open_dev$video(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000180)={0x0, &(0x7f0000000040)}) socket$nl_sock_diag(0x10, 0x3, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x45833af92e4b39ff, 0x0) syz_open_dev$sndmidi(0x0, 0x5, 0x141101) socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) connect$can_j1939(r3, &(0x7f0000000140)={0x1d, r4}, 0x18) sendmmsg(r3, &(0x7f0000003e40), 0x3fffffffffffe3d, 0x0) 9.83643493s ago: executing program 4 (id=2546): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f00000001c0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x14008, &(0x7f00000003c0)={[{@max_dir_size_kb={'max_dir_size_kb', 0x3d, 0x1}}, {@barrier}]}, 0x1, 0x52b, &(0x7f00000015c0)="$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") openat(0xffffffffffffff9c, &(0x7f0000000440)='./bus\x00', 0x141842, 0x0) mount(&(0x7f0000000380)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x1000, 0x0) r0 = open(&(0x7f0000000240)='./bus\x00', 0x1c7102, 0x1) mmap(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x2, 0x28011, r0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) socket$inet_tcp(0x2, 0x1, 0x0) uname(&(0x7f0000000180)=""/224) 9.22997995s ago: executing program 3 (id=2548): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000002c0)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) 8.706168668s ago: executing program 4 (id=2550): socket$netlink(0x10, 0x3, 0x0) write$P9_RVERSION(0xffffffffffffffff, &(0x7f0000000040)={0x15, 0x65, 0xffff, 0x4, 0x8, '9P2000.L'}, 0x15) syz_emit_vhci(&(0x7f0000000f00)=@HCI_EVENT_PKT={0x4, @hci_ev_cmd_status={{0xf, 0x4}, {0x0, 0x1, 0x2019}}}, 0x7) munmap(&(0x7f0000001000/0x3000)=nil, 0x3000) shmget$private(0x0, 0x3000, 0x0, &(0x7f0000ffa000/0x3000)=nil) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.929504437s ago: executing program 5 (id=2555): r0 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000080), 0x2401, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(0xffffffffffffffff, 0x89e0, &(0x7f0000000200)) openat$kvm(0xffffffffffffff9c, 0x0, 0x500, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) setrlimit(0xb, &(0x7f0000000340)={0xa00000000, 0x7abc}) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) read$msr(0xffffffffffffffff, 0x0, 0x0) close(r0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_extract_tcp_res(0x0, 0x4, 0xfffffff8) sched_setaffinity(0x0, 0x0, 0x0) timer_settime(0x0, 0x0, 0x0, &(0x7f00000003c0)) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002700)=""/102392, 0x18ff8) setgroups(0x1, &(0x7f0000000080)=[0xee00]) r2 = fsopen(&(0x7f0000000080)='nfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r2, 0x1, &(0x7f0000000000)='source', &(0x7f00000000c0)='\xc7\xb1\xed\xa2\x8b\xca\xca\xbe\xa0\xc1\xd0\xfbi\xa4b\xfc\x8a\xb1{\xd0O\xf5\xfaG\x16\x81ry\x05m=\x9a461\x91`g\xc8}V\xda\x9af:\xd1\x8c\xd6\xd6\x8a\xf4 \xcb\x99\x8a\x95\x17\xd6', 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x94) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a30000000000800024000"], 0x7c}}, 0x0) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000580), r0) sendmsg$BATADV_CMD_GET_ORIGINATORS(r0, &(0x7f0000000680)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000640)={&(0x7f0000000700)={0x3c, r3, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x200}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_ELP_INTERVAL={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x840) ioctl$VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000340001002dbd7000fedbdb250100bea8c6e1120700140000ae7b2aaa34610252aa54343412582413dcf04fc6f08b0996279ae3d388b6cbceb6b6ba88570a794443d74e32db9287bd7901fd76e12a9126a8ef543767453e0edc898d85e91c3d9711d1e120ea1a006aaa4728c0da2478d5da1e0aeedf31e5feca614d5ef01c983f2b019cc102155f4b599b5d25f7d3a058f727fba4c9436833498628"], 0x1c}, 0x1, 0x0, 0x0, 0x50}, 0x4000040) rmdir(&(0x7f00000006c0)='./file0\x00') r5 = add_key(0x0, &(0x7f0000000480)={'syz', 0x2}, &(0x7f00000004c0)="d54d90db83a43a99291a1f50b08e63349911e0f010758fb465423fdd207311b38cb03015ad2dcceaad85283ab791d1b132a8c2bfd0ea7d41fe1f5433270213bfdeac0a9f882b02b3065920ecdb24b5", 0x4f, 0xffffffffffffffff) add_key$fscrypt_v1(&(0x7f0000000040), &(0x7f0000000100)={'fscrypt:', @auto=[0x37, 0x37, 0x35, 0x35, 0x33, 0x36, 0x63, 0x61, 0x32, 0x66, 0x30, 0x34, 0x35, 0x65, 0x36, 0x36]}, &(0x7f0000000400)={0x0, "05e5d3cf846fda2e61f1806faed4723537ccf5933d4ee1350e8caa020f9b7d28164544d963a3e405745726f45ffaef4229975229a00ed77ea7674320fb099fac", 0x3c}, 0x48, r5) 5.841666115s ago: executing program 5 (id=2556): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_BT_CHANNEL_POLICY(r3, 0x112, 0xa, 0x0, &(0x7f00000004c0)) 5.53972451s ago: executing program 5 (id=2557): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 5.095462397s ago: executing program 2 (id=2558): syz_open_dev$sndpcmp(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x38, r0, 0x1, 0x0, 0x0, {0x35}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x73}}}]}, 0x38}}, 0x800) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB], 0xb8}, 0x1, 0x0, 0x0, 0x4000}, 0x40) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) read$msr(r2, &(0x7f0000002000)=""/102400, 0x19000) ioctl$EXT4_IOC_GROUP_ADD(0xffffffffffffffff, 0x8080583a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r3 = socket(0x848000000015, 0x805, 0x0) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) connect$inet6(r3, 0x0, 0x0) ftruncate(0xffffffffffffffff, 0xf09) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x18, 0x0, "50e4d101a949f3f4d3479fb3110fbb83dc7a2414e74ef9c682c427e1a542df3531062020eb16da11d6707d82272beab27a1da6e527cceef0e7db687b56729c203d01b7693f6d4c81a64de132e818dea3"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000000)={@in, 0x0, 0x0, 0x0, 0x0, "d3d87bc1779df0260137ffea3b267abe0be604d99164ceede9ce200eb018abebbf99a8ae25b276a23593abc5bfbcd104244b1bcd3f8dcc8bb1afb8237f33ee41a904e61d65a7bacfec9dc935544d3f64"}, 0xd8) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0026}]}) close_range(r5, 0xffffffffffffffff, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x16, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[], 0x88}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x801, 0x0, 0x0, {0xa, 0x0, 0xa}}, @NFT_MSG_DELCHAIN={0x58, 0x5, 0xa, 0x100, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_CHAIN_COUNTERS={0x4}, @NFTA_CHAIN_USERDATA={0x17, 0xc, "341df8b4527a1e6e1226673b77828304290b5f"}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_CHAIN_USERDATA={0x4}]}, @NFT_MSG_DELSET={0x20, 0xb, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xd}, [@NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x3c, 0x16, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x2}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_FLAGS={0x8}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWFLOWTABLE={0x2c, 0x16, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x2}}}, 0x11c}}, 0x800) 4.562194636s ago: executing program 5 (id=2559): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2e}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, 0x0, 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000032680)=""/102400, 0x19000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000300)="e02742e8680d85ff978276fcf294", 0x0, 0x4002, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.464793128s ago: executing program 2 (id=2560): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r4) 3.69493669s ago: executing program 5 (id=2561): r0 = fsopen(&(0x7f0000000080)='bpf\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = fsmount(r0, 0x0, 0x0) timer_settime(0x0, 0xffffffffffffffff, &(0x7f0000000080)={{0x77359400}, {0x0, 0x9}}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r3, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) symlinkat(&(0x7f0000000000)='.\x00', r1, &(0x7f0000000140)='./file0\x00') readlinkat(r1, &(0x7f00000001c0)='./file0/../file0\x00', &(0x7f0000010980)=""/204, 0xcc) 1.913644649s ago: executing program 2 (id=2562): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18}], 0x18}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x20000253) 1.89059606s ago: executing program 3 (id=2563): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="09000000060000000800000001"], 0x48) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xd, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{r0}, &(0x7f00000004c0), &(0x7f0000000540)}, 0x20) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) 1.362007818s ago: executing program 4 (id=2564): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x208, @tick=0x2, 0x40, {0x1, 0xc2}, 0x3, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) readv(r4, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/228, 0xe4}], 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close(r0) creat(&(0x7f0000000000)='./file0\x00', 0x1c3) 1.305575389s ago: executing program 5 (id=2565): ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x882, &(0x7f0000000380)={[{@user_xattr}, {@errors_remount}, {@noblock_validity}, {@resuid}, {@inlinecrypt}, {@noauto_da_alloc}], [], 0x3d}, 0xfd, 0x475, &(0x7f0000000b00)="$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") syz_mount_image$fuse(&(0x7f0000002040), &(0x7f0000000000)='./file0\x00', 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRESDEC=0x0, @ANYBLOB=',default_p'], 0x0, 0x0, 0x0) openat$cgroup(0xffffffffffffffff, &(0x7f0000000400)='syz0\x00', 0x200002, 0x0) openat$ptp0(0xffffffffffffff9c, 0x0, 0x242, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480)={0x0, 0x0, 0x0}, &(0x7f00000000c0)=0x839352b8218490eb) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f0000002080)="6d797d42fb74562ec642068eb410c60f8cdc42cf09864b1dd1d244ec3ecfb9103306a02bd120cd2c684eee7cd734914ad7ec2bdd4402eeab7a2972f1672f126c4b5f6c5ff748548170bdf1020c2c3d09186940feb185436981cd578c3a2bdc19c16209468100cc1d67247885420cbc0ea004f07283bc4a5cf8499ad5ef4df93b2fa2eb26895ed9260cc61afbc766adadf7809b3a8f76d9f835acae2dac8abc42896374a6a82a8894552441bd0202daa10048b49d3bc74bba1e5258ab8ac5169facb96d9f68705a7709f6d9a66a9988c13d13a2b8b34d9f234e1c5fae79e4cb76ff3102184ed9032d2402087dcb3eff6bfac7bc4d2fdc9ea25f5289d52ed75ffcd83a2781eb4a23fdd078d1e53495305e3ed5bb4e060e89d6eb2b13586f7f5df32e34390d70f074b4f92c4624312698d86578f3d951021db151806fc314c98d819604d8d9572efc7dd71c0d1a9176ffbd48361908e927e03caa4c1ccc805fe755e616d983442660299e9dd34e5612eff964a45d613a832a0ef8e4410fcdb0313712795b369c08f907c91a4f20e5c18ff903e0ee410d77bc076f49debfd6e411104cace38e0318023527d1c54cec66790638c9ee70c29de0406b3483ca1663245edcda56dc9612e93f40f19cbde5cabb8816d7b75a266e404a8e5364d43c08cf5cc645b533c4b6fe349819c5374fac7a923a7a803ab138c873aee3718921043a60a0ce84df8b991dfa525f0955acbc866182f2409d032981ad824f037ef068501f955898c4500049f0b30014832e3b668f5873305ebd1e094f244caa90610be83a5f674decf451a82d9edca6664da89cad8dc212943828570fb365b41993f89c6d36c579157c4055a77eb1dad1dc466e743129e5e3098f4432fbe289111e102223ff04d02e8108b0925ce76118445efa09233e579f398ab373303c0bb64ff82ddb597040e58a61f82cc56161eaec13ed297a8daa9514468283037e5d0077c9803b69421070718fba4865e4b9c6d7d272c562cc4dd998e16fe288dac68b0bdf05eb2a02fd40b900944d10a94f2b3be9b6c6dc628044aa9eaf34e0474771c10bef03f6af2029643acc1e97efa0748cfca63aa9546bbfa6d7533c4dab0b931ac35b331aef91a80d5ea08ba35cf66e1779298d3338114c12f024970d12af8d67f9b165c15a8b7e37c14c2d512dca76cf6077e2011bb47cc993f3088027b2d53daca574e8b443fddf5c252788854be8aec357db43f2147f23061641d2910a4a503a3a9ca86b3656d37d443e5e4207bb38b6e8879bf3de21309eb90113ccaa75e1d1e0900efc17aecd35078b8f3d579d2d4fb576127278290d6a9ea379e22dcc4ad369d3405311efbc74702020d6cdb31267c2e4dfc6a34bf39c9db32da7f387760909843fbd02e9e291e838fcd8faac4c9ad909cc19440bb775070496ef69250f4cf90372c0f1835dacd4d605a69334d73b1228cce41fe3c6457a37531bbab6d8b15a8214ff3002d29016932de969f05ed64b720ad249b8164ea82fde08303277e7d5f0d3e86bd6021024bdb1d24afe3ae28cece041943db60034fa11c3b6ec7b09c117b086fa4016e68e46678a7c5e91c40d2866295247276109a8778b043b51ffe3ec33dbb665806cf6ca41e7143885b6ca920fd8caf475ddcc698a09d368c721f048efe9e0d372d9cc58deba32f81e7e7f6d53209050d72545bbf04356ea95c9bcec3b8b87f56963111c5454b30a12b8479afc26361a7e00a66c03aae8ebc3348ac2e9b0f52453a32efa9b8ec038e671122dc2965d3b7395051974088f4aa47a76327a0dffce6db0a2cd65e2da5539fd7673911d5605cadf30d85563a60afd58767b6adc549173818de01b0de192894a76bc4e62d8c9e341729e6ef37574cf63c27674081202b8ab9cb9d92d346b1c2dadb253532c1674b2440504f8430c0a2ae5829b016af877831ecce9b13743e821436a6c1c46a1176922dbf2721d9722edf72817f8d15fa5c7ecad046df91bb57b8d16244527c855a40403ddf1757c31361c8bec9b5701b5c10a1e96547fa2c93e03f264a366a96666e24d7f908f6fa4c3f26722961e70adfc4ccd413c2c05adeda400de500babfb80a4e4ae5e9e04444c55f006337c0a98c33f04ae0a6620a1acbc26b5c7d125c30ca542c64604a109c6022029da452a717b219456cca6bc9959f088a5f2360c390b531baf92ae2429a2d0b6c7a20c137a3a0050ae2216b871c03c56410d28472d1035bb870f94589b93ceb57a504bba5acb7a6f77699fc10ea96d8e8fb913ca78c0af33a8435344b71531207344d78ac349894aab972c1b471d52b266bbe4313ef2ba71e7a4680ff442a358699c1e18322dfd50c55b637b6e6d5f02fa61b0e8ae4ef7cbb6359f70028a6b60fe901b2ad97a62b5d527efaf5ebe23fccd80d80e02eabb1be14d40faac8a56b4785fe47c8ff4ac4ad7fcef2134b1ec599074dd45d2b7a5c45845787e0490d9d7db95b58b18f14ae6ccc39623ba0fdf64c8d027f1e7652cc90e82732d4292f4ab0f959a44ff906484fcf83e222088345541ba2b1c50b63711d8adb63c8556452c142de8a06f4b28a86f629cc1dc713dcddcfebc8b1420a603fb970ddaedfc82250637327beb5c0ad04947477bc9aec0914cd78cbf5060e4ef7806b3443c85dbe79b8e87807b1a8d141583998c412d89c23dca4aa16af321dead51a12a73be98bd8ebb4d58b3ccd2d67ec936f2596afff2ba4166015aa4cc6c433acf33df30e3d40a0d6468944a07d1f9eba1bb9eb03dbfb42ba790dc1e7f66ad1834fad94440bffe3879509120b6a5cd1890281bf0f4c2d1be00fbe6b2d09ebdf594110f2bda035262d4830dbe64aa3152612df991a6fe1d035e0b301cf527d74140c85ad79acc001fd2ddb3f283c21e8d253c6c4685584f753e01aae2dee4158c68e2e612f056eb602ad8199d84784e05b363292956247d1fd8e4201330d6060d66e10e316143015908554e5325550d61b8af87a92237edd75cf687919ed0164de95042cbcfe96b9102fe3b71f43bbb1fc24d9d2d0d81dad29ac18cce353ca7c4a7c32e12e451654addc5dc6a44d001c40913eaaf14dacab7037a68e9875ae51321d1852820794206fcc1cdd51443d5e3fcd1dc4dbf728d1ed8dc29437db0154c2f59d1d0d0b0048cb56ad965682afeda337b172cf6a77be36ab8424b919e493628846bbf485d5fefd73228e40295fa2070027f6f2ed565024b82d1058a1be0d0c364b765f2a58f382e378692d1ca4fc7f09f867ed4684dd82dd4c76e0e640f5f87d1c6c2fafdb733f1cef6572cb5e104ae9c94d26c81cbc9a5fd8fbe61ddbdc683b7f4030132b932abf0d66afafc9a9d3121f0ed962a14294bf0ba7b1d33d7808efa427b5531cd881b5c87ec159bc9557009d9762010a497ad52b57283cde9715b48a3e35a22aec3730a0cb476a59f438684346ce0c14f22d5f1e5826d3f670e9ef60f6dd51a11fd32eed673b9d0a12d8eeb8046b96c51cfc54c21b2c48c4a89273963b8345b01159f53f6b6589333afd871875b930d7a4e2e1f5dfb44157ca004a739b0e98562c83b1d8414220f677f2882ef6ab1039fc5f132d7f55046d0c9545033624338e2ca6bdfcdd9d78306818c6214f524a7d036c80b5506f97fe383c1cae3c73dd2a0c628bff47d13dc7d9f88a3c1bb84ccbcb82fd881c6f5e9aa7516bec86fd6bee49f4db3bbf468922f1ef37c499b011e36173edc0ccb92d13dda668cf88bb99649e606fee23d3d3bc1fcbdfb40c7d4a4a60b89c63e65d02a283137561ccacd0c71cf70c6f039ebd1d29cd58571fa07d74187a7931d3d8b7db3062594b696b0e11a587724440bd77aa01fbe26a031a4c3f16ef3ba7f7544d01e8b7dd0b74f3025fe54cd01be16ee80ab0cd7c56671390f2e9bd62b212cf3ff58da7207846bacf85858130a89a2cb45da85b3ee574e8bb43c6642a3060b6f07228951aeab0fe4f4099b86bf07ec39262acca7319df3d5d057baa794234b89eccf36da5d32e4a5283386a0a271be30f75917ffd9f6d96eb8b50a7f6a0b861c5d12a624f3630a18e3bc94eb58bc835cef0a1b77952df6443cc12f221fb8460f4862f382abe13b409056644ec46fde96e1992e79ec0acdf3066f77bbcd6cf1a24d9b49ce70bd3bc58cd898da801d6b1ab12fd7cecc29894b98d616ccff855116a8985653ca88722dc00aed777dfe1839251be42716824dc0c40b6548319f613faffb2f1900a1f563724b0dcb7aa694110d268e945747d860d4bcaba7837342e3d7f207547ba8c093e8d2a1a5e3e098d19343de5fa773642cfb1a2e49f98df7e13254787cc35b2d689db16e551917c0db1034b175d1f4647c35c4cfe8a871cc7983b052050be9d24ed6e6f70d9d4b7cdebc9ba7a761b8c5f2207761a6fe9db5d4ac975dbe398ae05ed180f028037f2d9684dd3b28135e150db8a8adc6c34d0cca2cb95e6babf8702f26062d0ff0f88fc915caee5597a006e211c61f6fa4ca685e79655af85cb3489f94cd9836af4b80cd20ed23ed8f3f4107814407715b471354c5274595963b00482f3723ca88f4eee346c78bd29d65899163d848c9844991e976ff817120a13ce40aab11632b6fdd9d00acb82a5ac7769a0a7ed5d30ae077bf393f5de5b12114e4d1a32c7297bc5e14b673c78cc675b097d56f7a35c3206b1584996972153e2446465492528e0565718252139e1cf500f05a0ca529d58f5b91fa9bb2822c21248a7a8a92d0a7be5f4d249087176c7c23e27d72bd232fca3f7b36970daf2ccd64be4a798a6c30a068fbae324b4c158715949b37c3942f0eee35b90d2fe9d322420917532f6dceaf8633f4f9618f099ece4186e1adc1323b827c984ba54c887b462e169867c2e063fb60b7906434ef362200559e4d02413667dde0c6111750995824c316305f2ddfa3035ee09fdbc28c7f3c095f5a4382ce033746394a37b4d8a61ae8c7270d3863df7382a4786d7bed9543538166dfd01d122a384a7a3de7958c0272a35856f175fa29ee100d2a0f3a6dacbbe8702cf7e8d307ac0cc7921539a371a1c2e7f834db5a903069c07ff562fee851ac9cc3f2f045146db26b13401258733c67d820d06aa068b789300ac90481f84725311544e9a2363f2ce502c02c100bb41e18a103c79bd2bf14f6b52290fa60d978c284f927829b5027ae0ea842efb3450a8ddcabf0eaff6a6a8300de389e78cee73bd8de9a2809e346ff6c79dceca4277eee4b0dae1a3e1740f306044d6e67a5783e665f9637a8f8154f9ebecf95f48146c750826fccebbb1bef247666a710cd71dcf3ac3aa9d0bccb4c4ad432bba642366e4a3b12981901358ee1d7babbb7e10737cbd8a1c159d8dd9dd521c48d2911ebb8162b51ea32185c37097c299c0e477914b49d04cabf5033a5a3660f829ce4dfb2f821e6cb19ce37df64f79eca0649ea8c6b41c6c5d08fb1dae021314609946310c833d08d46c026ddc5dbb7ac62f1123be2004729daa8156ee12bdde9529c7498c8d1a3fd59aa07b9ab7870c4e57b2f54dcc26edd206b28870cf346d741b46bcb508a5f9805ed63c6cb03a9334abfea33626b0681e59b1cecb02202c3190260b8e2963ee84d9a6b5e6be99cbf6a17e4a11e154c2a50d625ef1fd4690cb8e030e46e07c891e6db43626525d464302c44dbf65f71a485f9ea05c347b870bf63fddeaaa2336d9eca1d4c56e8a2734287f0f8a185bd8e3165a681175d1ee9d24f48c9182fd40179ea3d128c0b43c4e2c85eeefa4c932fcaf9297488a3d44e602477d94193410728a0ef0f6730e64b8cfb3e2235c6241d1252196f943d9eb9b2ce70f8c5cf21394875081f56ceb6749a8bfa43e0e545fbc6903b63c55b67ba1e064a682d58fb7117eab5407d1c998aa53a0ca190b0a4aaaa657299cee41be166a7622789b81cff0e892ba87c6ff22f29ed512ebe40cf7306b7597607de5c1c6fb2980a03cc0c6f396ecc27b6b5a3fb0a3f3375fccc397527797f6d1e98f9a873882f85a4e5b11eea65cddb12b0cec9e531a3b5de958963e20d8a520aa71588aa3ab92186e64a710ef07debe3fce6313ea69fd5bd45ca3d50e5c98ac632d5479bc0763b05509ffca67158ad8665cb858e4a8eae29ae667cfa8e39dbd15ca03846298faf7169187feae6e84deaee4ae51cd2016a867b3d11c4e6ec3ae39aeb8c8ec36a885e475f3e1e47e1fa464ef9569aba053cd066907a112612de411a5be0868543116f32d0781323c744dfeef87601981afe063122bac14b9059a68d9f356e85ec04c2767cbe79e245d791e8fb222b5134ce684f7dec8fc0630cc9aeb5fbc38dfd19628ece15342c941e52be8abf0d82ed7b0b4bf5e6184edcae53949ef5987fd7fc479fc9921f2f332ae68f5dde23a3dd0b4713c3d18913edd9ce59870f7d50fdf33f3d2e8e5045d35555b4db5f48946e1b8d8d682f0c2bdd2d0de6bfff349e5e826cfb2d18d7bb43347362f13f5e80619451527bf0d3cc617881ef718466bf2efcb5f1404c573df09e00a5c0d1648b04860ee20d9e79d4ebac94a35e0a4919b1ab0db9e9dbdce1324223850e2e137ebb0c0e1cd690a3c5c9f8576538cba5e3831e6ba56809644e389ee984df3ea8e4743d5d03619b713c984fe8b43c589b78715b9147384b5bb15af8898cd82b31aca722cbe7938f119251d9142f2661f09b49f99d8988c66198dfb9db7f225086bed1deffa78995a56f905a7ab978a9c557ea1ad306bc0cd1cd8e5acaec1e4430a42068adec4a73f891c8010f0271c38685ca66c36313d15ab5bb6948c089b1fccf7fbb340eb03446a9bcda34b2d14a11e09f71e799fda19dd85293e2b0e2ca3e68145b4ea5705592562962cc6c0b65c88d06067903716656a0a7e18ffb46162d6a0c1dac8b6c59541c8ef6bfcfa87ad59cb0e8ef6ef1d7f739c0a56cf975f9cca9ee89bac15cae197d02fc72505d23ebc6153491adccd22262979d2909fb8abd25683894e5a776824b81598a833e339a582b9ce3f8d7ce59fc3147eb3e92751867ee9c3506692b25b2d7f38d97280e85c01bf6d71a602d039aec747620d33660a9d5c9cf4010d01f9cb86db4704872307942df56f04cf6c17e57612635e769218cc91da9e2de29aac4563d695a6ebe249c14ba5332b54150a291bec28417febc4c3efae9e14a0323e561dbc80e98bf71deccff5babbcdc8015ef7a86a52781a67a4915645cfb18379084c58110f1294b2e08a6994d1a3dd4fb79437a75cdb05f36a7b3fdb449c0cea5682d37e5b0217676ff7a383a19d48860476b23ccb66779093b0f6b5b6a1ff0cef503dadf5b67382b2a501d0c13d89eec496374f43fcfa751864330479e0d1f7aa0883c2aafbb5c21b06cbea3c8b515fb1f6d061e269c3de372dc48f0b1c0a935de648a0fc4a1a32ce6aaa8432240bbc977a0ece5fd60d92ba49f1443bfc83668e8251260a5b275098e4a072d44726b91d850bd9c2485cacbf2b33be73785421c2fb259b0c1c0955339713f75ca72b9bc56a7167d8a942015385eb4f1bc3e07b23a71779d043a4f420b0fd9e889d398c955f13542c811683636b71a2fb178e951e37ed5519146c5d61e697d1148458c2f224dc6911363edd1b4d30c5cb12d0e2fb035adc33656615c05266f32c2faf5144e24086c97816c87569feb1fd41775263999ff057d9832b872506aba01db7482251f65a74c66cc01b83056970f843ef58df0d89c44f9265d5bfb50c287f330795b30848341dd26683e5df82bfc1cd1a3f2df3dae99fc38edcc614b39c8a8fa6ada4b5dff08914a92b6a16b05f13bbdbdc5e9f14808e827ee5f364ce115e12bce05122f0dea62d8dd41222fafa3c6bdecea63d3fbd0bfdef667d6ac12b6918273631bf0ec25da2783f06f77a9a0ef2490afe43f3e8b0f553c0c1078141ec0d8f426b1924bd464e4240cda50e9b8a97050360a617eb4f88baa158da8672572f641b20ab3bcbab3d38ff3c84c5c3bf309e26c8ba735503700028c0806c29e02d0a0ed73b9c5c2f2a39f57ee08b935e6e056f01733a12b08603987b14aa7fc542c65a0c03e278723127bced6ac65d2386cf847a73057d19795d5a7517e71d5e480b7380866a64da32fcd1158af9a82559898a7931535a4b75326e2769711ff857d180f16acf316130574fd37bdb658b877f06db42ab96641bc75e3d4ad7fdd9028072139dd3019b03aad32907debef345bcc57423ddfc94683884a00c5f864b8c2dd5af081fa970da251d3afc65dd360c661d8ee2ab58dc9060e2d98b39ae95bb89c319cc93c9e653bf9db205338dc5528c11a391137fe496d726f1407945b243a49a1f3a786047fc47d5e5074e0ec678f26f30cba747d50070c00323d16cff4b06089830931ca704d386140f9c201a5b50a116410be001135aeaf30d7918ccdaf35482659fbb2933e97f1a2e0fc20e6a610e37511d06d4cf931e54ce8f5ab5f688e460e3943bbbe6949a8b4ae309ee31330ece6cb9dfcae0035f3808b7295776ae7bdafffadb6113faac5cd966c2875abb7b20f1b298b48cb78c467f1be92cd3a9d0fd35b7720334274a53a6cbd041b85b6f8f9d622293f0e95a8835204de1faeb7fcdcc57fbdf0afc2e6422bc114355cb5bc979f1bf6d0fb6eb31ee98e06cdcaa1ac36ed3246d85cbdaf999da5d6a7187e8622e6d224c5549a2f2802691a08242ed44a47fc9ad627af949ec3ab5b191025ac75ee7746e2762b530a622a716edbf341e4f9e04fa5d3f77c78dcde06f3845f45c8c1954120ac5949da541882d99adbbca4b0e422e4364289ff1a903bfd1ee63faaa40ef43d3e54249909066e1727591a9632cc8440dcedf931a823e9b542d51aee43897bbbc1f652ae774c326e8400a3a6ab8d90a04e5724fb39c05875ce5afff0502bb6164bc65c107593c155da4b77f136a34c9ec39a4e70cdc4f7fec68245402b2c0fb508eac623ab41a184d3bebe5e9f24c6590c1fee571ed55a76b8554b12116a36101691397d532b46924e6ccb688ab52ffc44f8a670d542477ebd3756d6ef5373024d3f915c187a35feaf39b76453ff835f73862bad13f19e76d47c70122911431e5f71b05a9728631df66b162e708584e83349db1a68368a37cfb4e16c9987a956b3018f2f12c639bf90b5fb0f0560fa7c19887a9d12316dab9bb515cddbae2e9056a556919476b47546c0dae631a88eb8bb9da49879f56efd3d1b65d50bb01c8b4ddc20374877189915cc5824200dfac8f422364b7178f2e7799665b464ac9ec54ffd87fc8dc68e08ab178059ec02bff4ae3c683d0c96796765bdc188c1a4ef46cfa9e6376678245f8d0c907e83e6eb78ffb19e75534925b5b5bfa489fb9cd2c68f00a079c9b34dc45e76044bbfc87c75bbdc5ed0ea7ca0f249007be79116fefa74085f982f670f821ccd0bb14e1086b677f379fd1a1c96bbb4a7338e867d3f91f41b0a7eb2f1104c2ed1593691e601f2e045b3db1cac5dc0d3b302b54967558057e767c4a96f0355d97beace9fe05f0513629b2dd4e86e523d16d7e2e129264e1749b07c062d3a92d96fff5cc976855540eb441a3cef8fc59bf236c85e778b04e30fa807c3ea634af17f005fb55b55f082ca54fc154e6b9df95b951ab9612da7223efc8b63f4528dc3353a15988790d507d9fda18dc8c4adefebc12567e040fd49d2d571437bada1c08054f45545e5cb33c8db8e5b4f2d6735a7fad407fea2ac6e516016c186b7a9b5586650178b3c201eb4fcda3a22291c1f5d66557675dfc73b17edd463abd17a3ec0f1b28adeb4c294c37900002665d504610d37de5dc68fa03e16243ebca169797205d2b24cd64cb1e37328530d68c9a279e36aa0c7f718831ac30607633eab2c9e1b8d6b78649a78fd573d07f0edc18d2f52da2213e2ad44a4bfb3a80ae71d8cf57a2ae2658999d542f7c46da5a30f0f4a82296d0c95e4c6f046db42a00d8631b120a64ee260bf4dbf29103d4e2233fed2ec9ae65fb109f212f967c34e0efb52f56a9a7ab4de472f9cdb0fbcd19fed42d80216c4c717e77a5e6a9118423e0a6dc9d2f3cef598fb9bed6b4e66b279ebbc265560a471d132a854ff230673e843338dcb1ae202c797cfa59dd18eb46e313f1b0dcafdb6518c1da6b08aa1c92bd433a0b65358356a8d03a454f96add1237380049b2567a24836b7bfbdfa58186f2e295e0911dcad6c5413fb36a6e637156291efc016e8513664d515d3ddba1d2c63fa6c5a3331c3cb2f5e2eaad83a75588aca785ada46973d8a2d89686a416720a8f98e1a1eaa8c95aa0bea1dad03ec69bc4bf8300a821f67db4e0c1aab57ef1d1e06880130f6ffe76297acc62879f60e03933666a0da462b7a6b584d28041a3fbafe9a08b7a4664c46b8d40ce4f31a14b122ad74cc4a003f591e019e23cf764795d4235cc8d491c58d3be78a781a708d9fda492306a5afa7c0a43f52f39cafc6a6abc850bbbfa6254fdfd5115727210e19ec8a8857c10a9e9d5cb3001c6e04132667a30a6528e8b59661b483e5365761ac0f5c61e339833b35fd8159875177ed2b78df49ef83b45584c4609562ed2e8bb9add69e88fc0774517a15575f0250d26ae8f6f138daba5311b492c986005bef123a6fc3c1912e378cae2b64e58542293489d5a0f8b582b089c1b05f3ad0aec776b9dcfc0feb1386a98b7e2e09671a73f0eca92364d7f6da861280815b71e48934bc3d321da07878290ec81d3c5c64b8d7f55c1d2e2713edbb5fef28bc36d02302b01c4c29e5df4a9692b41e8d9364e2e408c55b9b14d3ad93889a48787df0673c3df6ba3d9222ee348199aba478e2d398b1e4ae012ca19473b3454327e5bfefb3c56576b6a6c035466f7641464806e63d7086223395a58d886b0dbedd365ce840a6990f56d697605b7d0ac60809270e4e392e89413cc94cea1cb277c4aee023bf90ded9910c96eeead4c6a10ca17151c4966f84bea565746eab573e4295e564d41bc5a6cc9df38c3d7cbd4cd618bd9f292daf95472839fe71c1edc202b6b8b5b939250934ab0dc978397fbaa7533fcce0c4b2eed8ad47779aa4b21504307c7d15e0bcb01bb60e5bafabe66e4b689e4873a1067063e17ba7d647a9a047b1b4ef7350402653b564ae1b34b8597a2357891c90ca2af6b68b794680a0511279fd213eec48dfddba7cbeeb9f9335a0679b1e6db44f27b12d898575d157c2159a86f676df18858857582bffdc006d4732257ade5dde2d1b2cf316fe2a7c5b44505cc808eae5427c43d50e9b99f9317e437df2bc640351e3e8ac249c42f782d07886b6d8875c253ee0e489f1196fa604747586df87e18a893721e6cecfe61dd82daf9b3e4f1eb745c93402c121bb639c56b91bdc77262acfa55389ede1f092733d8a69ae759f82ceda537ffbf32b65138aa3e43e8883048eccf0929de8dee297c5eee97ac7633beae01198e1b00c11276502e7660cd1f59ac619200042656c6e9757b082d374c80182290845f1bc8f2589eaf96948f148ebe675ee7fdb83e32a18eade32f99cca160a4d3504c4bea9c82cfdfe1dd80fbda7c484f2c17c20eea00", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x78, 0x0, 0xfffffffffffffc25, {0x3, 0x0, 0x0, {0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x4009, 0x7, r0, r1, 0x0, 0xe}}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) removexattr(&(0x7f0000000040)='./file0\x00', 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000240), 0x208e24b) syz_mount_image$vfat(&(0x7f0000000000), &(0x7f0000000100)='./file0\x00', 0x20080b, 0x0, 0x0, 0x0, &(0x7f0000000000)) syz_mount_image$fuse(0x0, &(0x7f0000000240)='./file0\x00', 0x40, 0x0, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x20008010) syz_mount_image$exfat(&(0x7f00000000c0), &(0x7f00000003c0)='./file0\x00', 0x800, &(0x7f0000000880)=ANY=[@ANYBLOB='iocharset=maciceland,umask=00000000000000000000005,utf8,errors=continue,iocharset=cp1251,utf8,discard,uid=', @ANYRESHEX=0xee01, @ANYBLOB="2e6572726f72175c14e8d2f3538f75652c646973636172642c00"], 0x1, 0x1524, &(0x7f0000002280)="$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") mount(0x0, 0x0, 0x0, 0x0, 0x0) 1.087891933s ago: executing program 35 (id=2564): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(0xffffffffffffffff, 0x4040534e, &(0x7f0000000340)={0x208, @tick=0x2, 0x40, {0x1, 0xc2}, 0x3, 0x0, 0x3}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup(r2, &(0x7f0000000080)='syz0\x00', 0x1ff) r3 = openat$cgroup(r2, &(0x7f0000000280)='syz0\x00', 0x200002, 0x0) r4 = openat$cgroup_type(r3, &(0x7f0000000040), 0x2, 0x0) openat$cgroup_type(r2, 0x0, 0x2, 0x0) readv(r4, &(0x7f0000001880)=[{&(0x7f00000003c0)=""/228, 0xe4}], 0x1) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000004c0)={r1, 0x3, 0x6, @remote}, 0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) syz_open_procfs(0x0, &(0x7f0000000100)='syscall\x00') r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000a999850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r8}]}}}, @IFLA_MASTER={0x8, 0x3, r8}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x1, 0x0, 0x2000001, {0x0, 0x0, 0x0, r1, {0x7}, {0xd, 0xc}, {0x8}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x20048054) close(r0) creat(&(0x7f0000000000)='./file0\x00', 0x1c3) 1.067514223s ago: executing program 2 (id=2567): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x4, 0x80100008b}, 0x0) sched_setaffinity(0x0, 0x11, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(0xffffffffffffffff, 0x0, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8b30, &(0x7f0000000400)={'wlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, 0x0) r3 = socket(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@newtfilter={0x64, 0x28, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000cc0)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r1, &(0x7f0000004340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x24, 0x0, 0x331, 0x0, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r7}]}, 0x24}}, 0x0) openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000480), 0x1a1040, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) rmdir(&(0x7f00000001c0)='./cgroup/../file0\x00') 1.066852383s ago: executing program 3 (id=2568): recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2000, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x9200000020000000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = gettid() timer_create(0x7, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r1}, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0xf3a, 0x0) write$binfmt_misc(r4, &(0x7f0000000980), 0xfdef) timer_settime(r2, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={0xffffffffffffffff, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 323.709966ms ago: executing program 2 (id=2569): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000040)='sysfs\x00', 0x0, 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000340)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@xino_on}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(0x0) chdir(&(0x7f00000000c0)='./bus\x00') r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x60) getdents(r0, &(0x7f0000000140)=""/194, 0xc2) 129.980798ms ago: executing program 3 (id=2570): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000340)='./file1\x00', 0x800, &(0x7f0000000180)=ANY=[], 0x1, 0x66e, &(0x7f0000000640)="$eJzs3c1vHGcdB/DvbDZrb1qCmyZtQJVqNRIgLBK/yAVzISCEfKhQVQ6crcRprGzSYrvIrRB1eL320D+gHHxBnJC4RyocuMCtN+RjJSQuvWBOi3Z21l6/dp00Xqf9fKLZ53nmmXnm9/xmZ/bFijbAF9b8ROoPUmR+4pW1TntzY6a1uTFzt1dPMpJkPaknqSUp/ttutz9MrifF9jDFnnKf95fmXvvok82Pu616tZTb147ab49qu/U9q9d768aTnKnKR7BrvBuPPF6xHfn1JFeqEobubJL2Lj/7+9PbPX2aB+09eiIxAo9X0X3d3GcsOVdd6J33Ab1X3trJRje4kQG32/sOAgAAAJ40g3wG/vJWtrJWnD+BcAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAOBzYX3n9/+Laqn16uMper//36jWpaqfLi8eb/MHjysOAAAAAAAAADhBL25lK2s532u3i/Jv/i+VjYvl41N5KytZzHKuZi0LWc1qljOVZKxvoMbawurq8tQAe04fuOf0pwQ6UpXNz2beAAAAAAAAAPA586vM7/z9HwAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAToMiOdMtUtzvWz2WWj3JaJJGZ8V68s9e/Un2YNgBAAAAwAkYSbaylvO9drvIxSTPld8BjOat3MtqlrKaVhZzs/xeoPupv7a5MdPa3Ji521n2j/v9/xwrjHLEdL97OPjIl8stmrmVpXLN1dzIG2nlZmrlnh2Xq3h6o/bFNZrkfiem4nuVASO7WZWdmb9Xlfu8e6zJHuaYX6aMlRk5u52RySq2Tjae6Z2Zg8/QMc/O3iNNpbYd7MU9R2rsnsxD5fxcVXbm87vDcj4UezMx3ffse+7onCdf/8uffjpZ1U/PlAZzpirb5WNzfyZm+jLx/CCZuN26d+f2rZWJJy0T+0yWmbi03Z7Pj/KTTGQ8r2Y5S/l5FrKaxYznh2VtoTr5Rd8lf0imru9qvfppkTSqZ2j3ZB0vppfKfc9nKT/OG7mZxbxc/pvOVL6d2cxmru8MXzr6DJdXfe2Qq779pQODv/KNqtJM8vuqPB06eX2mL6/999yxsq9/zU6WLgyQpWPeG+tfrSqdY/y6Kk+HvZmY6svEs0dn4g/lbWWlde/O8u2FNwc73IX3qkrnOvptMj7cG0ljT/1C52SVrd3Pjk7fswf2TZV9F7f7avv6Lm33da/U9UOv1Eb1Hm7/SNNl3/MH9s2UfZf7+g56vwXAqXfum+cazX83/9H8oPmb5u3mK6M/GPnOyAuNnP3r2e/WJ898rfZC8ed8kF/ufP4HAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAe3srb79xZaLUWl7uVRpKy0m63393dddxKvTrCQ+7+CJWM/+upzpEP6Or9nNkJxvOVp5OTm/tprfyv3W5Xa4pDtvnj305NotqVU5G6IVWGd08CTsa11btvXlt5+51vLd1deH3x9cV7c7Ozc5Nzsy/PXLu11Fqc7D4OO0rgcdh50R92JAAAAAAAAAAAAMCgTuK/Ewx7jgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAMCTbX4i9QcpMjV5dbLT3tyYaXWWXn1ny3qSWpLiF0nxYXI93SVjfcMVhx3n/aW51z76ZPPjnbHqve1rR+03mPVqyXiSM93y/mc13o2qPFJx1BSK7Rl2EnallzgYtv8HAAD//6zVBNw=") syz_open_dev$ttys(0xc, 0x2, 0x0) r0 = creat(&(0x7f0000000300)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) write$P9_RFSYNC(r0, &(0x7f0000000100)={0x7, 0x33, 0x1}, 0x7) unlink(&(0x7f0000000000)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00') close(r0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x2390024, 0x0) 0s ago: executing program 2 (id=2571): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, 0x0, 0x0, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) ioctl$BINDER_WRITE_READ(0xffffffffffffffff, 0xc0306201, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1c, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r4 = add_key$keyring(&(0x7f00000000c0), &(0x7f00000001c0)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r5, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r5, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) add_key(&(0x7f0000000200)='rxrpc\x00', 0x0, &(0x7f0000000240), 0x0, r4) kernel console output (not intermixed with test programs): 54] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.331120][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.341679][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.353151][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.368952][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.380191][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.483015][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.501054][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.511495][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.527708][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.539279][ T4254] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.556215][ T4254] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.568753][ T4254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.579505][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.587806][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.597376][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.607083][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.617788][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.629875][ T4393] netlink: 'syz.2.9': attribute type 25 has an invalid length. [ 69.638304][ T4393] netlink: 'syz.2.9': attribute type 8 has an invalid length. [ 69.660610][ T4254] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.681395][ T4254] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.692788][ T4254] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.701825][ T4254] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.914933][ T4382] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.998622][ T4382] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.089306][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.105537][ T4399] overlayfs: failed to resolve './file0': -2 [ 70.221433][ T4401] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.288336][ T4401] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.386662][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.834738][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 70.844439][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.852982][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 70.861454][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.869992][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.878629][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.887106][ T0] NOHZ tick-stop error: local softirq work is pending, handler #202!!! [ 70.895579][ T0] NOHZ tick-stop error: local softirq work is pending, handler #282!!! [ 71.318396][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.325032][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.279802][ T4424] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 72.811403][ T4440] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 73.318302][ T4445] 9pnet_fd: Insufficient options for proto=fd [ 73.533161][ T4446] lo speed is unknown, defaulting to 1000 [ 73.540603][ T4446] lo speed is unknown, defaulting to 1000 [ 73.555170][ T4446] lo speed is unknown, defaulting to 1000 [ 73.586127][ T4446] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 73.637459][ T4446] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 73.779386][ T4446] lo speed is unknown, defaulting to 1000 [ 73.787237][ T4446] lo speed is unknown, defaulting to 1000 [ 73.793976][ T4446] lo speed is unknown, defaulting to 1000 [ 73.802168][ T4446] lo speed is unknown, defaulting to 1000 [ 73.808979][ T4446] lo speed is unknown, defaulting to 1000 [ 76.437084][ T14] cfg80211: failed to load regulatory.db [ 76.879967][ T4478] netlink: 'syz.0.31': attribute type 25 has an invalid length. [ 76.922921][ T4478] netlink: 'syz.0.31': attribute type 8 has an invalid length. [ 81.232051][ T4519] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 88.400036][ T4615] fuse: Bad value for 'fd' [ 91.282616][ T4644] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 95.391486][ T4713] fuse: Bad value for 'fd' [ 96.143396][ T4718] netlink: 'syz.2.113': attribute type 25 has an invalid length. [ 96.168673][ T4718] netlink: 'syz.2.113': attribute type 8 has an invalid length. [ 99.853597][ T4772] netlink: 'syz.3.128': attribute type 25 has an invalid length. [ 99.862627][ T4772] netlink: 'syz.3.128': attribute type 8 has an invalid length. [ 103.229068][ T4812] netlink: 'syz.0.143': attribute type 25 has an invalid length. [ 103.279439][ T4816] Zero length message leads to an empty skb [ 103.332019][ T4812] netlink: 'syz.0.143': attribute type 8 has an invalid length. [ 106.481828][ T4845] capability: warning: `syz.2.154' uses deprecated v2 capabilities in a way that may be insecure [ 106.538625][ T4851] netlink: 'syz.4.156': attribute type 25 has an invalid length. [ 106.557550][ T4851] netlink: 'syz.4.156': attribute type 8 has an invalid length. [ 106.579176][ T4855] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 108.443473][ T4874] netlink: 1688 bytes leftover after parsing attributes in process `syz.3.164'. [ 111.048860][ T4909] netlink: 1688 bytes leftover after parsing attributes in process `syz.2.178'. [ 111.376742][ T4920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 117.095203][ T4957] netlink: 'syz.2.192': attribute type 72 has an invalid length. [ 118.208736][ T4973] fuse: Bad value for 'fd' [ 119.085600][ T4340] usb 4-1: new high-speed USB device number 2 using dummy_hcd [ 119.733125][ T4895] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 121.117569][ T4895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 121.150209][ T4895] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 121.748578][ T4895] usb 1-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 121.798714][ T4340] usb 4-1: unable to read config index 0 descriptor/start: -71 [ 121.802774][ T4895] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 121.828379][ T4895] usb 1-1: config 0 descriptor?? [ 121.836280][ T4340] usb 4-1: can't read configurations, error -71 [ 122.631181][ T4984] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 123.196031][ T4984] usb 2-1: config 0 interface 0 altsetting 251 endpoint 0x9 has invalid wMaxPacketSize 0 [ 123.308167][ T4984] usb 2-1: config 0 interface 0 has no altsetting 0 [ 123.465858][ T4895] usbhid 1-1:0.0: can't add hid device: -71 [ 123.493212][ T4895] usbhid: probe of 1-1:0.0 failed with error -71 [ 123.503173][ T4984] usb 2-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 123.608978][ T4984] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 123.629702][ T4895] usb 1-1: USB disconnect, device number 2 [ 123.760651][ T4984] usb 2-1: Product: syz [ 123.768046][ T4984] usb 2-1: Manufacturer: syz [ 123.776181][ T4984] usb 2-1: SerialNumber: syz [ 123.914347][ T4984] usb 2-1: config 0 descriptor?? [ 124.016736][ T4984] usb 2-1: selecting invalid altsetting 0 [ 124.711101][ T5018] fuse: Bad value for 'fd' [ 126.453346][ T4996] snd-usb-audio 2-1:0.0: Runtime PM usage count underflow! [ 126.529553][ T4984] usb 2-1: USB disconnect, device number 2 [ 127.932466][ T5038] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 129.818179][ T5045] fuse: Bad value for 'group_id' [ 131.604300][ T4311] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 131.726760][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): lo: link becomes ready [ 131.779148][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): tunl0: link becomes ready [ 131.884341][ T4311] usb 2-1: Using ep0 maxpacket: 16 [ 131.922884][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.961809][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): gre0: link becomes ready [ 131.969198][ T4311] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 131.980003][ T5078] 9pnet_fd: Insufficient options for proto=fd [ 131.992468][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): gretap0: link becomes ready [ 132.002603][ T4311] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 132.024273][ T4318] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 132.040983][ T4311] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.153876][ T5081] fuse: Bad value for 'group_id' [ 132.178244][ T4311] usb 2-1: config 0 descriptor?? [ 132.274260][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 132.281378][ T4318] usb 5-1: config 0 has an invalid interface number: 51 but max is 0 [ 132.290793][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): erspan0: link becomes ready [ 132.298487][ T4318] usb 5-1: config 0 has no interface number 0 [ 132.318828][ T4318] usb 5-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 132.332630][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.341347][ T4318] usb 5-1: Product: syz [ 132.345874][ T4318] usb 5-1: Manufacturer: syz [ 132.351409][ T4318] usb 5-1: SerialNumber: syz [ 132.388524][ T4318] usb 5-1: config 0 descriptor?? [ 132.427174][ T5085] random: crng reseeded on system resumption [ 133.050248][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.056759][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.064863][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): ip_vti0: link becomes ready [ 133.427141][ T5070] IPv6: ADDRCONF(NETDEV_CHANGE): ip6_vti0: link becomes ready [ 133.461401][ T4318] quatech2 5-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 133.496185][ T4311] hid-multitouch 0003:1FD2:6007.0001: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 133.556187][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 133.586246][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 133.600857][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 133.677219][ T4318] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 133.721261][ T5091] device bridge0 entered promiscuous mode [ 133.867597][ C1] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 138 [ 133.929612][ T4318] usb 5-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 134.085386][ C1] usb 5-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 134.174341][ T4318] usb 5-1: USB disconnect, device number 2 [ 135.512914][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.522681][ T4318] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 135.543111][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.576448][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.643229][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.664748][ T4318] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 135.740745][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.774301][ T4318] quatech2 5-1:0.51: device disconnected [ 135.806937][ T4311] usb 2-1: USB disconnect, device number 3 [ 135.824943][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 135.863633][ T5079] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 136.495980][ T5110] fuse: Bad value for 'group_id' [ 137.197853][ T5116] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.247'. [ 137.245684][ T5119] 9pnet_fd: Insufficient options for proto=fd [ 137.404674][ T5111] usb 3-1: new high-speed USB device number 2 using dummy_hcd [ 137.652247][ T5111] usb 3-1: Using ep0 maxpacket: 32 [ 137.673951][ T5111] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 137.696682][ T5111] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 137.711326][ T5111] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 137.720167][ T5111] usb 3-1: Product: syz [ 137.730227][ T5111] usb 3-1: Manufacturer: syz [ 137.735026][ T5111] usb 3-1: SerialNumber: syz [ 137.746074][ T5111] usb 3-1: config 0 descriptor?? [ 137.829447][ T5111] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 138.295010][ T5139] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 138.307875][ T5139] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 141.107283][ T4310] usb 3-1: USB disconnect, device number 2 [ 141.704289][ T4320] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 141.755700][ T5164] netlink: 44 bytes leftover after parsing attributes in process `syz.2.261'. [ 141.826277][ T5156] Bluetooth: MGMT ver 1.22 [ 141.905946][ T4320] usb 2-1: Using ep0 maxpacket: 32 [ 141.917180][ T4320] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 141.930421][ T4320] usb 2-1: config 0 has no interfaces? [ 141.938375][ T4320] usb 2-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 141.950713][ T4320] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.020864][ T4320] usb 2-1: config 0 descriptor?? [ 142.035101][ T5170] 9pnet_fd: Insufficient options for proto=fd [ 142.040783][ T5164] mmap: syz.2.261 (5164) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 142.228187][ T5164] netlink: 184 bytes leftover after parsing attributes in process `syz.2.261'. [ 143.023751][ T4984] usb 2-1: USB disconnect, device number 4 [ 143.813364][ T5192] device bridge0 entered promiscuous mode [ 144.534568][ T5200] hub 8-0:1.0: USB hub found [ 144.542199][ T5200] hub 8-0:1.0: 1 port detected [ 148.857644][ T5220] IPv6: Can't replace route, no match found [ 150.488133][ T5239] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 150.613682][ T5242] netlink: 'syz.2.288': attribute type 2 has an invalid length. [ 152.202026][ T5258] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 153.019216][ T5270] ieee802154 phy0 wpan0: encryption failed: -22 [ 156.654336][ T4340] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 156.774528][ T5328] netlink: 'syz.0.316': attribute type 25 has an invalid length. [ 156.790496][ T5328] netlink: 'syz.0.316': attribute type 8 has an invalid length. [ 156.854328][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 156.861971][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 156.914750][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 156.965602][ T4340] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 156.997200][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 157.041374][ T4340] usb 4-1: config 0 descriptor?? [ 158.029157][ T4340] hid-multitouch 0003:1FD2:6007.0002: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.3-1/input0 [ 158.437413][ T5362] fuse: Bad value for 'fd' [ 158.909465][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 158.918296][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.523461][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.590272][ T5366] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.751802][ T14] usb 4-1: USB disconnect, device number 4 [ 160.147524][ T5366] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.156608][ T5366] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.166143][ T5366] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.175178][ T5366] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.260139][ T5368] netlink: 'syz.4.329': attribute type 25 has an invalid length. [ 160.268308][ T5368] netlink: 'syz.4.329': attribute type 8 has an invalid length. [ 164.076543][ T5438] fuse: Unknown parameter 'grou00000000000000000000' [ 168.984155][ C0] sched: RT throttling activated [ 177.736585][ T5606] netlink: 8 bytes leftover after parsing attributes in process `syz.2.405'. [ 178.017119][ T4319] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 178.339776][ T4319] usb 5-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 178.353796][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 178.372549][ T4319] usb 5-1: Product: syz [ 178.378183][ T4319] usb 5-1: Manufacturer: syz [ 178.385691][ T4319] usb 5-1: SerialNumber: syz [ 178.493438][ T4319] usb 5-1: config 0 descriptor?? [ 178.525914][ T4319] usb 5-1: selecting invalid altsetting 1 [ 178.554288][ T4319] comedi comedi0: could not switch to alternate setting 1 [ 178.572988][ T4319] usbduxfast 5-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 180.061597][ T5637] overlayfs: overlapping lowerdir path [ 180.881727][ T5633] netlink: 44 bytes leftover after parsing attributes in process `syz.2.414'. [ 181.260721][ T5641] netlink: 184 bytes leftover after parsing attributes in process `syz.2.414'. [ 183.934857][ T4984] usb 5-1: USB disconnect, device number 3 [ 184.070116][ T5656] netlink: 12 bytes leftover after parsing attributes in process `syz.2.419'. [ 184.079548][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 184.094969][ T5656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.419'. [ 185.706713][ T5672] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 186.034418][ T4267] Bluetooth: hci3: command 0x0406 tx timeout [ 186.040521][ T4267] Bluetooth: hci2: command 0x0406 tx timeout [ 186.063807][ T4258] Bluetooth: hci0: command 0x0406 tx timeout [ 186.071311][ T4269] Bluetooth: hci1: command 0x0406 tx timeout [ 188.051584][ T5705] IPv6: Can't replace route, no match found [ 191.855354][ T5729] device bridge0 entered promiscuous mode [ 191.875984][ T5729] batman_adv: batadv0: Adding interface: macsec1 [ 191.882436][ T5729] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.921887][ T5729] batman_adv: batadv0: Interface activated: macsec1 [ 194.582875][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.624378][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 197.397346][ T5775] netlink: 44 bytes leftover after parsing attributes in process `syz.0.452'. [ 200.416502][ T5817] device veth0 entered promiscuous mode [ 200.426350][ T5817] device veth0 left promiscuous mode [ 202.975552][ T5837] netlink: 44 bytes leftover after parsing attributes in process `syz.0.470'. [ 204.308792][ T5845] IPv6: Can't replace route, no match found [ 206.342156][ T4340] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 206.614297][ T4340] usb 5-1: Using ep0 maxpacket: 8 [ 206.872630][ T4340] usb 5-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 206.894331][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 206.902942][ T4340] usb 5-1: Product: syz [ 206.924240][ T4340] usb 5-1: Manufacturer: syz [ 206.928897][ T4340] usb 5-1: SerialNumber: syz [ 206.940543][ T4340] usb 5-1: config 0 descriptor?? [ 207.245792][ T4340] usb 5-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 208.493340][ T5892] netlink: 44 bytes leftover after parsing attributes in process `syz.0.487'. [ 210.237193][ T4340] dvb_usb_rtl28xxu: probe of 5-1:0.0 failed with error -71 [ 210.364919][ T4340] usb 5-1: USB disconnect, device number 4 [ 213.359424][ T4267] Bluetooth: hci0: Malformed LE Event: 0x1b [ 214.439775][ T5955] IPv6: Can't replace route, no match found [ 215.145468][ T5957] netlink: 44 bytes leftover after parsing attributes in process `syz.3.502'. [ 215.794538][ T5957] netlink: 184 bytes leftover after parsing attributes in process `syz.3.502'. [ 217.278654][ T5983] netlink: 164 bytes leftover after parsing attributes in process `syz.2.510'. [ 226.559837][ T6078] tmpfs: Unknown parameter 'noswap' [ 230.408018][ T6121] IPv6: Can't replace route, no match found [ 231.925315][ T6147] fuse: Invalid rootmode [ 233.846774][ T6179] IPv6: Can't replace route, no match found [ 235.196535][ T6185] fuse: Invalid rootmode [ 241.094829][ T6247] netlink: 'syz.1.596': attribute type 10 has an invalid length. [ 241.165214][ T6247] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.173844][ T6247] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 241.319208][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.488827][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.686057][ T6250] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.774239][ T6250] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.804862][ T6250] batman_adv: batadv0: Interface deactivated: macsec1 [ 241.824469][ T6250] batman_adv: batadv0: Removing interface: macsec1 [ 241.912018][ T6250] bond0: (slave batadv0): Releasing backup interface [ 243.113672][ T6280] usb usb8: usbfs: process 6280 (syz.3.609) did not claim interface 0 before use [ 244.204227][ T4261] usb 1-1: new high-speed USB device number 3 using dummy_hcd [ 244.460149][ T4261] usb 1-1: Using ep0 maxpacket: 16 [ 244.471777][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 244.533244][ T4261] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 245.453346][ T4261] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 245.731982][ T4261] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.897009][ T4261] usb 1-1: config 0 descriptor?? [ 246.006024][ T6316] fuse: Bad value for 'rootmode' [ 246.192433][ T4261] usbhid 1-1:0.0: can't add hid device: -71 [ 246.201933][ T4261] usbhid: probe of 1-1:0.0 failed with error -71 [ 246.217436][ T4261] usb 1-1: USB disconnect, device number 3 [ 249.326895][ T6344] xt_hashlimit: overflow, rate too high: 0 [ 249.439829][ T6352] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input12 [ 249.686801][ T6356] fuse: Bad value for 'rootmode' [ 255.637073][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.643444][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.249153][ T6419] netlink: 44 bytes leftover after parsing attributes in process `syz.1.649'. [ 256.401223][ T6419] netlink: 184 bytes leftover after parsing attributes in process `syz.1.649'. [ 256.434229][ T4267] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 256.440794][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 259.198599][ T6460] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input13 [ 259.465478][ T4261] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 259.523665][ T6469] netlink: 16 bytes leftover after parsing attributes in process `syz.3.666'. [ 259.824266][ T4261] usb 5-1: Using ep0 maxpacket: 16 [ 259.830865][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 260.202546][ T4261] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 260.269213][ T4261] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 260.290331][ T4261] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 260.300149][ T4261] usb 5-1: config 0 descriptor?? [ 260.503307][ T6483] netlink: 44 bytes leftover after parsing attributes in process `syz.2.672'. [ 260.711540][ T6483] netlink: 184 bytes leftover after parsing attributes in process `syz.2.672'. [ 260.729229][ T4261] hid-multitouch 0003:1FD2:6007.0003: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.4-1/input0 [ 261.320670][ T4261] usb 5-1: USB disconnect, device number 5 [ 261.592785][ T6494] fido_id[6494]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 262.650197][ T6523] netlink: 8 bytes leftover after parsing attributes in process `syz.2.687'. [ 264.362695][ T4296] usb 3-1: new high-speed USB device number 3 using dummy_hcd [ 264.574443][ T4296] usb 3-1: Using ep0 maxpacket: 16 [ 264.934736][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 265.075897][ T4296] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 265.203870][ T4296] usb 3-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 265.312589][ T4296] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.488663][ T4296] usb 3-1: config 0 descriptor?? [ 265.939456][ T4296] hid-multitouch 0003:1FD2:6007.0004: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.2-1/input0 [ 266.201680][ T41] usb 3-1: USB disconnect, device number 3 [ 266.906825][ T6577] fido_id[6577]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.2/usb3/report_descriptor': No such file or directory [ 268.977985][ T6608] netlink: 184 bytes leftover after parsing attributes in process `syz.1.718'. [ 269.259058][ T6615] fuse: Unknown parameter 'user_i00000000000000000000' [ 271.583170][ T6641] netlink: 16 bytes leftover after parsing attributes in process `syz.3.726'. [ 273.323269][ T6657] fuse: Unknown parameter 'user_i00000000000000000000' [ 273.739442][ T6672] netlink: 184 bytes leftover after parsing attributes in process `syz.0.738'. [ 275.223417][ T6686] netlink: 44 bytes leftover after parsing attributes in process `syz.4.744'. [ 275.523963][ T6693] fuse: Unknown parameter 'user_i00000000000000000000' [ 276.363092][ T6701] netlink: 184 bytes leftover after parsing attributes in process `syz.4.744'. [ 276.683215][ T6710] kvm: pic: level sensitive irq not supported [ 276.685146][ T6710] kvm: pic: single mode not supported [ 278.071579][ T6729] netlink: 184 bytes leftover after parsing attributes in process `syz.1.758'. [ 280.301519][ T6776] netlink: 44 bytes leftover after parsing attributes in process `syz.4.775'. [ 281.044357][ T6782] netlink: 184 bytes leftover after parsing attributes in process `syz.4.775'. [ 293.646139][ T6948] IPv6: Can't replace route, no match found [ 302.444989][ T41] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 302.914304][ T41] usb 2-1: Using ep0 maxpacket: 16 [ 302.932759][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 303.006784][ T41] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 303.033724][ T41] usb 2-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 303.043574][ T41] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.096612][ T41] usb 2-1: config 0 descriptor?? [ 303.568039][ T41] hid-multitouch 0003:1FD2:6007.0005: hidraw0: USB HID v0.00 Device [HID 1fd2:6007] on usb-dummy_hcd.1-1/input0 [ 303.658340][ T7079] loop2: detected capacity change from 0 to 7 [ 303.690032][ T7079] Dev loop2: unable to read RDB block 7 [ 303.696770][ T7079] loop2: unable to read partition table [ 303.702745][ T7079] loop2: partition table beyond EOD, truncated [ 303.718889][ T7079] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 303.743006][ T41] usb 2-1: USB disconnect, device number 5 [ 303.838038][ T7085] binder: BINDER_SET_CONTEXT_MGR already set [ 303.847001][ T7085] binder: 7067:7085 ioctl 4018620d 200000000040 returned -16 [ 304.681657][ T7081] fido_id[7081]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.1/usb2/report_descriptor': No such file or directory [ 304.694492][ T3623] Dev loop2: unable to read RDB block 7 [ 304.702608][ T3623] loop2: unable to read partition table [ 304.738831][ T3623] loop2: partition table beyond EOD, truncated [ 307.626687][ T4311] usb 5-1: new high-speed USB device number 6 using dummy_hcd [ 308.124181][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 308.840330][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 308.866149][ T4311] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 308.883235][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 308.892497][ T4311] usb 5-1: Product: syz [ 308.896789][ T4311] usb 5-1: Manufacturer: syz [ 308.902100][ T4311] usb 5-1: SerialNumber: syz [ 308.909769][ T4311] usb 5-1: config 0 descriptor?? [ 308.922503][ T4311] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 311.385522][ T4340] usb 5-1: USB disconnect, device number 6 [ 311.871456][ T7154] netlink: 16 bytes leftover after parsing attributes in process `syz.2.887'. [ 312.796925][ T7155] IPv6: Can't replace route, no match found [ 314.472090][ T7169] fuse: Unknown parameter '0x0000000000000005' [ 315.215498][ T7183] input: syz1 as /devices/virtual/input/input15 [ 316.250673][ T7183] program syz.2.897 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 317.078575][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.416096][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.878756][ T7226] IPv6: Can't replace route, no match found [ 324.374316][ T4340] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 324.661978][ T4340] usb 5-1: Using ep0 maxpacket: 32 [ 324.781791][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 324.807961][ T7273] IPv6: Can't replace route, no match found [ 324.917400][ T4340] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 325.775107][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 325.877891][ T4340] usb 5-1: Product: syz [ 325.902706][ T4340] usb 5-1: Manufacturer: syz [ 325.910631][ T4340] usb 5-1: SerialNumber: syz [ 325.963504][ T4340] usb 5-1: config 0 descriptor?? [ 326.118710][ T4340] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 328.180457][ T41] usb 5-1: USB disconnect, device number 7 [ 333.385765][ T7320] IPv6: Can't replace route, no match found [ 333.614329][ T4340] usb 3-1: new high-speed USB device number 4 using dummy_hcd [ 333.824263][ T4340] usb 3-1: Using ep0 maxpacket: 32 [ 333.990813][ T4340] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 334.063089][ T4340] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 334.097541][ T4340] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.110097][ T4340] usb 3-1: Product: syz [ 334.123688][ T4340] usb 3-1: Manufacturer: syz [ 334.130199][ T4340] usb 3-1: SerialNumber: syz [ 334.180847][ T4340] usb 3-1: config 0 descriptor?? [ 334.243579][ T4340] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 336.594179][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 336.600457][ T4269] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 337.667339][ T4311] usb 3-1: USB disconnect, device number 4 [ 341.961720][ T4318] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 342.214316][ T4318] usb 5-1: Using ep0 maxpacket: 16 [ 343.024020][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 343.079490][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 343.101783][ T4318] usb 5-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 343.116550][ T4318] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 343.240038][ T4318] usb 5-1: config 0 descriptor?? [ 344.251640][ T4318] usbhid 5-1:0.0: can't add hid device: -71 [ 344.258646][ T4318] usbhid: probe of 5-1:0.0 failed with error -71 [ 344.291022][ T4318] usb 5-1: USB disconnect, device number 8 [ 344.398130][ T4261] usb 3-1: new high-speed USB device number 5 using dummy_hcd [ 344.594946][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 344.601908][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 344.626467][ T4261] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 344.644479][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.100661][ T4261] usb 3-1: Product: syz [ 345.146067][ T4261] usb 3-1: Manufacturer: syz [ 345.172736][ T4261] usb 3-1: SerialNumber: syz [ 345.223917][ T4261] usb 3-1: config 0 descriptor?? [ 345.656251][ T4261] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 345.697404][ T4261] usb 3-1: USB disconnect, device number 5 [ 347.457153][ T4269] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 347.935829][ T4269] Bluetooth: hci0: command 0x0c1a tx timeout [ 351.204504][ T7470] fuse: Bad value for 'fd' [ 352.834176][ T4311] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 353.034182][ T4311] usb 4-1: Using ep0 maxpacket: 32 [ 353.277174][ T4311] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 353.310913][ T4311] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 353.334161][ T4311] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.364309][ T4311] usb 4-1: Product: syz [ 353.368587][ T4311] usb 4-1: Manufacturer: syz [ 353.373200][ T4311] usb 4-1: SerialNumber: syz [ 353.406308][ T4311] usb 4-1: config 0 descriptor?? [ 353.425324][ T4311] usbtouchscreen: probe of 4-1:0.0 failed with error -12 [ 353.667881][ T4311] usb 4-1: USB disconnect, device number 5 [ 356.423351][ T7520] fuse: Bad value for 'fd' [ 356.444184][ T4340] usb 4-1: new high-speed USB device number 6 using dummy_hcd [ 356.794274][ T4340] usb 4-1: Using ep0 maxpacket: 16 [ 356.808166][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 356.887969][ T4340] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 356.898115][ T4340] usb 4-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 356.907376][ T4340] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 357.049774][ T4340] usb 4-1: config 0 descriptor?? [ 357.752176][ T4340] usbhid 4-1:0.0: can't add hid device: -71 [ 357.761257][ T4340] usbhid: probe of 4-1:0.0 failed with error -71 [ 357.807622][ T4340] usb 4-1: USB disconnect, device number 6 [ 359.934206][ T4311] usb 5-1: new high-speed USB device number 9 using dummy_hcd [ 360.414248][ T4311] usb 5-1: Using ep0 maxpacket: 32 [ 360.434024][ T4311] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 360.544992][ T4311] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 360.554243][ T4311] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.563398][ T4311] usb 5-1: Product: syz [ 360.570791][ T4311] usb 5-1: Manufacturer: syz [ 360.577071][ T4311] usb 5-1: SerialNumber: syz [ 360.577444][ T7559] fuse: Bad value for 'fd' [ 360.583512][ T4311] usb 5-1: config 0 descriptor?? [ 361.430614][ T4311] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 361.833258][ T14] usb 5-1: USB disconnect, device number 9 [ 362.595064][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 362.619100][ T4269] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 367.066897][ T7613] fuse: Bad value for 'fd' [ 367.414958][ T4340] usb 5-1: new high-speed USB device number 10 using dummy_hcd [ 367.683673][ T4340] usb 5-1: Using ep0 maxpacket: 32 [ 367.704993][ T4340] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 367.724640][ T4340] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 367.733950][ T4340] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.742182][ T4340] usb 5-1: Product: syz [ 367.746636][ T4340] usb 5-1: Manufacturer: syz [ 367.751493][ T4340] usb 5-1: SerialNumber: syz [ 367.792524][ T4340] usb 5-1: config 0 descriptor?? [ 367.821823][ T4340] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 368.310559][ T4340] usb 5-1: USB disconnect, device number 10 [ 368.754301][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 368.754346][ T4269] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 373.158433][ T7675] fuse: Bad value for 'fd' [ 373.579955][ T4267] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 373.746097][ T4267] Bluetooth: hci0: command 0x0c1a tx timeout [ 374.195233][ T7683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.297474][ T7680] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1047'. [ 375.761000][ T14] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 375.954332][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 375.966447][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 376.016583][ T14] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 376.034129][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.062646][ T14] usb 2-1: Product: syz [ 376.072786][ T14] usb 2-1: Manufacturer: syz [ 376.151827][ T14] usb 2-1: SerialNumber: syz [ 376.855741][ T14] usb 2-1: config 0 descriptor?? [ 376.866012][ T14] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 377.378764][ T14] usb 2-1: USB disconnect, device number 6 [ 378.180267][ T7718] fuse: Bad value for 'fd' [ 379.266087][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.305910][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.542135][ T4319] usb 3-1: new high-speed USB device number 6 using dummy_hcd [ 381.815502][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 381.855901][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 381.906445][ T4319] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 381.951826][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 383.167213][ T4319] usb 3-1: Product: syz [ 383.341158][ T4319] usb 3-1: Manufacturer: syz [ 383.384255][ T4319] usb 3-1: SerialNumber: syz [ 383.412328][ T4319] usb 3-1: config 0 descriptor?? [ 383.458860][ T4319] usb 3-1: can't set config #0, error -71 [ 383.482566][ T7775] fuse: Bad value for 'fd' [ 383.504813][ T4319] usb 3-1: USB disconnect, device number 6 [ 386.687089][ T7802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 387.004503][ T7810] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1083'. [ 387.984438][ T4311] usb 3-1: new high-speed USB device number 7 using dummy_hcd [ 388.245131][ T4311] usb 3-1: Using ep0 maxpacket: 32 [ 388.263010][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 388.500534][ T4311] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 388.540461][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.593741][ T4311] usb 3-1: Product: syz [ 388.607086][ T4311] usb 3-1: Manufacturer: syz [ 388.626376][ T4311] usb 3-1: SerialNumber: syz [ 388.799085][ T4311] usb 3-1: config 0 descriptor?? [ 388.821385][ T4311] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 388.896042][ T7831] fuse: Bad value for 'fd' [ 389.579488][ T4319] usb 3-1: USB disconnect, device number 7 [ 391.023577][ T4269] Bluetooth: hci4: command 0x0406 tx timeout [ 391.606290][ T7852] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1097'. [ 392.375124][ T7854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 395.598284][ T4311] usb 3-1: new high-speed USB device number 8 using dummy_hcd [ 396.174291][ T4311] usb 3-1: Using ep0 maxpacket: 32 [ 396.209486][ T4311] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 396.221802][ T4311] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 396.231748][ T4311] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 396.240284][ T4311] usb 3-1: Product: syz [ 396.264916][ T4311] usb 3-1: Manufacturer: syz [ 396.269595][ T4311] usb 3-1: SerialNumber: syz [ 396.329959][ T4311] usb 3-1: config 0 descriptor?? [ 396.342331][ T4311] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 396.572125][ T4311] usb 3-1: USB disconnect, device number 8 [ 401.988674][ T4632] usb 3-1: new high-speed USB device number 9 using dummy_hcd [ 402.018397][ T7969] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1130'. [ 402.197783][ T4632] usb 3-1: Using ep0 maxpacket: 32 [ 402.210454][ T4632] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 402.250195][ T4632] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 402.279912][ T4632] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.318171][ T4632] usb 3-1: Product: syz [ 402.338514][ T4632] usb 3-1: Manufacturer: syz [ 402.364239][ T4632] usb 3-1: SerialNumber: syz [ 402.384967][ T4632] usb 3-1: config 0 descriptor?? [ 402.398721][ T4632] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 402.983848][ T41] usb 3-1: USB disconnect, device number 9 [ 404.298601][ T8007] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 404.451105][ T8005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.865701][ T8011] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1142'. [ 408.914328][ T41] usb 4-1: new high-speed USB device number 7 using dummy_hcd [ 409.099426][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 409.108765][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 409.139730][ T41] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 409.161620][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.181545][ T41] usb 4-1: Product: syz [ 409.192501][ T41] usb 4-1: Manufacturer: syz [ 409.208837][ T41] usb 4-1: SerialNumber: syz [ 409.224086][ T41] usb 4-1: config 0 descriptor?? [ 409.239969][ T41] usbtouchscreen: probe of 4-1:0.0 failed with error -12 [ 409.699517][ T4261] usb 4-1: USB disconnect, device number 7 [ 409.952106][ T8066] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 414.024918][ T8103] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1166'. [ 414.241263][ T8103] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1166'. [ 415.112614][ T8122] fuse: Bad value for 'fd' [ 419.475322][ T8166] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1182'. [ 420.126638][ T8166] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1182'. [ 420.173056][ T8182] fuse: Bad value for 'fd' [ 425.377250][ T8249] fuse: Bad value for 'fd' [ 429.444397][ T4261] usb 3-1: new high-speed USB device number 10 using dummy_hcd [ 429.945116][ T8307] fuse: Bad value for 'fd' [ 430.004133][ T4261] usb 3-1: Using ep0 maxpacket: 32 [ 430.011780][ T4261] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 431.336007][ T4261] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 431.387344][ T4261] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 431.403983][ T4261] usb 3-1: Product: syz [ 431.409483][ T4261] usb 3-1: Manufacturer: syz [ 431.418552][ T4261] usb 3-1: SerialNumber: syz [ 431.439170][ T4261] usb 3-1: config 0 descriptor?? [ 431.448690][ T4261] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 432.983626][ T41] usb 3-1: USB disconnect, device number 10 [ 434.165098][ T8326] overlayfs: overlapping lowerdir path [ 435.682112][ T8350] fuse: Bad value for 'fd' [ 436.798549][ T41] usb 4-1: new high-speed USB device number 8 using dummy_hcd [ 438.520833][ T41] usb 4-1: Using ep0 maxpacket: 32 [ 438.536060][ T41] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 438.572463][ T41] usb 4-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 439.511259][ T41] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 439.521468][ T41] usb 4-1: Product: syz [ 439.525952][ T41] usb 4-1: Manufacturer: syz [ 439.530707][ T41] usb 4-1: SerialNumber: syz [ 439.537242][ T41] usb 4-1: config 0 descriptor?? [ 439.543125][ T41] usb 4-1: can't set config #0, error -71 [ 439.575178][ T41] usb 4-1: USB disconnect, device number 8 [ 439.617310][ T8388] fuse: Bad value for 'fd' [ 439.957046][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.964897][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 443.765124][ T8437] fuse: Bad value for 'fd' [ 443.774332][ T14] usb 2-1: new high-speed USB device number 7 using dummy_hcd [ 444.110763][ T14] usb 2-1: Using ep0 maxpacket: 32 [ 444.176291][ T14] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 444.295723][ T14] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 444.396938][ T14] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 444.436134][ T14] usb 2-1: Product: syz [ 444.487256][ T14] usb 2-1: Manufacturer: syz [ 444.521951][ T14] usb 2-1: SerialNumber: syz [ 444.535707][ T14] usb 2-1: config 0 descriptor?? [ 445.406738][ T14] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 446.690278][ T41] usb 2-1: USB disconnect, device number 7 [ 447.744129][ T8474] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1265'. [ 452.154689][ T4318] usb 5-1: new high-speed USB device number 11 using dummy_hcd [ 452.161936][ T8529] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1284'. [ 452.575686][ T4318] usb 5-1: Using ep0 maxpacket: 32 [ 452.586111][ T4318] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 452.609800][ T4318] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 452.623777][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 452.636556][ T4318] usb 5-1: Product: syz [ 452.643141][ T4318] usb 5-1: Manufacturer: syz [ 452.699505][ T4318] usb 5-1: SerialNumber: syz [ 452.743507][ T4318] usb 5-1: config 0 descriptor?? [ 453.786269][ T4318] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 456.544822][ T4319] usb 5-1: USB disconnect, device number 11 [ 458.562686][ T8567] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1295'. [ 459.156161][ T8577] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.334131][ T8574] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1297'. [ 461.924233][ T4632] usb 1-1: new high-speed USB device number 4 using dummy_hcd [ 461.964093][ T4319] usb 5-1: new high-speed USB device number 12 using dummy_hcd [ 462.114318][ T4632] usb 1-1: Using ep0 maxpacket: 16 [ 462.124415][ T4632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 462.164127][ T4319] usb 5-1: Using ep0 maxpacket: 32 [ 462.180334][ T4319] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 462.213191][ T4632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 462.244907][ T4632] usb 1-1: New USB device found, idVendor=1fd2, idProduct=6007, bcdDevice= 0.00 [ 462.255319][ T4319] usb 5-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 462.283923][ T4319] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 462.292549][ T4632] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 462.301340][ T4319] usb 5-1: Product: syz [ 462.461610][ T4632] usb 1-1: config 0 descriptor?? [ 462.466924][ T4319] usb 5-1: Manufacturer: syz [ 462.471549][ T4319] usb 5-1: SerialNumber: syz [ 462.498540][ T4319] usb 5-1: config 0 descriptor?? [ 462.535509][ T4319] usbtouchscreen: probe of 5-1:0.0 failed with error -12 [ 464.735989][ T4632] usbhid 1-1:0.0: can't add hid device: -71 [ 464.744190][ T4632] usbhid: probe of 1-1:0.0 failed with error -71 [ 464.777375][ T4632] usb 1-1: USB disconnect, device number 4 [ 464.861909][ T4319] usb 5-1: USB disconnect, device number 12 [ 468.404232][ T41] usb 3-1: new high-speed USB device number 11 using dummy_hcd [ 468.597276][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 469.317323][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 469.462128][ T41] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 469.673944][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 469.691667][ T41] usb 3-1: Product: syz [ 469.703170][ T41] usb 3-1: Manufacturer: syz [ 469.719166][ T41] usb 3-1: SerialNumber: syz [ 469.745461][ T41] usb 3-1: config 0 descriptor?? [ 469.809245][ T41] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 471.401852][ T4632] usb 3-1: USB disconnect, device number 11 [ 476.644932][ T14] usb 1-1: new high-speed USB device number 5 using dummy_hcd [ 476.924188][ T14] usb 1-1: Using ep0 maxpacket: 32 [ 476.931790][ T14] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 476.962366][ T14] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 476.983135][ T14] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 476.999826][ T14] usb 1-1: Product: syz [ 477.026139][ T14] usb 1-1: Manufacturer: syz [ 477.045611][ T14] usb 1-1: SerialNumber: syz [ 477.096504][ T14] usb 1-1: config 0 descriptor?? [ 477.136746][ T14] usbtouchscreen: probe of 1-1:0.0 failed with error -12 [ 479.690503][ T8786] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 479.703502][ T8786] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 481.085232][ T4318] usb 1-1: USB disconnect, device number 5 [ 484.108660][ T8824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 484.193688][ T8824] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1364'. [ 484.657623][ T8830] netlink: 'syz.4.1365': attribute type 4 has an invalid length. [ 484.665553][ T8830] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1365'. [ 485.117356][ T8833] fuse: Bad value for 'fd' [ 489.324557][ T8891] fuse: Bad value for 'fd' [ 495.653665][ T8950] fuse: Bad value for 'fd' [ 500.486850][ T9001] fuse: Bad value for 'fd' [ 501.355676][ T9019] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1412'. [ 501.396001][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.402551][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.614759][ T9019] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1412'. [ 504.574501][ T9064] fuse: Bad value for 'fd' [ 505.361606][ T9071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.522825][ T9071] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1425'. [ 507.155580][ T4984] kworker/dying (4984) used greatest stack depth: 20488 bytes left [ 509.370405][ T9113] fuse: Bad value for 'fd' [ 511.391652][ T9132] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1443'. [ 514.176459][ T9160] fuse: Bad value for 'fd' [ 515.593921][ T9182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 515.666513][ T9182] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1458'. [ 519.114058][ T9220] fuse: Bad value for 'fd' [ 520.204415][ T41] usb 3-1: new high-speed USB device number 12 using dummy_hcd [ 520.461196][ T41] usb 3-1: Using ep0 maxpacket: 32 [ 520.749399][ T41] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 520.900695][ T41] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 520.951194][ T41] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 521.044205][ T41] usb 3-1: Product: syz [ 521.047285][ T9244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 521.053472][ T41] usb 3-1: Manufacturer: syz [ 521.060675][ T9244] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1480'. [ 521.076012][ T41] usb 3-1: SerialNumber: syz [ 521.123075][ T41] usb 3-1: config 0 descriptor?? [ 521.143251][ T41] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 525.526168][ T4318] usb 3-1: USB disconnect, device number 12 [ 528.257597][ T9290] fuse: Bad value for 'fd' [ 530.092243][ T9299] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 531.489646][ T9299] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1498'. [ 536.007915][ T9374] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 537.953890][ T9386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 538.161545][ T9386] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1521'. [ 545.145935][ T9457] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1538'. [ 546.327393][ T9471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.432892][ T9470] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1543'. [ 553.295669][ T9554] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 557.310463][ T9597] o2cb: This node has not been configured. [ 557.316622][ T9597] o2cb: Cluster check failed. Fix errors before retrying. [ 558.114966][ T9597] (syz.2.1578,9597,1):user_dlm_register:674 ERROR: status = -22 [ 558.122630][ T9597] (syz.2.1578,9597,1):dlmfs_mkdir:438 ERROR: Error -22 could not register domain "file0" [ 559.214878][ T4632] usb 1-1: new high-speed USB device number 6 using dummy_hcd [ 559.421083][ T4632] usb 1-1: Using ep0 maxpacket: 32 [ 559.469820][ T4632] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 559.875983][ T4632] usb 1-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 560.030240][ T4632] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 560.066957][ T4632] usb 1-1: Product: syz [ 561.139466][ T4632] usb 1-1: Manufacturer: syz [ 561.144418][ T4632] usb 1-1: SerialNumber: syz [ 561.158196][ T4632] usb 1-1: config 0 descriptor?? [ 561.268170][ T4632] usbtouchscreen: probe of 1-1:0.0 failed with error -12 [ 562.261256][ T4632] usb 1-1: USB disconnect, device number 6 [ 562.836623][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.845544][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.560219][ T9681] debugfs: Directory 'ttyS3' with parent 'caif_serial' already present! [ 564.648063][ T9684] netlink: 'syz.1.1602': attribute type 4 has an invalid length. [ 564.655875][ T9684] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1602'. [ 566.338115][ T4319] usb 2-1: new high-speed USB device number 8 using dummy_hcd [ 567.255222][ T4319] usb 2-1: Using ep0 maxpacket: 32 [ 567.306662][ T4319] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 567.395586][ T9713] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.453238][ T9713] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1611'. [ 567.708318][ T4319] usb 2-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 567.735311][ T4319] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 567.743509][ T4319] usb 2-1: Product: syz [ 567.760801][ T4319] usb 2-1: Manufacturer: syz [ 567.773168][ T4319] usb 2-1: SerialNumber: syz [ 567.790730][ T4319] usb 2-1: config 0 descriptor?? [ 567.820774][ T4319] usbtouchscreen: probe of 2-1:0.0 failed with error -12 [ 570.072595][ T4632] usb 2-1: USB disconnect, device number 8 [ 570.757793][ T9737] netlink: 'syz.1.1616': attribute type 4 has an invalid length. [ 570.765774][ T9737] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1616'. [ 571.353372][ T9753] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 571.365289][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1623'. [ 572.291807][ T9779] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1629'. [ 572.524173][ T4319] usb 3-1: new high-speed USB device number 13 using dummy_hcd [ 572.764191][ T4319] usb 3-1: Using ep0 maxpacket: 32 [ 572.771336][ T4319] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 572.809199][ T4319] usb 3-1: New USB device found, idVendor=3823, idProduct=0001, bcdDevice= 3.eb [ 572.832421][ T4319] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 572.851628][ T4319] usb 3-1: Product: syz [ 572.856100][ T4319] usb 3-1: Manufacturer: syz [ 572.860721][ T4319] usb 3-1: SerialNumber: syz [ 572.877281][ T4319] usb 3-1: config 0 descriptor?? [ 572.896429][ T4319] usbtouchscreen: probe of 3-1:0.0 failed with error -12 [ 576.264394][ T41] usb 3-1: USB disconnect, device number 13 [ 576.960355][ T9819] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.973208][ T9819] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1640'. [ 577.306270][ T9826] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1643'. [ 580.586719][ T9863] netlink: 'syz.2.1653': attribute type 4 has an invalid length. [ 580.594527][ T9863] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1653'. [ 582.549993][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 582.580169][ T9875] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1657'. [ 583.742988][ T9896] netlink: 'syz.2.1663': attribute type 72 has an invalid length. [ 585.204199][ T9913] netlink: 'syz.0.1667': attribute type 4 has an invalid length. [ 585.211944][ T9913] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1667'. [ 587.297327][ T9943] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1673'. [ 587.333668][ T9937] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 587.539422][ T9946] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1677'. [ 587.583913][ T9948] netlink: 'syz.4.1676': attribute type 72 has an invalid length. [ 587.709444][ T9952] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1678'. [ 588.802198][ T9952] netlink: 184 bytes leftover after parsing attributes in process `syz.0.1678'. [ 591.479762][ T9995] netlink: 'syz.0.1689': attribute type 72 has an invalid length. [ 592.342880][ T26] audit: type=1326 audit(1751361494.935:2): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 593.357467][ T26] audit: type=1326 audit(1751361494.935:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 593.380211][ T26] audit: type=1326 audit(1751361494.935:4): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=232 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 593.930391][ T26] audit: type=1326 audit(1751361494.935:5): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 593.957139][ T26] audit: type=1326 audit(1751361494.935:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 594.111903][ T26] audit: type=1326 audit(1751361494.935:7): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 594.301148][ T26] audit: type=1326 audit(1751361494.935:8): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 594.324211][ T26] audit: type=1326 audit(1751361494.935:9): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=425 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 595.212079][ T26] audit: type=1326 audit(1751361494.935:10): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 595.729413][T10029] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 596.474164][ T26] audit: type=1326 audit(1751361494.935:11): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=10001 comm="syz.4.1692" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f5ff838e929 code=0x7ffc0000 [ 596.496417][ C0] vkms_vblank_simulate: vblank timer overrun [ 596.674787][T10034] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1699'. [ 596.941543][T10034] netlink: 184 bytes leftover after parsing attributes in process `syz.4.1699'. [ 598.091138][T10056] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.1703'. [ 600.766223][T10090] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1715'. [ 601.042829][T10090] netlink: 184 bytes leftover after parsing attributes in process `syz.2.1715'. [ 604.206316][T10115] Illegal XDP return value 2876965538 on prog (id 319) dev syz_tun, expect packet loss! [ 604.257379][T10106] netlink: 1752 bytes leftover after parsing attributes in process `syz.4.1719'. [ 605.962317][T10138] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1729'. [ 608.955794][T10184] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 609.103996][T10184] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1742'. [ 610.084928][T10191] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1744'. [ 614.660323][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1759'. [ 616.045942][T10250] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.1764'. [ 624.276311][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.285456][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 632.709552][T10366] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 632.720944][T10366] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 636.021495][T10404] IPv6: Can't replace route, no match found [ 638.468817][T10430] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 638.480055][T10430] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 642.419714][T10461] IPv6: Can't replace route, no match found [ 647.572359][T10525] IPv6: Can't replace route, no match found [ 651.329787][T10554] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1840'. [ 652.319677][T10554] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1840'. [ 659.714639][T10626] netlink: 'syz.4.1862': attribute type 4 has an invalid length. [ 659.722553][T10626] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1862'. [ 661.285370][ T4310] usb 3-1: new full-speed USB device number 14 using dummy_hcd [ 661.705917][ T4310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 661.734517][ T4310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 661.773457][ T4310] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 661.787372][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 661.796181][ T4310] usb 3-1: Product: syz [ 661.800939][ T4310] usb 3-1: Manufacturer: syz [ 661.809549][ T4310] usb 3-1: SerialNumber: syz [ 662.793089][ T4310] usb 3-1: skipping empty audio interface (v1) [ 662.859679][ T4310] snd-usb-audio: probe of 3-1:1.0 failed with error -22 [ 662.892178][T10654] netlink: 44 bytes leftover after parsing attributes in process `syz.1.1870'. [ 662.898088][ T4310] usb 3-1: USB disconnect, device number 14 [ 662.929786][T10352] udevd[10352]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 663.096240][T10654] netlink: 184 bytes leftover after parsing attributes in process `syz.1.1870'. [ 668.066204][ T4632] usb 4-1: new high-speed USB device number 9 using dummy_hcd [ 668.266103][ T4632] usb 4-1: Using ep0 maxpacket: 8 [ 668.273677][ T4632] usb 4-1: config 0 has no interfaces? [ 668.311908][ T4632] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 668.339030][ T4632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 668.508702][ T4632] usb 4-1: config 0 descriptor?? [ 668.962413][T10713] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 668.974415][T10713] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 668.999920][ T4310] usb 4-1: USB disconnect, device number 9 [ 669.416982][T10744] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 670.807865][T10757] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1894'. [ 672.810220][T10777] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 672.826455][T10777] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 676.660901][T10817] overlayfs: failed to resolve './file0': -2 [ 682.639732][T10869] overlayfs: failed to resolve './file0': -2 [ 684.654207][T10888] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 685.010570][T10899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 685.021363][T10899] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1931'. [ 685.718969][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.725671][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 686.080200][T10920] overlayfs: failed to resolve './file0': -2 [ 695.160721][T11014] ======================================================= [ 695.160721][T11014] WARNING: The mand mount option has been deprecated and [ 695.160721][T11014] and is ignored by this kernel. Remove the mand [ 695.160721][T11014] option from the mount to silence this warning. [ 695.160721][T11014] ======================================================= [ 695.196417][T11014] fuse: Bad value for 'fd' [ 699.718206][T11068] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1973'. [ 703.961427][T11120] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1983'. [ 705.034313][T11132] netlink: 1624 bytes leftover after parsing attributes in process `syz.0.1986'. [ 709.709749][T11200] netlink: 1624 bytes leftover after parsing attributes in process `syz.3.2001'. [ 713.204010][ T14] usb 3-1: new high-speed USB device number 15 using dummy_hcd [ 713.364187][ T14] usb 3-1: device descriptor read/64, error -71 [ 714.441270][T11253] overlayfs: failed to resolve './file0': -2 [ 714.523960][ T14] usb 3-1: new high-speed USB device number 16 using dummy_hcd [ 714.683988][ T14] usb 3-1: device descriptor read/64, error -71 [ 714.824126][ T14] usb usb3-port1: attempt power cycle [ 716.364352][ T14] usb 3-1: new high-speed USB device number 17 using dummy_hcd [ 716.596912][ T14] usb 3-1: device not accepting address 17, error -71 [ 719.694167][ T41] usb 1-1: new high-speed USB device number 7 using dummy_hcd [ 719.884135][ T41] usb 1-1: device descriptor read/64, error -71 [ 719.942388][T11308] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 720.154001][ T41] usb 1-1: new high-speed USB device number 8 using dummy_hcd [ 720.272316][T11314] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 720.354143][ T41] usb 1-1: device descriptor read/64, error -71 [ 720.485185][ T41] usb usb1-port1: attempt power cycle [ 720.904036][ T41] usb 1-1: new high-speed USB device number 9 using dummy_hcd [ 720.973238][ T41] usb 1-1: device descriptor read/8, error -71 [ 721.038463][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 721.143761][T11325] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2036'. [ 721.254041][ T41] usb 1-1: new high-speed USB device number 10 using dummy_hcd [ 721.384660][ T41] usb 1-1: device descriptor read/8, error -71 [ 721.534219][ T41] usb usb1-port1: unable to enumerate USB device [ 726.493114][T11376] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 726.548582][T11376] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2052'. [ 730.585664][T11429] netlink: 'syz.2.2068': attribute type 4 has an invalid length. [ 730.598495][T11429] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2068'. [ 730.888822][T11433] netlink: 1752 bytes leftover after parsing attributes in process `syz.2.2070'. [ 731.675755][T11445] tmpfs: Bad value for 'mpol' [ 734.644371][T11475] netlink: 'syz.0.2081': attribute type 4 has an invalid length. [ 734.652229][T11475] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2081'. [ 736.023147][T11481] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2082'. [ 739.288728][T11522] netlink: 1752 bytes leftover after parsing attributes in process `syz.0.2094'. [ 742.224207][T11557] IPv6: Can't replace route, no match found [ 744.501039][T11585] loop0: detected capacity change from 0 to 512 [ 744.760171][T11586] loop1: detected capacity change from 0 to 1024 [ 745.316491][T11586] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (24866!=20869) [ 745.328360][T11586] EXT4-fs error (device loop1): __ext4_iget:5077: inode #3: block 1803188595: comm syz.1.2111: invalid block [ 745.343335][T11586] EXT4-fs (loop1): no journal found [ 745.436064][T11585] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 745.574129][T11585] ext4 filesystem being mounted at /438/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 746.520612][T11600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2115'. [ 747.857004][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 748.092927][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 748.144904][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 751.351553][T11635] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 752.221204][T11643] netlink: 'syz.2.2127': attribute type 4 has an invalid length. [ 752.229194][T11643] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2127'. [ 755.418419][T11669] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 758.383382][T11702] netlink: 'syz.4.2146': attribute type 4 has an invalid length. [ 758.383510][T11702] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2146'. [ 759.846177][T11714] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 761.075592][T11724] device pim6reg1 entered promiscuous mode [ 764.895505][T11750] xt_connbytes: Forcing CT accounting to be enabled [ 764.902649][T11750] Cannot find set identified by id 0 to match [ 766.023994][ T4632] usb 4-1: new high-speed USB device number 10 using dummy_hcd [ 766.086821][T11766] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 766.288942][ T4632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 766.679767][ T4632] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 766.701468][ T4632] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 766.723540][ T4632] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 766.733646][ T4632] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 766.746040][ T4632] usb 4-1: config 0 descriptor?? [ 767.718099][ T4632] plantronics 0003:047F:FFFF.0006: unknown main item tag 0xd [ 767.855889][ T4632] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 767.912656][ T4632] plantronics 0003:047F:FFFF.0006: unknown main item tag 0x0 [ 768.044939][ T4632] plantronics 0003:047F:FFFF.0006: No inputs registered, leaving [ 768.306897][ T4632] plantronics 0003:047F:FFFF.0006: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 769.303075][ T4632] usb 4-1: USB disconnect, device number 10 [ 770.506642][T11819] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 770.969947][T11808] fido_id[11808]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.3/usb4/report_descriptor': No such file or directory [ 783.382343][T11922] loop4: detected capacity change from 0 to 2048 [ 783.633797][T11922] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 783.844082][ T4310] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 784.685622][ T4310] usb 3-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 784.715128][ T4310] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 784.804264][ T4310] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 784.813454][ T4310] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 784.968500][ T4310] usb 3-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 784.999140][ T4310] usb 3-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 785.027785][ T4310] usb 3-1: Product: syz [ 785.031998][ T4310] usb 3-1: Manufacturer: syz [ 785.076060][ T4310] cdc_wdm: probe of 3-1:1.0 failed with error -22 [ 785.184853][T11943] loop0: detected capacity change from 0 to 512 [ 785.299744][ T4310] usb 3-1: USB disconnect, device number 19 [ 785.349398][T11943] EXT4-fs error (device loop0): ext4_orphan_get:1400: inode #15: comm syz.0.2206: casefold flag without casefold feature [ 785.363650][T11943] EXT4-fs error (device loop0): ext4_orphan_get:1405: comm syz.0.2206: couldn't read orphan inode 15 (err -117) [ 785.666857][T11943] EXT4-fs (loop0): mounted filesystem without journal. Quota mode: writeback. [ 786.312156][T11943] loop0: detected capacity change from 512 to 0 [ 787.133539][ T75] loop: Write error at byte offset 9223372036854776831, length 1024. [ 787.150251][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 787.160124][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 787.169076][T11943] EXT4-fs (loop0): I/O error while writing superblock [ 787.256245][ C1] I/O error, dev loop0, sector 72 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 787.269218][ T4252] EXT4-fs warning (device loop0): htree_dirblock_to_tree:1083: inode #2: lblock 0: comm syz-executor: error -5 reading directory block [ 787.650739][ C1] I/O error, dev loop0, sector 12 op 0x0:(READ) flags 0x80700 phys_seg 8 prio class 2 [ 787.660559][ C1] I/O error, dev loop0, sector 10 op 0x0:(READ) flags 0x3000 phys_seg 1 prio class 2 [ 787.690053][ T4427] EXT4-fs error (device loop0): __ext4_get_inode_loc_noinmem:4630: inode #2: block 5: comm kworker/u4:13: unable to read itable block [ 788.254262][ T4372] loop: Write error at byte offset 9223372036854776831, length 1024. [ 788.262758][ C0] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 788.272296][ C0] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 788.284347][ T4427] EXT4-fs (loop0): I/O error while writing superblock [ 788.308460][ T4252] EXT4-fs (loop0): unmounting filesystem. [ 788.331337][ T4341] loop: Write error at byte offset 9223372036854776831, length 1024. [ 788.356425][ C1] I/O error, dev loop0, sector 2 op 0x1:(WRITE) flags 0x3800 phys_seg 1 prio class 2 [ 788.366009][ C1] Buffer I/O error on dev loop0, logical block 1, lost sync page write [ 788.374360][ T4252] EXT4-fs (loop0): I/O error while writing superblock [ 788.486915][T11970] loop1: detected capacity change from 0 to 512 [ 788.541892][T11970] EXT4-fs (loop1): mounting ext3 file system using the ext4 subsystem [ 788.627323][T11970] EXT4-fs (loop1): invalid journal inode [ 788.647589][T11970] EXT4-fs (loop1): can't get journal size [ 788.721673][T11970] EXT4-fs (loop1): 1 truncate cleaned up [ 788.734019][T11970] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 789.418378][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 789.467888][ T4427] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.611410][T11985] loop4: detected capacity change from 0 to 512 [ 789.629190][ T4427] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.676511][T11985] EXT4-fs: Ignoring removed mblk_io_submit option [ 789.686309][T11985] EXT4-fs: Invalid want_extra_isize 14 [ 789.727322][ T4427] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 789.792921][T11305] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x80700 phys_seg 1 prio class 2 [ 791.042521][ T4427] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.425710][T11985] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2227'. [ 791.642645][T11985] bridge0: port 2(bridge_slave_1) entered disabled state [ 791.651346][T11985] bridge0: port 1(bridge_slave_0) entered disabled state [ 791.814056][T11996] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2227'. [ 792.692940][T11995] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2229'. [ 792.820424][T12008] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 792.831531][T12008] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 792.841015][T12008] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 792.849095][T12008] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 792.860751][T12008] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 792.868161][T12008] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 792.908800][T12006] lo speed is unknown, defaulting to 1000 [ 793.070113][T12013] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input37 [ 793.736400][T12006] chnl_net:caif_netlink_parms(): no params data found [ 793.766380][T12021] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2237'. [ 794.714499][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 794.914374][ T4269] Bluetooth: hci1: command 0x0409 tx timeout [ 795.004050][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 795.031803][T12006] device bridge_slave_0 entered promiscuous mode [ 795.040578][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 795.093956][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 795.163630][T12006] device bridge_slave_1 entered promiscuous mode [ 796.607097][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 797.613384][ T4269] Bluetooth: hci1: command 0x041b tx timeout [ 797.693942][T11939] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 797.694076][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 797.839711][T12006] team0: Port device team_slave_0 added [ 797.877196][T11939] usb 4-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 797.911918][T11939] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 797.952533][T11939] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 797.967161][T11939] usb 4-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 797.991049][T12006] team0: Port device team_slave_1 added [ 798.020595][T11939] usb 4-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 798.050389][T11939] usb 4-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 798.078987][T11939] usb 4-1: Product: syz [ 798.093466][T11939] usb 4-1: Manufacturer: syz [ 798.124977][T11939] cdc_wdm: probe of 4-1:1.0 failed with error -22 [ 798.206146][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 798.213123][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.318046][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 798.324714][T11939] usb 4-1: USB disconnect, device number 11 [ 798.410927][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 798.428336][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 798.488340][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 798.534849][T12082] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2252'. [ 799.222803][T12006] device hsr_slave_0 entered promiscuous mode [ 799.429650][T12006] device hsr_slave_1 entered promiscuous mode [ 799.647922][T12008] Bluetooth: hci1: command 0x040f tx timeout [ 799.737278][T12006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 799.913191][T12006] Cannot create hsr debugfs directory [ 802.317328][T12008] Bluetooth: hci1: command 0x0419 tx timeout [ 804.427159][ T4427] device hsr_slave_0 left promiscuous mode [ 804.449957][ T4427] device hsr_slave_1 left promiscuous mode [ 804.483161][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 804.540883][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 804.583276][ T4427] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 804.621895][ T4427] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 804.636286][T12139] netlink: 'syz.1.2264': attribute type 4 has an invalid length. [ 804.662650][ T4427] device bridge_slave_1 left promiscuous mode [ 804.673497][T12139] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2264'. [ 804.695772][ T4427] bridge0: port 2(bridge_slave_1) entered disabled state [ 804.820239][ T4427] device bridge_slave_0 left promiscuous mode [ 804.828661][ T4427] bridge0: port 1(bridge_slave_0) entered disabled state [ 805.183532][ T4427] device bridge0 left promiscuous mode [ 805.206957][ T4427] device veth1_macvtap left promiscuous mode [ 805.223961][ T4427] device veth0_macvtap left promiscuous mode [ 805.242742][ T4427] device veth1_vlan left promiscuous mode [ 805.257571][ T4427] device veth0_vlan left promiscuous mode [ 806.987601][T12165] loop3: detected capacity change from 0 to 1024 [ 808.316435][ T4427] team0 (unregistering): Port device team_slave_1 removed [ 808.416775][ T4427] team0 (unregistering): Port device team_slave_0 removed [ 808.537766][ T4427] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 808.614554][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.622384][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.677032][ T4427] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 809.101471][ T4427] bond0 (unregistering): Released all slaves [ 809.185991][T12181] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2272'. [ 809.471439][T12006] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 809.616109][T12006] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 809.645656][T12193] netlink: 'syz.1.2274': attribute type 4 has an invalid length. [ 809.653447][T12193] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2274'. [ 809.697681][T12006] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 809.842850][T12006] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 812.655937][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 812.710329][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 812.760354][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 812.821879][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 812.898160][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 812.947577][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 812.995893][ T9048] bridge0: port 1(bridge_slave_0) entered blocking state [ 813.004220][ T9048] bridge0: port 1(bridge_slave_0) entered forwarding state [ 813.043789][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 813.072828][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 813.105431][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 813.114383][ T9048] bridge0: port 2(bridge_slave_1) entered blocking state [ 813.121533][ T9048] bridge0: port 2(bridge_slave_1) entered forwarding state [ 813.158551][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 813.177958][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 813.234766][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 813.318823][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 813.360053][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 813.386517][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 813.405760][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 813.741538][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 813.785853][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 813.812145][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 813.871335][ T9048] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 816.554082][T12298] loop2: detected capacity change from 0 to 512 [ 816.742576][T12305] IPv6: Can't replace route, no match found [ 817.972906][T12298] EXT4-fs warning (device loop2): ext4_enable_quotas:7066: Failed to enable quota tracking (type=0, err=-13, ino=3). Please run e2fsck to fix. [ 817.988434][T12298] EXT4-fs (loop2): mount failed [ 818.398446][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 818.427713][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 818.466853][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 820.697314][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 820.999454][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 821.372695][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 821.424068][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 821.485146][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 821.622673][ T4527] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 821.657525][T12006] device veth0_vlan entered promiscuous mode [ 822.382070][T12006] device veth1_vlan entered promiscuous mode [ 823.755506][ T4401] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 823.874143][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 823.905965][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 824.005625][T12006] device veth0_macvtap entered promiscuous mode [ 824.570275][T12006] device veth1_macvtap entered promiscuous mode [ 824.689077][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.700383][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.714389][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 824.726666][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.740309][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 824.751462][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 824.762611][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 824.776322][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 824.812026][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 824.846688][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 824.870632][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 824.888272][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 825.055708][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 825.078268][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 825.089160][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 825.104951][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 825.145810][T12006] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.155342][T12006] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.164978][T12006] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.176253][T12006] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 825.677969][ T4670] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 825.721036][ T4670] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 825.792012][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 826.583815][ T9440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 826.642960][ T9440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 826.736559][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 835.922057][T12477] loop5: detected capacity change from 0 to 2048 [ 835.994788][T12477] UDF-fs: INFO Mounting volume 'LinuxUDF', timestamp 2022/11/22 14:59 (1000) [ 836.268366][T12480] netlink: 1624 bytes leftover after parsing attributes in process `syz.2.2336'. [ 841.389837][T12531] netlink: 1624 bytes leftover after parsing attributes in process `syz.5.2348'. [ 844.924131][ T4632] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 845.115756][ T4632] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 845.211446][ T4632] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 845.216120][T12579] loop1: detected capacity change from 0 to 512 [ 845.298820][ T4632] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 845.302671][T12579] EXT4-fs: Ignoring removed mblk_io_submit option [ 845.356264][ T4632] usb 6-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 845.430154][T12579] EXT4-fs error (device loop1): ext4_get_branch:178: inode #13: block 2: comm syz.1.2362: invalid block [ 845.443455][ T4632] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 845.493573][T12579] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2362: invalid indirect mapped block 10 (level 1) [ 845.558001][T12579] EXT4-fs error (device loop1): ext4_free_branches:1030: inode #13: comm syz.1.2362: invalid indirect mapped block 8 (level 1) [ 845.618216][T12579] EXT4-fs (loop1): 1 truncate cleaned up [ 845.654398][T12579] EXT4-fs (loop1): mounted filesystem without journal. Quota mode: none. [ 845.738173][ T4632] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 845.828736][ T4632] usb 6-1: Product: syz [ 845.847309][ T4632] usb 6-1: Manufacturer: syz [ 845.935102][ T4632] cdc_wdm 6-1:1.0: skipping garbage [ 845.956777][T12579] EXT4-fs error (device loop1): ext4_read_inode_bitmap:168: comm syz.1.2362: Inode bitmap for bg 0 marked uninitialized [ 846.168891][ T4259] EXT4-fs error (device loop1): htree_dirblock_to_tree:1112: inode #2: block 13: comm syz-executor: bad entry in directory: rec_len % 4 != 0 - offset=0, inode=3722870784, rec_len=32551, size=1024 fake=0 [ 846.251837][ T4632] cdc_wdm 6-1:1.0: skipping garbage [ 846.304732][ T4632] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 846.352506][ T4632] usb 6-1: USB disconnect, device number 2 [ 846.450095][ T4259] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm syz-executor: Invalid inode table block 1501279374 in block_group 0 [ 846.817872][ T4259] EXT4-fs error (device loop1) in ext4_reserve_inode_write:5915: Corrupt filesystem [ 846.889333][ T4259] EXT4-fs error (device loop1): ext4_dirty_inode:6119: inode #2: comm syz-executor: mark_inode_dirty error [ 846.968143][ T4501] EXT4-fs error (device loop1): __ext4_get_inode_loc:4507: comm kworker/u4:15: Invalid inode table block 1501279374 in block_group 0 [ 847.018342][ T4259] EXT4-fs (loop1): unmounting filesystem. [ 848.158122][ T4501] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.400851][ T4501] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.517264][ T4501] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 848.628381][ T4501] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 849.796952][T12199] usb 5-1: new high-speed USB device number 13 using dummy_hcd [ 849.822928][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 849.839871][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 849.849633][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 850.257241][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 850.266511][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 850.319872][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 850.356258][T12199] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 850.400229][T12199] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 850.479093][T12199] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 850.579103][T12639] lo speed is unknown, defaulting to 1000 [ 850.703158][T12199] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 850.708703][T12652] netlink: 'syz.5.2379': attribute type 4 has an invalid length. [ 850.725523][T12652] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2379'. [ 851.068381][T12199] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 851.213659][T12199] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 851.289182][T12199] usb 5-1: Product: syz [ 851.323801][T12199] usb 5-1: Manufacturer: syz [ 852.021034][T12199] cdc_wdm 5-1:1.0: skipping garbage [ 852.066350][T12199] cdc_wdm 5-1:1.0: skipping garbage [ 852.093105][T12199] cdc_wdm 5-1:1.0: skipping garbage [ 852.112447][T12199] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 852.261824][ T4319] usb 5-1: USB disconnect, device number 13 [ 853.080557][ T4269] Bluetooth: hci3: command 0x0409 tx timeout [ 854.139657][T12697] overlayfs: missing 'lowerdir' [ 855.095536][T12639] chnl_net:caif_netlink_parms(): no params data found [ 855.204151][ T4269] Bluetooth: hci3: command 0x041b tx timeout [ 855.683152][T12639] bridge0: port 1(bridge_slave_0) entered blocking state [ 855.710151][T12639] bridge0: port 1(bridge_slave_0) entered disabled state [ 855.719061][T12639] device bridge_slave_0 entered promiscuous mode [ 855.739570][T12639] bridge0: port 2(bridge_slave_1) entered blocking state [ 855.747624][T11939] usb 5-1: new high-speed USB device number 14 using dummy_hcd [ 855.821036][T12639] bridge0: port 2(bridge_slave_1) entered disabled state [ 855.829528][T12639] device bridge_slave_1 entered promiscuous mode [ 855.862940][T12718] netlink: 'syz.3.2391': attribute type 4 has an invalid length. [ 855.870837][T12718] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'. [ 855.959031][T11939] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 856.030347][T11939] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 856.092081][T11939] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 856.189710][T11939] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 856.343486][ T4501] device hsr_slave_0 left promiscuous mode [ 856.358316][ T4501] device hsr_slave_1 left promiscuous mode [ 856.377870][ T4501] device bridge_slave_1 left promiscuous mode [ 857.065162][T11939] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 857.081816][ T4501] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.099700][T11939] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 857.109602][T11939] usb 5-1: Product: syz [ 857.116273][T11939] usb 5-1: Manufacturer: syz [ 857.150559][ T4501] device bridge_slave_0 left promiscuous mode [ 857.165236][T11939] cdc_wdm 5-1:1.0: skipping garbage [ 857.171400][ T4501] bridge0: port 1(bridge_slave_0) entered disabled state [ 857.180949][T11939] cdc_wdm 5-1:1.0: skipping garbage [ 857.187540][T11939] cdc_wdm 5-1:1.0: skipping garbage [ 857.196279][T11939] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 857.234970][T12008] Bluetooth: hci3: command 0x040f tx timeout [ 857.311221][ T4501] device bridge0 left promiscuous mode [ 857.324326][ T4501] device veth1_macvtap left promiscuous mode [ 857.330871][ T4501] device veth0_macvtap left promiscuous mode [ 857.337182][ T4501] device veth1_vlan left promiscuous mode [ 857.344134][ T4501] device veth0_vlan left promiscuous mode [ 857.361904][ T14] usb 5-1: USB disconnect, device number 14 [ 858.637382][T12756] overlayfs: missing 'lowerdir' [ 859.315455][T12008] Bluetooth: hci3: command 0x0419 tx timeout [ 859.401684][ T4501] team0 (unregistering): Port device team_slave_1 removed [ 859.512847][ T4501] team0 (unregistering): Port device team_slave_0 removed [ 859.619645][ T4501] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 859.711093][ T4501] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 860.168034][ T4501] bond0 (unregistering): Released all slaves [ 860.251466][T12639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 860.297586][T12639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 860.317752][T11939] lo speed is unknown, defaulting to 1000 [ 861.054837][T12639] team0: Port device team_slave_0 added [ 861.132481][T12639] team0: Port device team_slave_1 added [ 861.621001][ T4318] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 861.647290][T12639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 861.690797][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.722939][T12639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 861.766426][T12639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 861.777926][T12639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 861.845341][T12639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 861.859193][ T4318] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 861.874001][ T4318] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 861.890218][ T4318] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 861.900727][ T4318] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 861.946808][ T4318] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 861.961082][T12639] device hsr_slave_0 entered promiscuous mode [ 861.978370][T12639] device hsr_slave_1 entered promiscuous mode [ 861.984700][ T4318] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 861.993191][ T4318] usb 5-1: Product: syz [ 862.019530][T12639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 862.027608][ T4318] usb 5-1: Manufacturer: syz [ 862.047830][T12639] Cannot create hsr debugfs directory [ 862.050860][ T4318] cdc_wdm 5-1:1.0: skipping garbage [ 862.095102][ T4318] cdc_wdm 5-1:1.0: skipping garbage [ 862.100355][ T4318] cdc_wdm 5-1:1.0: skipping garbage [ 862.113965][ T4318] cdc_wdm: probe of 5-1:1.0 failed with error -22 [ 863.581754][ T4318] usb 5-1: USB disconnect, device number 15 [ 864.937289][T12832] loop3: detected capacity change from 0 to 256 [ 865.149415][T12832] FAT-fs (loop3): Directory bread(block 64) failed [ 865.594618][T12832] FAT-fs (loop3): Directory bread(block 65) failed [ 865.601284][T12832] FAT-fs (loop3): Directory bread(block 66) failed [ 865.610427][T12832] FAT-fs (loop3): Directory bread(block 67) failed [ 865.618367][T12832] FAT-fs (loop3): Directory bread(block 68) failed [ 865.653348][T12832] FAT-fs (loop3): Directory bread(block 69) failed [ 865.684275][T12832] FAT-fs (loop3): Directory bread(block 70) failed [ 865.699965][T12832] FAT-fs (loop3): Directory bread(block 71) failed [ 865.751871][T12832] FAT-fs (loop3): Directory bread(block 72) failed [ 865.758701][T12832] FAT-fs (loop3): Directory bread(block 73) failed [ 865.761496][T12639] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 866.706197][T12639] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 867.896174][T12639] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 868.782880][T12639] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 869.117519][T12879] loop2: detected capacity change from 0 to 256 [ 869.170813][T12639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 869.216844][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 869.242394][ T4427] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 869.283324][T12639] 8021q: adding VLAN 0 to HW filter on device team0 [ 869.287551][T12879] exFAT-fs (loop2): failed to load upcase table (idx : 0x00010000, chksum : 0xb89b369d, utbl_chksum : 0xe619d30d) [ 869.350293][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 869.380922][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 869.405989][ T41] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 869.437744][ T4350] bridge0: port 1(bridge_slave_0) entered blocking state [ 869.444944][ T4350] bridge0: port 1(bridge_slave_0) entered forwarding state [ 869.489426][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 869.531810][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 869.569703][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 869.599434][ T4350] bridge0: port 2(bridge_slave_1) entered blocking state [ 869.606633][ T4350] bridge0: port 2(bridge_slave_1) entered forwarding state [ 869.620277][ T41] usb 6-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 869.648670][ T41] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 869.659634][ T41] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 869.669712][ T41] usb 6-1: config 1 interface 0 altsetting 0 has an invalid endpoint with address 0x0, skipping [ 869.736191][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 869.772335][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 869.791760][ T41] usb 6-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 869.829030][ T41] usb 6-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 869.829576][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 869.879770][ T41] usb 6-1: Product: syz [ 869.891072][T12893] loop2: detected capacity change from 0 to 512 [ 869.898821][ T41] usb 6-1: Manufacturer: syz [ 869.899884][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 869.929367][ T41] cdc_wdm 6-1:1.0: skipping garbage [ 869.943099][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 869.977594][ T41] cdc_wdm 6-1:1.0: skipping garbage [ 869.983485][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 870.001785][ T41] cdc_wdm: probe of 6-1:1.0 failed with error -22 [ 870.023700][T12893] EXT4-fs error (device loop2): ext4_orphan_get:1400: inode #15: comm syz.2.2431: casefold flag without casefold feature [ 870.046928][ T1277] ieee802154 phy0 wpan0: encryption failed: -22 [ 870.053305][ T1277] ieee802154 phy1 wpan1: encryption failed: -22 [ 870.117233][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 870.123696][T11939] usb 6-1: USB disconnect, device number 3 [ 870.172012][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 870.194303][T12893] EXT4-fs error (device loop2): ext4_orphan_get:1405: comm syz.2.2431: couldn't read orphan inode 15 (err -117) [ 870.228546][T12893] EXT4-fs (loop2): mounted filesystem without journal. Quota mode: writeback. [ 870.228771][ T4350] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 871.042464][ T9440] kworker/u4:17: attempt to access beyond end of device [ 871.042464][ T9440] loop3: rw=1048577, sector=1224, nr_sectors = 544 limit=256 [ 871.067441][ T26] kauditd_printk_skb: 27 callbacks suppressed [ 871.067456][ T26] audit: type=1804 audit(1751361773.665:39): pid=12893 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.2431" name="/newroot/517/file0/bus" dev="loop2" ino=18 res=1 errno=0 [ 871.120398][T12639] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 871.131726][T12893] EXT4-fs (loop2): re-mounted. Quota mode: writeback. [ 871.166582][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 871.184716][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 871.204353][ T9440] kworker/u4:17: attempt to access beyond end of device [ 871.204353][ T9440] loop3: rw=1048577, sector=1800, nr_sectors = 128 limit=256 [ 871.243331][T12904] loop4: detected capacity change from 0 to 1024 [ 871.273669][ T4253] EXT4-fs (loop2): unmounting filesystem. [ 871.284264][T12904] EXT4-fs: Ignoring removed nobh option [ 871.289825][T12904] EXT4-fs: Ignoring removed bh option [ 871.345132][T12904] EXT4-fs: Warning: mounting with an experimental mount option 'dioread_nolock' for blocksize < PAGE_SIZE [ 871.352092][ T9440] kworker/u4:17: attempt to access beyond end of device [ 871.352092][ T9440] loop3: rw=1048577, sector=1960, nr_sectors = 4280 limit=256 [ 871.608179][ T9440] kworker/u4:17: attempt to access beyond end of device [ 871.608179][ T9440] loop3: rw=1048577, sector=6240, nr_sectors = 5960 limit=256 [ 872.147799][T12904] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 872.479219][ T9440] kworker/u4:17: attempt to access beyond end of device [ 872.479219][ T9440] loop3: rw=1048577, sector=12200, nr_sectors = 9664 limit=256 [ 872.502417][T12904] EXT4-fs error (device loop4): ext4_mb_mark_diskspace_used:3841: comm syz.4.2434: Allocating blocks 385-513 which overlap fs metadata [ 872.689494][ T9440] kworker/u4:17: attempt to access beyond end of device [ 872.689494][ T9440] loop3: rw=1048577, sector=21864, nr_sectors = 4440 limit=256 [ 872.732982][T12921] EXT4-fs (loop4): pa ffff888074f2f000: logic 16, phys. 129, len 24 [ 872.741632][T12921] EXT4-fs error (device loop4): ext4_mb_release_inode_pa:4881: group 0, free 0, pa_free 8 [ 872.816051][ T9440] kworker/u4:17: attempt to access beyond end of device [ 872.816051][ T9440] loop3: rw=1048577, sector=26304, nr_sectors = 2952 limit=256 [ 872.881470][ T9440] kworker/u4:17: attempt to access beyond end of device [ 872.881470][ T9440] loop3: rw=1048577, sector=29256, nr_sectors = 3072 limit=256 [ 873.013445][ T9440] kworker/u4:17: attempt to access beyond end of device [ 873.013445][ T9440] loop3: rw=1048577, sector=32328, nr_sectors = 1472 limit=256 [ 873.870113][T12639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 874.015196][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 874.033112][ T4501] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 875.066789][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 875.747232][T12962] loop3: detected capacity change from 0 to 512 [ 875.856051][T12962] EXT4-fs error (device loop3): ext4_orphan_get:1400: inode #15: comm syz.3.2444: casefold flag without casefold feature [ 875.938907][T12962] EXT4-fs error (device loop3): ext4_orphan_get:1405: comm syz.3.2444: couldn't read orphan inode 15 (err -117) [ 876.024619][T12962] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 876.123568][T12962] EXT4-fs (loop3): re-mounted. Quota mode: writeback. [ 877.258339][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 877.294609][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 877.368486][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 877.396373][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 877.397020][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 877.442940][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 877.486286][ T33] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 877.544464][T12639] device veth0_vlan entered promiscuous mode [ 877.589608][T12639] device veth1_vlan entered promiscuous mode [ 877.717999][T12639] device veth0_macvtap entered promiscuous mode [ 877.727787][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 877.746697][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 877.767162][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 877.849757][T12990] loop2: detected capacity change from 0 to 2048 [ 877.870696][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 877.911973][T12990] UDF-fs: bad mount option "ÿÿÿÿ" or missing value [ 877.947280][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 878.667317][T12639] device veth1_macvtap entered promiscuous mode [ 879.750186][T12998] Cannot find add_set index 0 as target [ 879.760325][ T4372] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 879.859398][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.300858][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.357780][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.438524][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.516259][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 880.589800][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.667059][T12639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 880.712722][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 880.765021][ T46] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 880.850054][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.904000][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 880.949410][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 880.990511][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.044450][T12639] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 881.149916][T12639] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 881.915491][T12639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 882.002494][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 882.030804][T13026] loop5: detected capacity change from 0 to 512 [ 882.039257][ T9440] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 882.113312][T12639] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.161386][T12639] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.200592][T13026] EXT4-fs error (device loop5): ext4_orphan_get:1400: inode #15: comm syz.5.2456: casefold flag without casefold feature [ 882.221751][T12639] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.258025][T13026] EXT4-fs error (device loop5): ext4_orphan_get:1405: comm syz.5.2456: couldn't read orphan inode 15 (err -117) [ 882.287938][T13026] EXT4-fs (loop5): mounted filesystem without journal. Quota mode: writeback. [ 882.292398][T12639] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 882.425686][T13026] EXT4-fs (loop5): re-mounted. Quota mode: writeback. [ 883.038911][T12006] EXT4-fs (loop5): unmounting filesystem. [ 883.452495][ T4389] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.516448][ T4389] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.551782][ T4427] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 883.574206][ T4427] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 883.587146][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 883.631176][ T4670] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 883.903187][T13052] loop6: detected capacity change from 0 to 512 [ 883.916031][T13051] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 883.986991][T13052] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 884.061916][T13052] EXT4-fs (loop6): encrypted files will use data=ordered instead of data journaling mode [ 884.141577][T13052] EXT4-fs (loop6): 1 truncate cleaned up [ 884.182871][T13052] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: none. [ 886.564406][T12639] EXT4-fs (loop6): unmounting filesystem. [ 886.631062][T13091] loop6: detected capacity change from 0 to 512 [ 886.884753][T13091] EXT4-fs error (device loop6): ext4_orphan_get:1400: inode #15: comm syz.6.2467: casefold flag without casefold feature [ 886.899858][T13091] EXT4-fs error (device loop6): ext4_orphan_get:1405: comm syz.6.2467: couldn't read orphan inode 15 (err -117) [ 887.035116][T13091] EXT4-fs (loop6): mounted filesystem without journal. Quota mode: writeback. [ 887.683468][T13091] EXT4-fs (loop6): re-mounted. Quota mode: writeback. [ 887.824594][T12639] EXT4-fs (loop6): unmounting filesystem. [ 887.998707][T13111] loop6: detected capacity change from 0 to 256 [ 888.058576][T13111] exFAT-fs (loop6): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x3963664b, utbl_chksum : 0xe619d30d) [ 888.134036][ T14] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 888.294155][ T14] usb 6-1: device descriptor read/64, error -71 [ 888.358794][T13117] loop4: detected capacity change from 0 to 2048 [ 888.430029][T13120] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 888.451931][T13117] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 888.601992][ T14] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 889.693878][T13132] EXT4-fs error (device loop4): ext4_mb_generate_buddy:1102: group 0, block bitmap and bg descriptor inconsistent: 0 vs 150994969 free clusters [ 889.711429][T13132] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 31 with max blocks 33 with error 28 [ 889.724895][T13132] EXT4-fs (loop4): This should not happen!! Data will be lost [ 889.724895][T13132] [ 889.734975][T13132] EXT4-fs (loop4): Total free blocks count 0 [ 889.741118][T13132] EXT4-fs (loop4): Free/Dirty block details [ 889.747319][T13132] EXT4-fs (loop4): free_blocks=2415919504 [ 889.753387][T13132] EXT4-fs (loop4): dirty_blocks=64 [ 889.758738][T13132] EXT4-fs (loop4): Block reservation details [ 889.765361][T13132] EXT4-fs (loop4): i_reserved_data_blocks=4 [ 889.920931][ T14] usb 6-1: device descriptor read/64, error -71 [ 890.415621][ T14] usb usb6-port1: attempt power cycle [ 891.652387][ T4372] EXT4-fs (loop4): Delayed block allocation failed for inode 15 at logical offset 0 with max blocks 1 with error 28 [ 896.115565][T13180] loop5: detected capacity change from 0 to 256 [ 896.141560][T13180] exFAT-fs (loop5): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 896.184351][T13180] exFAT-fs (loop5): Medium has reported failures. Some data may be lost. [ 897.268502][T13190] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2490'. [ 897.320418][T13180] exFAT-fs (loop5): failed to load upcase table (idx : 0x0000ff98, chksum : 0xc64c1d22, utbl_chksum : 0xe619d30d) [ 905.706668][T13271] loop5: detected capacity change from 0 to 2048 [ 905.783150][T13278] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2514'. [ 905.842305][T13282] kvm: emulating exchange as write [ 905.965973][T13271] loop5: p1 < > p3 [ 906.030485][T13271] loop5: p3 size 134217728 extends beyond EOD, truncated [ 906.054767][T13290] loop4: detected capacity change from 0 to 128 [ 906.122380][ T3623] loop5: p1 < > p3 [ 906.141967][ T3623] loop5: p3 size 134217728 extends beyond EOD, truncated [ 906.198883][T13290] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: none. [ 906.595902][T13290] ext4 filesystem being mounted at /478/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 907.305406][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2517'. [ 907.387376][T13304] loop3: detected capacity change from 0 to 512 [ 907.556559][T11265] udevd[11265]: inotify_add_watch(7, /dev/loop5p3, 10) failed: No such file or directory [ 907.596661][T12847] udevd[12847]: inotify_add_watch(7, /dev/loop5p1, 10) failed: No such file or directory [ 907.623724][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 907.736189][T13304] EXT4-fs (loop3): mounted filesystem without journal. Quota mode: writeback. [ 907.790386][T13304] ext4 filesystem being mounted at /542/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 908.024102][ T26] audit: type=1800 audit(1751361810.595:40): pid=13304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2518" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 909.791578][ T26] audit: type=1800 audit(1751361810.645:41): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2518" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 909.908822][ T26] audit: type=1800 audit(1751361812.385:42): pid=13319 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.2518" name="file2" dev="loop3" ino=16 res=0 errno=0 [ 910.467989][ T4265] EXT4-fs (loop3): unmounting filesystem. [ 913.992865][T13366] loop6: detected capacity change from 0 to 1024 [ 914.260498][T13366] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 914.340809][T13366] hfsplus: xattr searching failed [ 914.770981][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 914.798532][T12639] hfsplus: xattr search failed [ 914.810415][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 914.892896][T12639] hfsplus: xattr search failed [ 914.900083][T12639] syz-executor: attempt to access beyond end of device [ 914.900083][T12639] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 914.923110][T12639] Buffer I/O error on dev loop6, logical block 458752, async page read [ 914.933413][T12639] hfsplus: unable to mark blocks free: error -5 [ 914.940226][T12639] hfsplus: can't free extent [ 914.947748][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 914.954620][T12639] hfsplus: xattr search failed [ 914.959643][T12639] syz-executor: attempt to access beyond end of device [ 914.959643][T12639] loop6: rw=0, sector=917504, nr_sectors = 2 limit=1024 [ 914.973933][T12639] Buffer I/O error on dev loop6, logical block 458752, async page read [ 914.982303][T12639] hfsplus: unable to mark blocks free: error -5 [ 914.989014][T12639] hfsplus: can't free extent [ 915.023446][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 915.031752][T12639] hfsplus: xattr search failed [ 915.069419][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 915.644543][T12639] hfsplus: xattr search failed [ 915.650523][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 915.703810][T12639] hfsplus: xattr search failed [ 915.736032][T12639] hfsplus: inconsistency in B*Tree (128,1,255,1,0) [ 915.765898][T12639] hfsplus: xattr search failed [ 916.769970][ T4527] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 917.602080][ T4527] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.269573][ T4527] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.379365][T13422] loop4: detected capacity change from 0 to 512 [ 918.520625][ T4527] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 918.543113][T13422] EXT4-fs (loop4): mounted filesystem without journal. Quota mode: writeback. [ 918.605668][T13422] ext4 filesystem being mounted at /481/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 918.637860][ C0] vkms_vblank_simulate: vblank timer overrun [ 918.914327][ T4269] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 918.924374][ T4269] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 918.933169][ T4269] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 918.942834][ T4269] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 918.956515][ T4269] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 918.964836][ T4269] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 919.469205][ T4254] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #12: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 919.574638][ T4254] EXT4-fs error (device loop4): ext4_ext_check_inode:520: inode #12: comm syz-executor: pblk 0 bad header/extent: invalid extent entries - magic f30a, entries 1, max 4(4), depth 0(0) [ 920.992939][T12008] Bluetooth: hci3: command 0x0409 tx timeout [ 923.031190][T13470] RDS: rds_bind could not find a transport for fe80::1a, load rds_tcp or rds_rdma? [ 923.070099][T12008] Bluetooth: hci3: command 0x041b tx timeout [ 925.907644][T12008] Bluetooth: hci3: command 0x040f tx timeout [ 926.164669][ T4254] EXT4-fs (loop4): unmounting filesystem. [ 927.311819][T13432] chnl_net:caif_netlink_parms(): no params data found [ 927.823494][T13515] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 927.868324][T13515] overlayfs: "xino" feature enabled using 2 upper inode bits. [ 927.948057][T12008] Bluetooth: hci3: command 0x0419 tx timeout [ 927.991873][T13521] loop3: detected capacity change from 0 to 1024 [ 928.052289][ T4269] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 928.061858][ T4269] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 928.070013][ T4269] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 928.108408][ T4269] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 928.123686][ T4269] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 928.132332][ T4269] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 928.225404][T13432] bridge0: port 1(bridge_slave_0) entered blocking state [ 928.251691][T13432] bridge0: port 1(bridge_slave_0) entered disabled state [ 928.289594][T13528] ------------[ cut here ]------------ [ 928.296043][T13528] kernel BUG at fs/hfsplus/bnode.c:624! [ 928.314226][T13432] device bridge_slave_0 entered promiscuous mode [ 928.337664][T13528] invalid opcode: 0000 [#1] PREEMPT SMP KASAN [ 928.343790][T13528] CPU: 1 PID: 13528 Comm: syz.3.2570 Not tainted 6.1.142-syzkaller #0 [ 928.351940][T13528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 928.361988][T13528] RIP: 0010:hfsplus_bnode_put+0x537/0x540 [ 928.367721][T13528] Code: 95 8b ff e9 b2 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f0 fe ff ff 48 89 df e8 d3 94 8b ff e9 e3 fe ff ff e8 29 19 3a ff <0f> 0b e8 22 19 3a ff 0f 0b 55 41 57 41 56 41 54 53 89 f3 49 89 fe [ 928.387330][T13528] RSP: 0018:ffffc9000350f3e8 EFLAGS: 00010283 [ 928.393397][T13528] RAX: ffffffff8246be57 RBX: ffff888054b8d300 RCX: 0000000000080000 [ 928.401358][T13528] RDX: ffffc9000fa3d000 RSI: 0000000000004c5a RDI: 0000000000004c5b [ 928.409319][T13528] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100a971a71 [ 928.417279][T13528] R10: ffffed100a971a71 R11: 1ffff1100a971a70 R12: ffff888054b8d380 [ 928.425242][T13528] R13: 1ffff920006a1e90 R14: dffffc0000000000 R15: ffff88807a3d0000 [ 928.433201][T13528] FS: 00007f7f327ff6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 928.442120][T13528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 928.448697][T13528] CR2: 00007f7f327ddf98 CR3: 0000000064229000 CR4: 00000000003506e0 [ 928.456657][T13528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 928.464618][T13528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 928.472580][T13528] Call Trace: [ 928.475848][T13528] [ 928.478768][T13528] ? do_raw_spin_unlock+0x11d/0x230 [ 928.483967][T13528] hfsplus_bmap_alloc+0x521/0x5b0 [ 928.488987][T13528] ? hfsplus_bmap_reserve+0x4f0/0x4f0 [ 928.494353][T13528] ? memcpy+0x3c/0x60 [ 928.498328][T13528] hfs_bnode_split+0xc9/0xee0 [ 928.502996][T13528] ? hfsplus_bnode_read+0x193/0x1d0 [ 928.508184][T13528] ? memcpy+0x3c/0x60 [ 928.512156][T13528] ? hfsplus_bnode_read_u16+0x84/0xd0 [ 928.517518][T13528] ? hfs_btree_inc_height+0xb60/0xb60 [ 928.522882][T13528] hfsplus_brec_insert+0x38b/0xcc0 [ 928.527989][T13528] ? hfsplus_brec_keylen+0x320/0x320 [ 928.533261][T13528] ? memcpy+0x3c/0x60 [ 928.537237][T13528] ? hfsplus_bnode_read+0x193/0x1d0 [ 928.542430][T13528] hfsplus_rename_cat+0x513/0xdf0 [ 928.547441][T13528] ? hfsplus_subfolders_dec+0x110/0x110 [ 928.552977][T13528] ? finish_task_switch+0x265/0x8f0 [ 928.558175][T13528] ? hfsplus_unlink+0x15a/0x760 [ 928.563013][T13528] ? vsprintf+0x30/0x30 [ 928.567162][T13528] hfsplus_unlink+0x2d4/0x760 [ 928.571913][T13528] ? hfsplus_link+0x700/0x700 [ 928.576581][T13528] ? rwsem_write_trylock+0x12f/0x1b0 [ 928.581856][T13528] ? bpf_lsm_inode_unlink+0x5/0x10 [ 928.586959][T13528] ? security_inode_unlink+0xcb/0x110 [ 928.592322][T13528] vfs_unlink+0x385/0x600 [ 928.596652][T13528] do_unlinkat+0x324/0x560 [ 928.601060][T13528] ? fsnotify_link_count+0xf0/0xf0 [ 928.606162][T13528] ? getname_flags+0x206/0x500 [ 928.610917][T13528] __x64_sys_unlink+0x45/0x50 [ 928.615584][T13528] do_syscall_64+0x4c/0xa0 [ 928.619992][T13528] ? clear_bhb_loop+0x60/0xb0 [ 928.624655][T13528] ? clear_bhb_loop+0x60/0xb0 [ 928.629319][T13528] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 928.635203][T13528] RIP: 0033:0x7f7f3298e929 [ 928.639616][T13528] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 928.659205][T13528] RSP: 002b:00007f7f327ff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000057 [ 928.667865][T13528] RAX: ffffffffffffffda RBX: 00007f7f32bb6080 RCX: 00007f7f3298e929 [ 928.675824][T13528] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000200000000000 [ 928.683798][T13528] RBP: 00007f7f32a10b39 R08: 0000000000000000 R09: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 928.691767][T13528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 928.699737][T13528] R13: 0000000000000001 R14: 00007f7f32bb6080 R15: 00007ffcac776138 [ 928.707709][T13528] [ 928.710731][T13528] Modules linked in: [ 928.716344][T12008] Bluetooth: hci1: command 0x0406 tx timeout [ 928.724650][T13528] ---[ end trace 0000000000000000 ]--- [ 928.731902][T13432] bridge0: port 2(bridge_slave_1) entered blocking state [ 928.760921][T13528] RIP: 0010:hfsplus_bnode_put+0x537/0x540 [ 928.809106][T13528] Code: 95 8b ff e9 b2 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c f0 fe ff ff 48 89 df e8 d3 94 8b ff e9 e3 fe ff ff e8 29 19 3a ff <0f> 0b e8 22 19 3a ff 0f 0b 55 41 57 41 56 41 54 53 89 f3 49 89 fe [ 928.848905][T13432] bridge0: port 2(bridge_slave_1) entered disabled state [ 928.868031][T13432] device bridge_slave_1 entered promiscuous mode [ 928.868789][T13528] RSP: 0018:ffffc9000350f3e8 EFLAGS: 00010283 [ 928.957186][T13528] RAX: ffffffff8246be57 RBX: ffff888054b8d300 RCX: 0000000000080000 [ 928.965206][T13528] RDX: ffffc9000fa3d000 RSI: 0000000000004c5a RDI: 0000000000004c5b [ 929.020897][T13528] RBP: 0000000000000000 R08: dffffc0000000000 R09: ffffed100a971a71 [ 929.097144][T13528] R10: ffffed100a971a71 R11: 1ffff1100a971a70 R12: ffff888054b8d380 [ 929.115241][T13528] R13: 1ffff920006a1e90 R14: dffffc0000000000 R15: ffff88807a3d0000 [ 929.141666][T13528] FS: 00007f7f327ff6c0(0000) GS:ffff8880b8e00000(0000) knlGS:0000000000000000 [ 929.167482][T13528] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 929.174204][T13528] CR2: 00005654fb0b9950 CR3: 0000000064229000 CR4: 00000000003506f0 [ 929.236964][T13528] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 929.245003][T13528] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 929.295690][T13528] Kernel panic - not syncing: Fatal exception [ 929.302125][T13528] Kernel Offset: disabled [ 929.306437][T13528] Rebooting in 86400 seconds..