last executing test programs: 2m23.720328137s ago: executing program 2 (id=78): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setpriority(0x2, 0x0, 0xffffffffffffffcd) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @broadcast}) write$cgroup_devices(r4, &(0x7f0000000840)=ANY=[@ANYBLOB="1e0308004d6b71ef288563"], 0xffdd) 2m18.623431413s ago: executing program 0 (id=87): socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$MAP_CREATE(0x0, 0x0, 0x48) rt_tgsigqueueinfo(r1, r0, 0x41, &(0x7f00000000c0)={0x22, 0x5, 0x7ff}) io_uring_enter(0xffffffffffffffff, 0x1816, 0x0, 0x1, 0x0, 0x0) open(&(0x7f00000001c0)='./file0\x00', 0x80ff, 0x88) r3 = gettid() r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet_group_source_req(r4, 0x0, 0x2f, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x4e20, @empty}}}, 0x108) setsockopt$inet_group_source_req(r4, 0x0, 0x2b, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @remote}}}, 0x108) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r3}, &(0x7f0000000000)) fcntl$setlease(0xffffffffffffffff, 0x400, 0x1) openat$dir(0xffffffffffffff9c, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) 2m11.084167632s ago: executing program 2 (id=103): socket$alg(0x26, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) socket(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x1, 0x8, 0x56e48d82, 0xfffffffffffffff7, 0x9, 0x0, 0xaa, 0x6, 0x7, 0x400000000000004, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x4, 0x2, 0x401, 0x3, 0x8, 0x8}) 2m10.567408187s ago: executing program 0 (id=106): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x15}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0}) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r3, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r3, 0x3b85, 0x0) quotactl_fd$Q_SETINFO(0xffffffffffffffff, 0xffffffff80000601, r2, &(0x7f0000000380)={0x2d80000, 0x800000000, 0x0, 0x2}) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 2m9.768683791s ago: executing program 2 (id=107): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x20702, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r3, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r3, &(0x7f0000000740)=[{{&(0x7f0000000100)={0x2, 0x4e21, 0x0, @empty}, 0x1c, 0x0}}], 0x300, 0x0) 2m1.377799395s ago: executing program 0 (id=115): pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x6) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00'}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r6 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r4}, &(0x7f0000000240), &(0x7f0000000000)=r6}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r5, r2, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xa482, 0x81, @dev={0xfe, 0x80, '\x00', 0x2c}}}}}}}, 0x0) 2m0.77611133s ago: executing program 0 (id=119): syz_mount_image$exfat(&(0x7f0000000280), &(0x7f00000000c0)='./file2\x00', 0x2200050, &(0x7f0000000000)=ANY=[], 0x1, 0x1516, &(0x7f0000003140)="$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") r0 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) fchdir(r0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$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") r1 = openat$uinput(0xffffffffffffff9c, 0x0, 0x802, 0x0) ioctl$UI_ABS_SETUP(r1, 0x401c5504, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) open(&(0x7f0000000180)='./bus\x00', 0x14937e, 0x111) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) writev(r2, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 1m55.804876638s ago: executing program 2 (id=126): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f0000004080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="14000000000000000100000001000000", @ANYRES32=r0], 0x18}}], 0x30, 0x0) r2 = dup3(r1, r0, 0x80000) connect$unix(r2, &(0x7f0000000100)=@abs={0x1, 0x0, 0x4e22}, 0x6e) 1m55.437225486s ago: executing program 0 (id=128): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x88) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x1, 0x5d032, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x80) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, 0x0) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(0xffffffffffffffff, 0xc04064a0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)=[0x0], 0x0, 0x0, 0x0, 0x15}) statx(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x4000, 0x100, &(0x7f0000000400)) mprotect(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$IOMMU_TEST_OP_ADD_RESERVED(r2, 0x3ba0, &(0x7f00000003c0)={0x48, 0xc, 0x0, 0x0, 0x0, 0x200000000}) ioctl$IOMMU_IOAS_MAP$PAGES(r2, 0x3b85, 0x0) ioctl$DRM_IOCTL_MODE_GETCONNECTOR(0xffffffffffffffff, 0xc05064a7, 0x0) 1m54.445086042s ago: executing program 2 (id=130): gettid() timer_create(0x7, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$inet(0x2, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000000)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r2, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_register$IORING_UNREGISTER_FILES(0xffffffffffffffff, 0x3, 0x0, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="518440db9de1"}, 0x14) bind$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x800, 0x0, 0x1, 0x0, 0x6, @random="933c547ecfa7"}, 0x14) fstat(r0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0}) setsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, &(0x7f00000011c0)={{{@in=@dev={0xac, 0x14, 0x14, 0x20}, @in=@multicast1, 0x4e23, 0x4, 0x4e23, 0xff35, 0x2, 0x80, 0xa0, 0x62, 0x0, r4}, {0x2, 0xfffffffffffffffb, 0x2, 0x6, 0x69600, 0x4, 0x6, 0x4e1639c8}, {0x6846, 0x53, 0x9, 0x4}, 0x8, 0x0, 0x1, 0x0, 0x1, 0x2}, {{@in6=@loopback, 0x4d4, 0x6c}, 0x2, @in6=@mcast1, 0x0, 0x1, 0x3, 0xc, 0x7, 0x800, 0x4}}, 0xe8) io_uring_register$IORING_REGISTER_SYNC_CANCEL(0xffffffffffffffff, 0x18, 0x0, 0x1) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) creat(&(0x7f00000001c0)='./file0\x00', 0x0) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002380)={{'fd', 0x3d, r5}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) read$FUSE(r5, &(0x7f0000000200)={0x2020, 0x0, 0x0}, 0x2020) open(&(0x7f00000000c0)='./file0\x00', 0x129282, 0x0) write$FUSE_INIT(r5, &(0x7f0000002300)={0x50, 0x0, r6, {0x7, 0x9, 0x0, 0xffffffff90809082, 0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2}}, 0x50) 1m51.921948043s ago: executing program 2 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001140)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="a067694769a5", {0x4, 0x26}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x29, @val={0x8c, 0x10, {0x6c9, "dbe39babcff2", @short="903a8cb780c1c2d6"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20048010) 1m51.666099934s ago: executing program 0 (id=133): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@resgid}, {@barrier}, {@grpid}, {@orlov}]}, 0x1, 0x572, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x22bb938, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x9, 0x0) 1m49.108672835s ago: executing program 32 (id=133): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@resgid}, {@barrier}, {@grpid}, {@orlov}]}, 0x1, 0x572, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$key(0xf, 0x3, 0x2) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x22bb938, 0x0, 0x0) r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000500)='status\x00') lseek(r4, 0x9, 0x0) 1m35.757584719s ago: executing program 33 (id=131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000001140)={0x50, r1, 0x1, 0x70bd26, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x34, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x4}, @device_a, @device_b, @random="a067694769a5", {0x4, 0x26}, @value=@ver_80211n={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x1}}, 0x29, @val={0x8c, 0x10, {0x6c9, "dbe39babcff2", @short="903a8cb780c1c2d6"}}}}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x20048010) 40.933251713s ago: executing program 3 (id=230): syz_mount_image$ext4(&(0x7f0000000240)='ext4\x00', &(0x7f0000000280)='./mnt\x00', 0x840, &(0x7f0000000340)={[{@test_dummy_encryption_v1}, {@test_dummy_encryption_v1}, {@nomblk_io_submit}, {@nomblk_io_submit}]}, 0x1, 0x241, &(0x7f0000000540)="$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") mknod$loop(&(0x7f0000000080)='./file0\x00', 0x100000000000600d, 0x1) syz_mount_image$exfat(0x0, &(0x7f00000001c0)='./bus\x00', 0x84c20, 0x0, 0x0, 0x0, &(0x7f0000000100)) open(0x0, 0x141242, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={0x0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioprio_get$uid(0x3, 0xee01) syz_mount_image$ext4(0x0, &(0x7f00000000c0)='./bus/file0\x00', 0x80008, 0x0, 0x0, 0x0, &(0x7f0000000000)) 36.499846754s ago: executing program 3 (id=235): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x103000, 0x0) socket(0x40000000015, 0x5, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000002180)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000000000000000000000000003850000002c00000085"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x0) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x1c, 0x1, 0x2, 0x101, 0x0, 0x0, {0xa, 0x0, 0x7}, [@CTA_EXPECT_TIMEOUT={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x5}, 0x841) 35.48988566s ago: executing program 3 (id=237): dup(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) move_mount(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x4) r2 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000400), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r2, 0x4008af00, &(0x7f0000000440)=0x200000000) 34.811144836s ago: executing program 3 (id=239): syz_mount_image$ext4(&(0x7f0000000000)='ext4\x00', &(0x7f0000000480)='./file0\x00', 0x0, &(0x7f0000000140)={[{@nouid32}]}, 0x1, 0x461, &(0x7f0000000540)="$eJzs3U9sFGUfB/DvbrslAd638OZVEf9VUCmi1LYmSIKJRDnJxWDiuaGFEAs1tCZCiNHEgzcvJp49KDePHDwZD3jUBC/e1JMxEkMkntSa2e7Qbdkt3dB2q/v5JLP7zM6wz2/m4ffM7MOTIUDPGipeKsn2JN8mGVxYXbrD0MLbzRuXTv5+49LJSubnT/xaqe/3241LJ8tdyz+3rXipJsPVpPpeJQ+0qHf2wsXXJ6anp8431kfmzr4xMnvh4tNnzk6cnjo9dW700OHnxkcPjY2Pr9mxvnz57RPbXnnh2AeT136ZufzD50W82xvbmo9jrQxlaOm5bPLEWlfWZfc0lSv9XQyEjvQlKZqrVs//wfRlsfEG89X3XQ0OWFfzhS1tN78zD/yLVdLtCIDuKC/0xe/fcll6C3BsXe8/6K7rRxd+ABbtfrOxLGzpT7WxT23Z7/u1NJTkyJVjnxVL1mkcBgAAAKCXfXE0yVOtxv+qubdpv6J8X5JdSe5Psjupz+t5MMlDSR5O8kg5n6gDy/dfPv5TaTeBhjVx/WhypDG3a+n4Xzn6lx19jbX/FCupVU6dmZ56Jsl/kwyntqVYH12hjqtf//VNu23N43/FUtRfjgU24vi5f9m/T09OzE3czTGz6Pq7ye7+Vu1fuTUTqEjBR5Ps6eSLa4vFH/fsP91utzu3P+tp/uNkX8v8b3S81w7X31aYnzlS7w9Gyl7hdu+Pjr3Urv4W7V9UrP03SJH/W1dq/2RHpXm+7mzndVzddeX5dts67/+/+6To/wcqr9YDHGh8+tbE3Nz50WSgcvz2z8c6j/mfrf1NU3k+yvNVtP/w3tbX//81fdveJI8lebwxd3lf/dqf7E/yZJIDK0Tz54uHXkvzHUUT/X93Fe0/2TL/b00NWJb/nReO7PzoeLv6V5f/z9b/Qg83PnH/d2erbaBuxwkAAAAAAADA2qjWn4FXqR68Va5WDx5ceIbf/7O1Oj0zO3fg1Myb5yYXnpW3I7VqOdNrsGk+6Gi9vLg+tmx9PMnOJB/2/dF48sDM9GS3Dx563LY2+V/4qa/b0QHrzvNaoXetIv9rGxEHsPFc/6F3yX/oXfIfepf8h94l/6F3yX/oXavP/4F1jQPYeK7/0JPu5rl+m63Qn00RRstCOX+qS2GU/yX/Jjkbm7Pw6ZfJBtTVl2SzHPIKhW72SgAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACbx98BAAD//5IX2eo=") r0 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x105042, 0x1db) creat(&(0x7f00000001c0)='./bus\x00', 0x40) syz_mount_image$ext4(&(0x7f00000003c0)='ext3\x00', &(0x7f0000000000)='./file1\x00', 0x200000, &(0x7f0000000240)={[{}, {@errors_remount}, {@jqfmt_vfsold}, {@data_err_ignore}, {@noauto_da_alloc}, {@noload}, {@resuid}, {@oldalloc}, {@delalloc}]}, 0xfc, 0x550, &(0x7f0000000b00)="$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") r1 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) sendfile(r1, r1, 0x0, 0x100005) socket(0x200000000000011, 0x2, 0x0) mount(&(0x7f0000000280)=@loop={'/dev/loop', 0x0}, &(0x7f0000000140)='./bus\x00', 0x0, 0x5000, 0x0) r3 = open(&(0x7f0000000000)='./bus\x00', 0x0, 0x0) ioctl$LOOP_SET_STATUS64(r3, 0x4c04, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x8005, 0x0, 0x0, 0x15, 0x0, "ef359f413bb93852f7d6a4ae6dddfbd1ce5d29c2ee5e5ca9000ff8ee09e737ff0edf110ff4117639c2eb4b78c660e677df701905b9aafab4afaaf755a3f6a004", "036c47c6780820d1cbf7966d61fdcf335263bd9bffbcc2542ded71038259ca171ce1a311ef54ec32d71e14ef3dc177e9b48b00", "f28359738e229a4c66810000000000d300e6d602000000000000000000000001", [0x200]}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000001200)="10", 0x60000}], 0x1) 31.801455253s ago: executing program 3 (id=245): r0 = syz_open_dev$tty1(0xc, 0x4, 0x1) openat$sndseq(0xffffff9c, &(0x7f0000000000), 0x8000) openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) keyctl$clear(0x5, 0xffffffffffffffff) getpid() syz_usb_connect(0x6, 0x75, &(0x7f0000000780)=ANY=[@ANYBLOB="1201010240d85bc7b1131100345c010203010902630002040800070904880400c192fa280724060000d2cf0524001c620d240f0100000000020005f29011cc030803"], &(0x7f0000000280)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x110, 0x9, 0x2, 0xf4, 0x20, 0x93}, 0x0, 0x0, 0x1, [{0x0, 0x0}]}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x8400, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x6c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="28000000030601020000000200fdffffffffff02050001000700000009000200"], 0x28}, 0x1, 0x0, 0x0, 0x4c814}, 0x40814) sched_setaffinity(0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40186f40, &(0x7f0000000440)=0x1f) ioctl$KDFONTOP_SET_DEF(r0, 0x4b72, &(0x7f0000000040)={0x2, 0x1, 0x18, 0x7, 0x73, 0x0}) 27.797877199s ago: executing program 3 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 26.559828998s ago: executing program 34 (id=250): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x3, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 13.892094613s ago: executing program 1 (id=272): syz_usb_connect(0x3, 0x24, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = openat2(0xffffffffffffff9c, 0x0, 0x0, 0x0) write$char_usb(r1, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x50) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000000100)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r4 = syz_open_procfs(0x0, &(0x7f0000001780)='attr/exec\x00') fanotify_init(0x2, 0x0) readv(r4, &(0x7f0000000040)=[{&(0x7f0000000400)=""/4093, 0xffd}], 0x1) listen(r3, 0x0) connect$unix(r3, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x20020084, &(0x7f00000018c0)={0x2, 0x4e20}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=@framed={{0x18, 0x2, 0x0, 0x0, 0x283}, [@call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r6, r7, 0x5}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000100)={r6, &(0x7f0000000340), &(0x7f0000000300)=@tcp=r5}, 0x20) shutdown(r5, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000001400)={'wg0\x00', 0x0}) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r8, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3, 0x9, 0x0, 0x1, 0x3801}, {0x2c}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 11.339403454s ago: executing program 4 (id=276): r0 = syz_io_uring_setup(0x1eb2, &(0x7f0000000480)={0x0, 0x100000, 0x80}, &(0x7f0000000080)=0x0, &(0x7f0000000040)) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x40, &(0x7f0000000180)=0xffffffff, 0x0, 0x4) io_uring_enter(r0, 0x1818, 0x0, 0x0, 0x0, 0x0) io_uring_register$IORING_REGISTER_PBUF_RING(r0, 0x16, 0x0, 0x1) 10.918015272s ago: executing program 4 (id=277): socket$alg(0x26, 0x5, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_SEND(0xffffffffffffffff, 0xc0182101, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) pipe(&(0x7f0000000000)) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) syz_open_dev$usbfs(&(0x7f0000000180), 0x205, 0x2581) socket(0xa, 0x1, 0x0) clock_adjtime(0x0, &(0x7f0000000640)={0x7, 0x9, 0x1, 0x8, 0x56e48d82, 0xfffffffffffffff7, 0x9, 0x0, 0xaa, 0x6, 0x7, 0x400000000000004, 0xfffffffffffff04f, 0x7, 0x80000000, 0xfffffffffffffff8, 0xffffffffffffffff, 0x5, 0x0, 0x100, 0x4, 0x2, 0x401, 0x3, 0x8, 0x8}) 9.885013242s ago: executing program 4 (id=278): socket$packet(0x11, 0x3, 0x300) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) fanotify_mark(0xffffffffffffffff, 0x1, 0xe, 0xffffffffffffffff, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0xcc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket$netlink(0x10, 0x3, 0x19) r1 = memfd_create(&(0x7f00000000c0)='[\v\xdbX\xae[\x1a\xa9\xfd\xfa\xad\xd1md\xc8\x85HX\xa9%\f\x1ae\xe0\x00\x00\x00\x00\xfb\xff\x00\x00\x81\x9eG\xd9,\xe2\xc6a\x9f\xe8\xf1\xb3\x86\xe2+Op\xd0\xa2\x82\x1eb;(\xb5\xe1jS\xd6\x91%||\xa0\x8ez\xadT\xc8\f\xe5\x89\xbf3:\x99\x1e\xac`\xc3\xcf\xd3\xae\xd2\a\x11\xa9\xa5^\xff\xf5\x95\xd2q#\xc6\xca\x97\x9d\xcb\x1e\x80\xd6\xd5%N&\xf8#\x80z8Z\xd2}\xf5\xe4\x9f5\x9b\x01\xf9t\xbb\x1er\x14\xdb\xd3\xcd\xfd\xbdnC\xec', 0x0) syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) execveat(r1, &(0x7f0000000000)='\x00', 0x0, 0x0, 0x1000) 9.482223985s ago: executing program 5 (id=279): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$alg(0x26, 0x5, 0x0) syz_mount_image$ext4(&(0x7f0000000000)='ext2\x00', &(0x7f0000000c80)='./file1\x00', 0x210000, &(0x7f0000000540)={[{@jqfmt_vfsv1}, {@resgid}, {@barrier_val}, {@norecovery}, {@barrier_val={'barrier', 0x3d, 0x7}}, {@resgid}, {@barrier}, {@grpid}, {@orlov}]}, 0x1, 0x572, &(0x7f0000000640)="$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") r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0, 0x0, 0xb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x35, 0x1, 0x22bb938, 0x0, 0x0) 8.604600881s ago: executing program 4 (id=280): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 7.307781649s ago: executing program 4 (id=281): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee6, 0x8031, 0xffffffffffffffff, 0x80000000) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) munmap(&(0x7f0000003000/0x1000)=nil, 0x1000) syz_open_procfs(0x0, &(0x7f0000000280)='ns\x00') r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) r4 = openat$uinput(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) write$uinput_user_dev(r4, &(0x7f0000000580)={'syz1\x00', {0x6fc9, 0x7, 0x5, 0x5}, 0x3e, [0x9, 0x3, 0x8, 0x2, 0x5334, 0x400, 0x80000000, 0x5, 0x8, 0x0, 0x6, 0xf5, 0x9, 0x39, 0x747d5a13, 0x8, 0xfffffb9a, 0xfffffffc, 0x4, 0xfffffffb, 0xbeb, 0x3, 0x4, 0xf252, 0x4, 0x800, 0x300000, 0x7, 0xe, 0x4623b, 0x0, 0x0, 0x1ff, 0x8000, 0x3ff, 0x3, 0xd, 0x4, 0xba55, 0x8da8, 0x2, 0x200, 0x2, 0x8, 0xe, 0x4, 0x2, 0xde, 0x8, 0x9, 0x1, 0x199f, 0x8, 0x2, 0x9, 0x1, 0x4, 0x6, 0x1000, 0x200005, 0x40, 0x9, 0x7, 0x1], [0x6, 0x1e, 0x3, 0x8000, 0xfffffffe, 0x3, 0x0, 0x5, 0x7, 0xfffffffc, 0x4, 0x7fff, 0x72c, 0xc32, 0x3, 0x9, 0x10000, 0x400, 0x8001, 0x3, 0x1, 0x297, 0x5, 0x0, 0x981, 0x4, 0x100, 0x3ff, 0x0, 0xfffffffe, 0x0, 0x1000001, 0x10, 0xfffffff9, 0x0, 0x2, 0x1, 0x0, 0x6, 0x7, 0x800, 0xffff, 0x6, 0x96, 0xfffffff9, 0x101, 0x0, 0x2, 0x401, 0xc, 0x3, 0x379, 0x9, 0xe, 0x5, 0x10000007, 0x6, 0x2, 0x1, 0x1, 0x8, 0x6, 0x200, 0x858], [0x401, 0xc584, 0xffff, 0xcd4, 0x7, 0x20, 0x7, 0x4, 0x8, 0x10, 0x7, 0x9, 0xe8b, 0x5, 0x80000001, 0x7, 0xfffffffc, 0x1000, 0x2, 0x10, 0x1, 0xfffffff9, 0xe55, 0x10, 0x80000001, 0x4, 0x4, 0x5, 0x9, 0x2, 0x5, 0x80, 0x9, 0x9, 0x47, 0x2, 0x3, 0x4, 0x7, 0x6d7e, 0x3, 0x8, 0x8001, 0xbf23, 0x6, 0x8, 0x0, 0x0, 0x3ff, 0x3, 0x6, 0x100fffd, 0x2004, 0x7, 0x4, 0xea, 0x9, 0x5, 0x6, 0xd9, 0x0, 0x7d, 0x401, 0x5], [0x108e, 0x7fff, 0x3, 0x403, 0x8000088, 0x2, 0x6, 0x4, 0x10, 0x2, 0x763, 0xb, 0x3776, 0x800, 0x4, 0x1000, 0x7f, 0x5, 0x3fa6, 0x4, 0x0, 0x5, 0x1e4, 0x4, 0xe47, 0x3, 0x3, 0x4, 0x200, 0x1000, 0x3b, 0x2, 0x5, 0x800, 0xa80a, 0x65f413f9, 0x4, 0x8, 0x8a8, 0x2, 0x3d, 0x7, 0x2, 0x4, 0x4, 0x10, 0x340a, 0x0, 0x7fff, 0xffffffff, 0xfffffff8, 0x401, 0x1, 0x200, 0x7, 0x4edf, 0xfffffffd, 0x7, 0xe, 0x2, 0xe, 0xf, 0x133, 0x6]}, 0x45c) ioctl$UI_DEV_CREATE(r4, 0x5501) syz_emit_vhci(&(0x7f0000000000)=@HCI_SCODATA_PKT={0x3, {0xc8}}, 0x4) syz_mount_image$ext4(&(0x7f00000003c0)='ext4\x00', &(0x7f0000000000)='./file0\x00', 0x20c006, &(0x7f0000000100)={[{@i_version}, {@mblk_io_submit}, {@debug_want_extra_isize={'debug_want_extra_isize', 0x3d, 0x68}}, {@lazytime}, {@auto_da_alloc_val={'auto_da_alloc', 0x3d, 0x7}}, {@data_err_abort}], [{@seclabel}]}, 0x1, 0x43d, &(0x7f0000000900)="$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") 7.307531851s ago: executing program 5 (id=282): socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x810) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x50) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x18) socket$key(0xf, 0x3, 0x2) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x48241, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x10000}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000340), 0x40, 0x0) ioctl$PTP_SYS_OFFSET_PRECISE(r4, 0xc0403d08, 0x0) 6.565983235s ago: executing program 1 (id=283): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r2, @ANYBLOB="08002600940900000800"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x70, r3, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x4a, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}, [{0xdd, 0x6, "e701471b76b8"}]}}]}, 0x70}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 6.143623641s ago: executing program 5 (id=284): r0 = getpid() prlimit64(r0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$vnet(0xffffffffffffff9c, &(0x7f0000000180), 0x2, 0x0) ioctl$int_in(r1, 0x40000000af01, 0x0) ioctl$VHOST_SET_VRING_ADDR(r1, 0x4028af11, &(0x7f0000000200)={0x1, 0x1, 0x0, &(0x7f0000000740)=""/51, 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$VHOST_SET_MEM_TABLE(r1, 0x4008af03, &(0x7f0000000340)) r3 = dup(r2) ioctl$VHOST_NET_SET_BACKEND(r1, 0x4008af30, &(0x7f00000001c0)={0x1, r3}) 5.987251811s ago: executing program 5 (id=285): syz_mount_image$ext4(&(0x7f0000000080)='ext4\x00', &(0x7f0000000040)='./file0\x00', 0x808003, &(0x7f0000000000), 0x3, 0x4ed, &(0x7f00000005c0)="$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") mount(0x0, 0x0, 0x0, 0x22800a0, 0x0) mount(0x0, &(0x7f0000000240)='.\x00', 0x0, 0x20, 0x0) r0 = open(&(0x7f0000000100)='./file0/file0\x00', 0x20482, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r0, 0xc08c5332, &(0x7f0000001380)={0x6, 0x0, 0x0, 'queue0\x00', 0x5}) ioctl$TIOCGPGRP(0xffffffffffffffff, 0x540f, 0x0) 4.141896815s ago: executing program 4 (id=286): pipe2$9p(&(0x7f00000001c0), 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r1}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b000000000000000000"], 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000b80)=ANY=[@ANYBLOB="19000000040000000800000008"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000018c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = openat$null(0xffffffffffffff9c, &(0x7f0000000040), 0xa040, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r5}, &(0x7f0000000240), &(0x7f0000000000)=r7}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000380)={r6, r3, 0x25, 0x2, @val=@tcx}, 0x1c) syz_emit_ethernet(0x4e, &(0x7f00000002c0)={@broadcast, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x18, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @mcast2, {[], @mld={0x84, 0x0, 0x0, 0xa482, 0x81, @dev={0xfe, 0x80, '\x00', 0x2c}}}}}}}, 0x0) 4.039760983s ago: executing program 1 (id=287): ioctl$DRM_IOCTL_MODE_CREATE_DUMB(0xffffffffffffffff, 0xc02064b2, &(0x7f0000000200)={0x8000, 0x2, 0x4}) openat$sndseq(0xffffffffffffff9c, 0x0, 0x480) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x6, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f00000003c0)={0x7, 0xab}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0xd6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$inet(0x2, 0x3, 0x6) add_key(&(0x7f0000000140)='encrypted\x00', &(0x7f0000000180), 0x0, 0x0, 0xfffffffffffffffe) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000200)={0x0, 0x0}) timerfd_gettime(0xffffffffffffffff, 0x0) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000000c0)='xfrm0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10, 0x0}}], 0x68000, 0xe000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x94) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x378, 0x0, 0x43, 0xa0, 0x238, 0x98, 0x330, 0x178, 0x178, 0x330, 0x178, 0x49, 0x0, {[{{@ip={@empty=0x5107, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'ip6erspan0\x00'}, 0x12a, 0x1c8, 0x210, 0x0, {0x0, 0x7a010000}, [@common=@inet=@hashlimit3={{0x158}, {'bond_slave_0\x00', {0x9, 0x0, 0x57, 0x0, 0x0, 0x1, 0xe1, 0x3}}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3d8) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) 3.328108767s ago: executing program 5 (id=288): r0 = socket$inet_udp(0x2, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r0, 0x0, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @local}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2c}, {0x0, 0xfffffffffffffffd, 0x0, 0x0, 0x2, 0xffffffffffffffff, 0x0, 0x2}, {}, 0x5, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x1, 0x32}, 0x0, @in6=@remote, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) 3.13016436s ago: executing program 1 (id=289): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x94) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r3, @in6={{0xa, 0x4e24, 0x4, @mcast1}}}, &(0x7f0000000000)=0x84) 2.971458003s ago: executing program 1 (id=290): prctl$PR_SET_MM(0x23, 0xb, &(0x7f00007d7000/0x1000)=nil) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) r1 = syz_clone(0x8000, 0x0, 0xfffffffffffffe7e, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, r1, 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) 1.532447843s ago: executing program 1 (id=291): syz_mount_image$hfsplus(&(0x7f0000000600), &(0x7f0000000640)='./file0\x00', 0x1004001, &(0x7f0000000280)=ANY=[@ANYBLOB="747970653dd88d17102c6e6c733d61736369692c00b65c5e80ee881a8017a99080db5f384bdecc38aad57f2265deb9bc09ceaa37a446dd9779c499df84c71ac5709884f5a46a6157a859efa0011b98ed9e0084e7f30840308a546dfc131f58f11e2885d3d93d1ea670d769ec2f0aa0c9e9bc2dce36eb80f93e9c66e51cd63047e63897ad645ff9e1c43c323948225427a038840483468e20afe97ee11df867f724292017e27da8ee18b36e12ec848a02f157f0c97084870848c3f5101666aeeb41"], 0x4, 0x604, &(0x7f0000001940)="$eJzs3U9vHGcdB/Dv7G4cb5BSt03bAJWwivgjLBLbG6BFiggoQj5UqCKvwCJOY2XjVraL3B5QgvIOeANFld8Al156yCFneAmWOCIhcUIWB4xmdna9xH9iO469cT+fZHZ+zz47v/nNMzO7nrGlDfC1NTeV1uMUmZt6f61sb6x3uhvrnfv9OMn5JI3qf1pl+Pek+SiZTG/KN5MUVbKt5p7ruf7lF6189fBWr9Wop2q55mD5I3tQT7lRF3njGPM9ee58xWALy6Q3+8lHwdaz/esFrn7vA4YTVeyxLyaSC0nG6/eB/oHbONnqjt/InIAAAABwIEe7NfXKZjazlovHXg4AAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAACcYUXSbAzC6vv9y3kxmaL//f9j9XO/reOX2uPTLgAAAAAAAAAAjsF3NrOZtVzst7eK6nf+71SNS9XjN/JJVrKQ5VzJWuazmtUsZybJxFCisbX51dXlmQMsObvrkrODdutFbzMAAAAAAAAAnEF/zNz27/8BAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAGAUFEmzN6umS/14Io1WkvEkY+XrHiR/68cvs8enXQAAAACcgFc2s5m1XOy3t4rqmv/N6rp/PJ9kKatZzGq6Wcjt6l5A76q/sbHe6W6sd+6X0868v/znocqoMqZ372H3NV+uXtHOnSxWz1zJ7/JRurmdRrVk6XK/nt3reljWVPyidsDKbtfzIim+Xd8NGQ0T1YicG4zIdF1bORqv7j8Sh9w7T69pJo3BnZ9LL2DML9TzcszHR3rMZ4dugL25/0gk37v+76W73aV7d++sTI3OJh3R0yPRGToP3zr7I9HYDqer5huD9lx+nVuZymQ+yHIW8/vMZzULmczNKpqvj+fycWLvkWrvWOcHzypqrN4vzbrEw9T0TrXsxSzmN/kot7OQn2Y21/JuZvKz6t+17T38pzrtvmd943Bn/Xd/WAevJUW7Nx9ymodJOa6vDo3r8HvuRNU3/Mz2efDaHnv3v1s9R3hvbH2rDppJ0RrUNAqeHonyU6Ix0et7ff93hD9vlY8r3aV7y3fnPz7g+n5Qz8tPifMj9SkxVh+9rar1/0dH2ff6rn0zVd+lQV9jR98bg75nnalj9c9wOzPNVn1v7drXqfouD/Xt9vMWACPvwo8ujLX/0f5r+/P2o/bd9vvjvzr/7vm3x3Luybmft6ab32+8Xfwln+cP29f/AAAAAAAAAAAAAAAAAAAAAAAAAAAAAADA0a18+tm9+W53YXlnsLWV7NF1WkEjyfPlSf2FQSOxOYKTClr7H+qC3c8Uzrqrq/c/vrry6Wc/Xrw//+HChwtLnemfzL7XmZl979rVO4vdhene42mXyQuyfdKfdiUAAAAAAAAAAAAcxkn8OelpbyMAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAAvj7mptB6nyMz0lemyvbHe6ZZTP95+ZSNJq5z/J2k+SibTmzIxlK7Yaz3Xv/yila8e3trO1ei/vrnfcgfzoJ5yoy7yxjHme/Lc+YrBFpZJb/aTw2n7XwAAAP//VlAc+g==") chdir(&(0x7f0000000140)='./file0\x00') openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x42, 0x10) 0s ago: executing program 5 (id=292): write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000000000)={0x7, {"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", 0x1000}}, 0x1006) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000080)=0x3) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r1, 0x40047438, &(0x7f0000000180)=""/246) ioctl$PPPIOCSFLAGS1(r1, 0x4020744f, &(0x7f00000003c0)=0xc446806) openat(0xffffffffffffffff, 0x0, 0x80040, 0x1d6) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) write$binfmt_aout(r1, &(0x7f0000000280)=ANY=[], 0xfce1) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.15' (ED25519) to the list of known hosts. [ 101.169751][ T5828] cgroup: Unknown subsys name 'net' [ 101.273174][ T5828] cgroup: Unknown subsys name 'cpuset' [ 101.282906][ T5828] cgroup: Unknown subsys name 'rlimit' [ 101.509651][ T9] cfg80211: failed to load regulatory.db Setting up swapspace version 1, size = 127995904 bytes [ 103.012295][ T5828] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 107.479557][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 107.496774][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 107.505905][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 107.520715][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 107.529896][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 107.572077][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 107.585220][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 107.594871][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 107.610043][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 107.618561][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 107.649430][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 107.659026][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 107.666695][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 107.675357][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 107.683390][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 107.712382][ T5159] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 107.720557][ T5159] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 107.736100][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 107.744535][ T5855] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 107.762462][ T5849] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 107.770343][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 107.779214][ T5855] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 107.789501][ T5865] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 107.789649][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 107.797357][ T5865] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 107.812430][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 107.820264][ T5855] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 107.828528][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 107.836676][ T5855] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 107.867806][ T5865] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 108.566996][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 108.773673][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 108.896780][ T5847] chnl_net:caif_netlink_parms(): no params data found [ 108.961544][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.969209][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 108.976755][ T5851] bridge_slave_0: entered allmulticast mode [ 108.984793][ T5851] bridge_slave_0: entered promiscuous mode [ 109.100082][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.107278][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.115058][ T5851] bridge_slave_1: entered allmulticast mode [ 109.126176][ T5851] bridge_slave_1: entered promiscuous mode [ 109.164508][ T5857] chnl_net:caif_netlink_parms(): no params data found [ 109.222956][ T5860] chnl_net:caif_netlink_parms(): no params data found [ 109.249571][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 109.269695][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.276879][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.284544][ T5850] bridge_slave_0: entered allmulticast mode [ 109.292144][ T5850] bridge_slave_0: entered promiscuous mode [ 109.374713][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.381994][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.389505][ T5850] bridge_slave_1: entered allmulticast mode [ 109.397140][ T5850] bridge_slave_1: entered promiscuous mode [ 109.407737][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.422387][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.548916][ T5847] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.556212][ T5847] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.563557][ T5847] bridge_slave_0: entered allmulticast mode [ 109.571743][ T5847] bridge_slave_0: entered promiscuous mode [ 109.581520][ T5847] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.588787][ T5847] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.596070][ T5847] bridge_slave_1: entered allmulticast mode [ 109.599377][ T5853] Bluetooth: hci0: command tx timeout [ 109.604436][ T5847] bridge_slave_1: entered promiscuous mode [ 109.705972][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.720206][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 109.740780][ T5851] team0: Port device team_slave_0 added [ 109.752410][ T51] Bluetooth: hci2: command tx timeout [ 109.758305][ T5853] Bluetooth: hci1: command tx timeout [ 109.820753][ T5851] team0: Port device team_slave_1 added [ 109.850122][ T5857] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.857392][ T5857] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.865339][ T5857] bridge_slave_0: entered allmulticast mode [ 109.874440][ T5857] bridge_slave_0: entered promiscuous mode [ 109.885001][ T5847] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 109.908163][ T51] Bluetooth: hci5: command tx timeout [ 109.908984][ T5853] Bluetooth: hci4: command tx timeout [ 109.919421][ T51] Bluetooth: hci3: command tx timeout [ 109.989275][ T5857] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.996466][ T5857] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.003962][ T5857] bridge_slave_1: entered allmulticast mode [ 110.011831][ T5857] bridge_slave_1: entered promiscuous mode [ 110.039312][ T5847] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.069588][ T5850] team0: Port device team_slave_0 added [ 110.076802][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.083934][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.110213][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.122765][ T5860] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.130422][ T5860] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.137678][ T5860] bridge_slave_0: entered allmulticast mode [ 110.145438][ T5860] bridge_slave_0: entered promiscuous mode [ 110.203514][ T5850] team0: Port device team_slave_1 added [ 110.226584][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.234289][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.261033][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.272975][ T5860] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.280570][ T5860] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.287801][ T5860] bridge_slave_1: entered allmulticast mode [ 110.295823][ T5860] bridge_slave_1: entered promiscuous mode [ 110.321301][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.328588][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 110.335803][ T5854] bridge_slave_0: entered allmulticast mode [ 110.343989][ T5854] bridge_slave_0: entered promiscuous mode [ 110.355003][ T5857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.368593][ T5857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.382535][ T5847] team0: Port device team_slave_0 added [ 110.431051][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.438449][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 110.445701][ T5854] bridge_slave_1: entered allmulticast mode [ 110.454183][ T5854] bridge_slave_1: entered promiscuous mode [ 110.497701][ T5847] team0: Port device team_slave_1 added [ 110.520386][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.527468][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.553561][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.566575][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.573896][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.599941][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.617211][ T5860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.717008][ T5860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.731027][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 110.743933][ T5857] team0: Port device team_slave_0 added [ 110.753740][ T5857] team0: Port device team_slave_1 added [ 110.760711][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 110.767671][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.793954][ T5847] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 110.858771][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 110.900402][ T5847] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 110.907425][ T5847] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.933916][ T5847] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 110.955667][ T5851] hsr_slave_0: entered promiscuous mode [ 110.962675][ T5851] hsr_slave_1: entered promiscuous mode [ 110.991231][ T5860] team0: Port device team_slave_0 added [ 111.033462][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.040854][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.071783][ T5857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.086004][ T5857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.098565][ T5857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.132284][ T5857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.172790][ T5860] team0: Port device team_slave_1 added [ 111.203264][ T5850] hsr_slave_0: entered promiscuous mode [ 111.209998][ T5850] hsr_slave_1: entered promiscuous mode [ 111.216240][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.225370][ T5850] Cannot create hsr debugfs directory [ 111.292690][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.299777][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.326770][ T5860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.344619][ T5854] team0: Port device team_slave_0 added [ 111.355117][ T5854] team0: Port device team_slave_1 added [ 111.405358][ T5860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.412457][ T5860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.438896][ T5860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.577637][ T5847] hsr_slave_0: entered promiscuous mode [ 111.584754][ T5847] hsr_slave_1: entered promiscuous mode [ 111.591498][ T5847] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.599233][ T5847] Cannot create hsr debugfs directory [ 111.663540][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 111.670690][ T5853] Bluetooth: hci0: command tx timeout [ 111.676242][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.702951][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 111.716052][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 111.723289][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 111.750148][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 111.789356][ T5857] hsr_slave_0: entered promiscuous mode [ 111.795918][ T5857] hsr_slave_1: entered promiscuous mode [ 111.802916][ T5857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.810556][ T5857] Cannot create hsr debugfs directory [ 111.824339][ T5860] hsr_slave_0: entered promiscuous mode [ 111.831237][ T5860] hsr_slave_1: entered promiscuous mode [ 111.836307][ T5853] Bluetooth: hci1: command tx timeout [ 111.837621][ T5860] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 111.842717][ T51] Bluetooth: hci2: command tx timeout [ 111.850606][ T5860] Cannot create hsr debugfs directory [ 111.988277][ T51] Bluetooth: hci3: command tx timeout [ 111.988345][ T5853] Bluetooth: hci4: command tx timeout [ 111.993825][ T51] Bluetooth: hci5: command tx timeout [ 112.239577][ T5854] hsr_slave_0: entered promiscuous mode [ 112.246147][ T5854] hsr_slave_1: entered promiscuous mode [ 112.253805][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 112.261449][ T5854] Cannot create hsr debugfs directory [ 112.640504][ T5851] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 112.681131][ T5851] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 112.705484][ T5851] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 112.725640][ T5851] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 112.848046][ T5850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 112.865115][ T5850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 112.883867][ T5850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 112.913609][ T5850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 113.032420][ T5847] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 113.046115][ T5847] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 113.080397][ T5847] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 113.091688][ T5847] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 113.191432][ T5860] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 113.233537][ T5860] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 113.244711][ T5860] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 113.260589][ T5860] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 113.325107][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.406482][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.422536][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 113.436170][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 113.457731][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 113.472536][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 113.484434][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 113.546059][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.553405][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.600479][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.607673][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.665896][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 113.762045][ T51] Bluetooth: hci0: command tx timeout [ 113.774513][ T5857] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 113.787278][ T5857] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 113.801559][ T5857] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 113.815427][ T2899] bridge0: port 1(bridge_slave_0) entered blocking state [ 113.822689][ T2899] bridge0: port 1(bridge_slave_0) entered forwarding state [ 113.861219][ T5857] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 113.892977][ T1561] bridge0: port 2(bridge_slave_1) entered blocking state [ 113.900195][ T1561] bridge0: port 2(bridge_slave_1) entered forwarding state [ 113.909472][ T51] Bluetooth: hci2: command tx timeout [ 113.914923][ T51] Bluetooth: hci1: command tx timeout [ 113.944173][ T5847] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.041788][ T5860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.072052][ T51] Bluetooth: hci4: command tx timeout [ 114.072074][ T5865] Bluetooth: hci3: command tx timeout [ 114.072118][ T5865] Bluetooth: hci5: command tx timeout [ 114.130774][ T5860] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.146160][ T5847] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.225829][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.233126][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.252076][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.259344][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.307474][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.314706][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.401755][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.420633][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.427820][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.556603][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.584487][ T5857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 114.606073][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 114.741383][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.748663][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 114.842979][ T5857] 8021q: adding VLAN 0 to HW filter on device team0 [ 114.913567][ T2906] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.920850][ T2906] bridge0: port 2(bridge_slave_1) entered forwarding state [ 114.993926][ T2906] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.001183][ T2906] bridge0: port 1(bridge_slave_0) entered forwarding state [ 115.052147][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.059414][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 115.245018][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.519837][ T5860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.542991][ T5850] veth0_vlan: entered promiscuous mode [ 115.631140][ T5850] veth1_vlan: entered promiscuous mode [ 115.684205][ T5847] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 115.829264][ T5865] Bluetooth: hci0: command tx timeout [ 115.901136][ T5851] veth0_vlan: entered promiscuous mode [ 115.962790][ T5850] veth0_macvtap: entered promiscuous mode [ 115.990769][ T5865] Bluetooth: hci1: command tx timeout [ 115.996411][ T5865] Bluetooth: hci2: command tx timeout [ 116.067574][ T5850] veth1_macvtap: entered promiscuous mode [ 116.086643][ T5851] veth1_vlan: entered promiscuous mode [ 116.131822][ T5847] veth0_vlan: entered promiscuous mode [ 116.146389][ T5857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.157300][ T5865] Bluetooth: hci5: command tx timeout [ 116.159241][ T5853] Bluetooth: hci4: command tx timeout [ 116.164758][ T5865] Bluetooth: hci3: command tx timeout [ 116.220603][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.280353][ T5847] veth1_vlan: entered promiscuous mode [ 116.294767][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.345014][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 116.374487][ T5851] veth0_macvtap: entered promiscuous mode [ 116.404655][ T5850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.414652][ T5850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.425138][ T5850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.434891][ T5850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.455042][ T5851] veth1_macvtap: entered promiscuous mode [ 116.481892][ T5857] veth0_vlan: entered promiscuous mode [ 116.498926][ T5857] veth1_vlan: entered promiscuous mode [ 116.585760][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.607519][ T5847] veth0_macvtap: entered promiscuous mode [ 116.660473][ T5847] veth1_macvtap: entered promiscuous mode [ 116.679964][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.729112][ T5857] veth0_macvtap: entered promiscuous mode [ 116.774211][ T5860] veth0_vlan: entered promiscuous mode [ 116.783306][ T5851] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.792638][ T5851] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.802931][ T5851] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.813795][ T5851] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.843482][ T5854] veth0_vlan: entered promiscuous mode [ 116.850792][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 116.858796][ T5854] veth1_vlan: entered promiscuous mode [ 116.866274][ T5857] veth1_macvtap: entered promiscuous mode [ 116.887811][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 116.961985][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 116.979200][ T5847] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.006392][ T5960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.015162][ T5960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.032342][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.048108][ T5847] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.056896][ T5847] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.066387][ T5847] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.075285][ T5847] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.113153][ T5860] veth1_vlan: entered promiscuous mode [ 117.143817][ T5854] veth0_macvtap: entered promiscuous mode [ 117.193857][ T5850] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 117.194718][ T5857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.245427][ T5854] veth1_macvtap: entered promiscuous mode [ 117.289036][ T5857] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.297812][ T5857] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.316004][ T5857] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.328023][ T5857] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.365851][ T5960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.389399][ T5960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.406099][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 117.565541][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 117.602465][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.619338][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.633460][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.646117][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.683293][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.711815][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.759341][ T5860] veth0_macvtap: entered promiscuous mode [ 118.010689][ T5989] input: syz1 as /devices/virtual/input/input5 [ 118.642614][ T5860] veth1_macvtap: entered promiscuous mode [ 118.677014][ T2899] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 118.724501][ T2899] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 118.791621][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 118.825889][ T5992] loop0: detected capacity change from 0 to 128 [ 118.892151][ T5860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 118.928486][ T0] NOHZ tick-stop error: local softirq work is pending, handler #200!!! [ 119.245461][ T0] NOHZ tick-stop error: local softirq work is pending, handler #100!!! [ 119.348428][ T0] NOHZ tick-stop error: local softirq work is pending, handler #18a!!! [ 119.508237][ T0] NOHZ tick-stop error: local softirq work is pending, handler #c2!!! [ 119.552870][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.553487][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.589640][ T0] NOHZ tick-stop error: local softirq work is pending, handler #08!!! [ 119.655123][ T0] NOHZ tick-stop error: local softirq work is pending, handler #102!!! [ 119.655957][ T0] NOHZ tick-stop error: local softirq work is pending, handler #40!!! [ 119.758342][ T0] NOHZ tick-stop error: local softirq work is pending, handler #42!!! [ 122.222554][ T5998] binder: 5997:5998 ioctl c018620c 0 returned -14 [ 122.393713][ T6001] overlay: filesystem on ./file0 not supported [ 123.016464][ T5860] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.058010][ T5860] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.066806][ T5860] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.080640][ T5860] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.188503][ T2906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.196430][ T2906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 123.626096][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 123.655247][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 124.960003][ T6012] xt_socket: unknown flags 0x4 [ 126.420444][ T77] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.446353][ T77] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.655051][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.682521][ T6022] loop0: detected capacity change from 0 to 1024 [ 126.708583][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.748132][ T1561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.756026][ T1561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.969522][ T2899] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.206695][ T6032] loop4: detected capacity change from 0 to 512 [ 128.285475][ T2899] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.301252][ T77] hfsplus: b-tree write err: -5, ino 4 [ 128.317235][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 128.379760][ T6032] EXT4-fs (loop4): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 128.394143][ T6032] ext4 filesystem being mounted at /6/file0 supports timestamps until 2038-01-19 (0x7fffffff) [ 128.456969][ T6028] EXT4-fs error (device loop4): ext4_add_entry:2417: inode #12: comm syz.4.15: Directory hole found for htree leaf block 0 [ 128.477020][ T6028] EXT4-fs (loop4): Remounting filesystem read-only [ 128.541239][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 128.763191][ T6037] loop2: detected capacity change from 0 to 512 [ 128.830337][ T49] EXT4-fs (loop4): Quota write (off=5120, len=1024) cancelled because transaction is not started [ 128.840096][ T6037] ======================================================= [ 128.840096][ T6037] WARNING: The mand mount option has been deprecated and [ 128.840096][ T6037] and is ignored by this kernel. Remove the mand [ 128.840096][ T6037] option from the mount to silence this warning. [ 128.840096][ T6037] ======================================================= [ 128.879458][ T5851] EXT4-fs (loop4): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 128.907742][ T49] Quota error (device loop4): write_blk: dquota write failed [ 128.967673][ T6039] binder: 6038:6039 ioctl c018620c 0 returned -14 [ 128.997206][ T49] Quota error (device loop4): free_dqentry: Can't write quota data block 5 [ 129.017051][ T6037] EXT4-fs (loop2): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 129.051431][ T6037] ext4 filesystem being mounted at /0/bus supports timestamps until 2038-01-19 (0x7fffffff) [ 129.152580][ T6037] Quota error (device loop2): do_check_range: Getting dqdh_next_free 2741 out of range 0-6 [ 129.175743][ T6037] Quota error (device loop2): qtree_write_dquot: Error -117 occurred while creating quota [ 129.267446][ T6037] EXT4-fs error (device loop2): ext4_acquire_dquot:6931: comm syz.2.3: Failed to acquire dquot type 0 [ 129.369537][ T10] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 129.568013][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 129.674999][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 129.745958][ T10] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 129.770528][ T6052] loop5: detected capacity change from 0 to 2048 [ 129.787931][ T10] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 129.819052][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 129.839935][ T5857] EXT4-fs (loop2): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 129.840021][ T10] usb 1-1: config 0 descriptor?? [ 129.905311][ T6052] UDF-fs: INFO Mounting volume 'LiuxUDF', timestamp 2022/11/22 14:59 (1000) [ 130.049704][ T6052] UDF-fs: error (device loop5): udf_read_inode: (ino 1345) failed !bh [ 130.395199][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.511513][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.552346][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.707254][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 130.912818][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.145846][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.183887][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.238191][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.289370][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.356034][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.408329][ T6017] usb 5-1: new high-speed USB device number 2 using dummy_hcd [ 131.443448][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.482523][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.530281][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.578583][ T6017] usb 5-1: Using ep0 maxpacket: 16 [ 131.596587][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.597602][ T6017] usb 5-1: too many endpoints for config 0 interface 0 altsetting 0: 33, using maximum allowed: 30 [ 131.623006][ T6069] loop2: detected capacity change from 0 to 256 [ 131.648009][ T10] plantronics 0003:047F:FFFF.0001: unknown main item tag 0x0 [ 131.666498][ T6068] loop0: detected capacity change from 0 to 512 [ 131.683587][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 131.698787][ T117] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 131.753553][ T10] plantronics 0003:047F:FFFF.0001: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 131.754105][ T6017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 33 [ 131.799727][ T6069] exFAT-fs (loop2): failed to load upcase table (idx : 0x000104d0, chksum : 0xda218cab, utbl_chksum : 0xe619d30d) [ 131.864787][ T10] usb 1-1: USB disconnect, device number 2 [ 131.875580][ T6068] [EXT4 FS bs=4096, gc=1, bpg=32768, ipg=32, mo=a842c018, mo2=0002] [ 131.890732][ T117] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 131.919780][ T6017] usb 5-1: New USB device found, idVendor=18d1, idProduct=5022, bcdDevice= 0.00 [ 131.924365][ T117] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 131.935913][ T6068] System zones: 0-2, 18-18, 34-34 [ 131.966160][ T117] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 132.000823][ T117] usb 6-1: Product: syz [ 132.005063][ T117] usb 6-1: Manufacturer: syz [ 132.018202][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 132.038019][ T117] usb 6-1: SerialNumber: syz [ 132.091756][ T6068] EXT4-fs (loop0): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 132.119333][ T6017] usb 5-1: config 0 descriptor?? [ 132.150578][ T6068] ext4 filesystem being mounted at /5/file1 supports timestamps until 2038-01-19 (0x7fffffff) [ 132.368676][ T6077] loop1: detected capacity change from 0 to 1024 [ 132.531926][ T6077] EXT4-fs: Ignoring removed bh option [ 132.891295][ T6077] EXT4-fs (loop1): ext4_check_descriptors: Block bitmap for group 0 overlaps block group descriptors [ 132.976081][ T6077] EXT4-fs (loop1): ext4_check_descriptors: Checksum for group 0 failed (31873!=20869) [ 133.133784][ T6077] EXT4-fs (loop1): stripe (65535) is not aligned with cluster size (16), stripe is disabled [ 133.141324][ T6074] fido_id[6074]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.0/usb1/report_descriptor': No such file or directory [ 133.158383][ T6077] EXT4-fs (loop1): filesystem has both journal inode and journal device! [ 134.239841][ T117] cdc_ncm 6-1:1.0: MAC-Address: 42:42:42:42:42:42 [ 134.246546][ T117] cdc_ncm 6-1:1.0: dwNtbInMaxSize=16 is too small. Using 2048 [ 134.254218][ T6017] hid-generic 0003:18D1:5022.0002: hidraw0: USB HID v20.00 Device [HID 18d1:5022] on usb-dummy_hcd.4-1/input0 [ 135.245002][ T6017] usb 5-1: USB disconnect, device number 2 [ 135.252089][ T117] cdc_ncm 6-1:1.0: setting rx_max = 2048 [ 135.905585][ T117] cdc_ncm 6-1:1.0: setting tx_max = 88 [ 136.139890][ T5850] EXT4-fs (loop0): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 136.288610][ T117] cdc_ncm 6-1:1.0 usb0: register 'cdc_ncm' at usb-dummy_hcd.5-1, CDC NCM (NO ZLP), 42:42:42:42:42:42 [ 136.552283][ T6088] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 136.842748][ T117] usb 6-1: USB disconnect, device number 2 [ 136.857246][ T6089] fido_id[6089]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/report_descriptor': No such file or directory [ 136.893674][ T117] cdc_ncm 6-1:1.0 usb0: unregister 'cdc_ncm' usb-dummy_hcd.5-1, CDC NCM (NO ZLP) [ 136.941290][ T6093] loop5: detected capacity change from 0 to 1764 [ 136.976597][ T6096] binder: 6095:6096 ioctl c018620c 0 returned -14 [ 137.507047][ T6105] loop4: detected capacity change from 0 to 128 [ 137.561615][ T6105] FAT-fs (loop4): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 137.677167][ T6105] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 137.718696][ T5917] usb 4-1: new low-speed USB device number 2 using dummy_hcd [ 138.278130][ T30] audit: type=1800 audit(1752230729.079:2): pid=6105 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.37" name="memory.events" dev="loop4" ino=1048609 res=0 errno=0 [ 139.557174][ T5917] usb 4-1: config 179 has an invalid interface number: 65 but max is 0 [ 139.650501][ T5917] usb 4-1: config 179 has no interface number 0 [ 139.656869][ T5917] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 10 [ 139.691314][ T5917] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 139.727414][ T5917] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 10 [ 139.785209][ T30] audit: type=1326 audit(1752230730.589:3): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6125 comm="syz.2.40" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f834a78e929 code=0x0 [ 139.896867][ T13] FAT-fs (loop4): Invalid FSINFO signature: 0x41615252, 0x80417272 (sector = 1) [ 140.025735][ T5917] usb 4-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid maxpacket 58368, setting to 8 [ 140.732052][ T5917] usb 4-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 140.745533][ T5917] usb 4-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 140.756556][ T5917] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 142.749025][ T5917] usb 4-1: can't set config #179, error -71 [ 142.933015][ T5917] usb 4-1: USB disconnect, device number 2 [ 142.941644][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 142.967842][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 144.337423][ T6145] binder: 6144:6145 ioctl c018620c 0 returned -14 [ 144.828808][ T6153] Illegal XDP return value 4294967274 on prog (id 12) dev N/A, expect packet loss! [ 147.479593][ T6173] input: syz1 as /devices/virtual/input/input6 [ 151.206862][ T6191] binder: 6190:6191 ioctl c018620c 0 returned -14 [ 151.425708][ T6195] loop3: detected capacity change from 0 to 128 [ 151.801206][ T6204] loop1: detected capacity change from 0 to 512 [ 151.830073][ T6204] EXT4-fs: Ignoring removed oldalloc option [ 151.928523][ T6204] EXT4-fs: Warning: mounting with data=journal disables delayed allocation, dioread_nolock, O_DIRECT and fast_commit support! [ 152.018456][ T6204] EXT4-fs (loop1): encrypted files will use data=ordered instead of data journaling mode [ 152.051785][ T6204] EXT4-fs warning (device loop1): ext4_expand_extra_isize_ea:2847: Unable to expand inode 11. Delete some EAs or run e2fsck. [ 152.067553][ T6204] EXT4-fs (loop1): 1 truncate cleaned up [ 152.077377][ T6204] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 152.246802][ T6194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 153.669382][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 157.702683][ T6230] loop1: detected capacity change from 0 to 1024 [ 157.807478][ T6231] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 158.304877][ T6230] ./file0: Can't lookup blockdev [ 158.591347][ T49] hfsplus: bad catalog file entry [ 159.789248][ T6246] binder: 6242:6246 ioctl c018620c 0 returned -14 [ 160.166927][ T6248] syzkaller0: entered promiscuous mode [ 160.178255][ T6248] syzkaller0: entered allmulticast mode [ 160.214700][ T5917] usb 5-1: new high-speed USB device number 3 using dummy_hcd [ 160.413014][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 160.464758][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 161.164994][ T6263] loop0: detected capacity change from 0 to 1024 [ 161.199655][ T6263] EXT4-fs: Ignoring removed orlov option [ 161.251836][ T6263] EXT4-fs: Mount option(s) incompatible with ext2 [ 161.276991][ T5917] usb 5-1: can't read configurations, error -61 [ 161.447096][ T5917] usb 5-1: new high-speed USB device number 4 using dummy_hcd [ 162.629382][ T5917] usb 5-1: Using ep0 maxpacket: 32 [ 162.642653][ T5917] usb 5-1: unable to read config index 0 descriptor/start: -61 [ 162.650620][ T5917] usb 5-1: can't read configurations, error -61 [ 162.657459][ T5917] usb usb5-port1: attempt power cycle [ 162.804370][ T6272] loop0: detected capacity change from 0 to 1024 [ 162.831886][ T6272] EXT4-fs: Ignoring removed orlov option [ 162.857613][ T6272] EXT4-fs: Mount option(s) incompatible with ext2 [ 163.031902][ T5917] usb 5-1: new high-speed USB device number 5 using dummy_hcd [ 163.382938][ T6277] netlink: 'syz.0.85': attribute type 9 has an invalid length. [ 163.390980][ T6277] netlink: 'syz.0.85': attribute type 7 has an invalid length. [ 163.398714][ T6277] netlink: 'syz.0.85': attribute type 8 has an invalid length. [ 164.756519][ T5917] usb 5-1: device descriptor read/8, error -71 [ 168.128586][ T6301] binder: 6297:6301 ioctl c018620c 0 returned -14 [ 168.728367][ T6303] loop3: detected capacity change from 0 to 512 [ 168.840010][ T6303] EXT4-fs error (device loop3): ext4_iget_extra_inode:5034: inode #15: comm syz.3.95: corrupted in-inode xattr: invalid ea_ino [ 168.896524][ T6303] EXT4-fs error (device loop3): ext4_orphan_get:1396: comm syz.3.95: couldn't read orphan inode 15 (err -117) [ 168.930833][ T6303] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 168.944075][ T6309] loop1: detected capacity change from 0 to 8 [ 169.119608][ T6309] SQUASHFS error: Failed to read block 0x4e8: -5 [ 169.152745][ T6309] SQUASHFS error: Failed to read block 0x4de: -5 [ 169.186483][ T6309] SQUASHFS error: Failed to read block 0x4de: -5 [ 169.248316][ T6309] SQUASHFS error: Failed to read block 0x4de: -5 [ 169.311557][ T30] audit: type=1800 audit(2000000008.739:4): pid=6309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.1.96" name="file1" dev="loop1" ino=5 res=0 errno=0 [ 169.364890][ T6312] loop5: detected capacity change from 0 to 1024 [ 169.395202][ T6312] EXT4-fs: Ignoring removed orlov option [ 169.444067][ T6312] EXT4-fs: Mount option(s) incompatible with ext2 [ 169.868252][ T5863] usb 2-1: new full-speed USB device number 2 using dummy_hcd [ 170.171704][ T5863] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 170.198892][ T5863] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 170.245098][ T5863] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 170.264685][ T5863] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 170.288082][ T5863] usb 2-1: Product: syz [ 170.292328][ T5863] usb 2-1: Manufacturer: syz [ 170.313428][ T5863] usb 2-1: SerialNumber: syz [ 170.597037][ T5863] usb 2-1: 0:2 : does not exist [ 170.623417][ T5863] usb 2-1: 5:0: failed to get current value for ch 0 (-22) [ 170.633338][ T6320] Cannot find set identified by id 4 to match [ 170.747856][ T5863] usb 2-1: USB disconnect, device number 2 [ 170.858672][ T5903] udevd[5903]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 171.081016][ T5917] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 171.250515][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 171.285260][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 171.300640][ T5917] usb 6-1: can't read configurations, error -61 [ 171.498470][ T5917] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 171.758802][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 171.922455][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 171.965803][ T5917] usb 6-1: can't read configurations, error -61 [ 171.993706][ T5917] usb usb6-port1: attempt power cycle [ 172.284360][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 172.408458][ T5917] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 172.498727][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 172.546344][ T5917] usb 6-1: unable to read config index 0 descriptor/start: -61 [ 172.734238][ T5917] usb 6-1: can't read configurations, error -61 [ 172.840237][ T6017] usb 5-1: new high-speed USB device number 7 using dummy_hcd [ 173.396800][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 173.409641][ T6333] loop1: detected capacity change from 0 to 256 [ 173.541675][ T6333] exfat: Deprecated parameter 'utf8' [ 173.547049][ T6333] exfat: Deprecated parameter 'utf8' [ 173.556309][ T6333] exfat: Deprecated parameter 'utf8' [ 173.613506][ T6333] exfat: Deprecated parameter 'utf8' [ 173.658928][ T5917] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 173.764426][ T5917] usb 6-1: Using ep0 maxpacket: 32 [ 174.294390][ T6017] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 174.304341][ T6017] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 174.317340][ T6017] usb 5-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 174.326504][ T6017] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 174.339936][ T6017] usb 5-1: config 0 descriptor?? [ 174.358594][ T6333] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 174.432962][ T5917] usb 6-1: device descriptor read/all, error -71 [ 174.488345][ T5917] usb usb6-port1: unable to enumerate USB device [ 175.725965][ T6017] plantronics 0003:047F:FFFF.0003: reserved main item tag 0xd [ 176.215811][ T6017] plantronics 0003:047F:FFFF.0003: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.4-1/input0 [ 176.471687][ T6350] binder: 6345:6350 ioctl c018620c 0 returned -14 [ 176.479331][ T6349] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 176.569802][ T5917] usb 5-1: USB disconnect, device number 7 [ 176.964945][ T6346] fido_id[6346]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 178.222938][ T6354] xt_socket: unknown flags 0x4 [ 180.264782][ T6359] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 180.952745][ T6368] loop3: detected capacity change from 0 to 1024 [ 182.753790][ T6386] loop0: detected capacity change from 0 to 256 [ 184.441422][ T6386] exFAT-fs (loop0): failed to load upcase table (idx : 0x0000fd4f, chksum : 0x53fda505, utbl_chksum : 0xe619d30d) [ 184.508593][ T6386] exFAT-fs (loop0): bogus allocation bitmap size(need : 2, cur : 17179869186) [ 185.748211][ T30] audit: type=1800 audit(2000000002.679:5): pid=6386 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.119" name="file1" dev="loop0" ino=1048615 res=0 errno=0 [ 185.820657][ T6397] loop3: detected capacity change from 0 to 1024 [ 185.865205][ T6397] EXT4-fs: Ignoring removed orlov option [ 185.909863][ T6397] EXT4-fs: Mount option(s) incompatible with ext2 [ 185.971368][ T6386] loop0: detected capacity change from 256 to 64 [ 185.979263][ T6400] syz.0.119: attempt to access beyond end of device [ 185.979263][ T6400] loop0: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 186.017170][ T6402] loop5: detected capacity change from 0 to 256 [ 186.139536][ T6402] exfat: Deprecated parameter 'utf8' [ 186.272769][ T6400] Buffer I/O error on dev loop0, logical block 136, lost sync page write [ 186.315636][ T6400] syz.0.119: attempt to access beyond end of device [ 186.315636][ T6400] loop0: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 186.341824][ T6402] exfat: Deprecated parameter 'utf8' [ 186.351573][ T6404] netlink: 'syz.3.122': attribute type 9 has an invalid length. [ 186.359451][ T6404] netlink: 'syz.3.122': attribute type 7 has an invalid length. [ 186.367103][ T6404] netlink: 'syz.3.122': attribute type 8 has an invalid length. [ 186.431282][ T6400] Buffer I/O error on dev loop0, logical block 136, lost sync page write [ 186.458296][ T6402] exfat: Deprecated parameter 'utf8' [ 186.482551][ T6400] syz.0.119: attempt to access beyond end of device [ 186.482551][ T6400] loop0: rw=2049, sector=136, nr_sectors = 1 limit=64 [ 186.570676][ T6402] exfat: Deprecated parameter 'utf8' [ 186.627597][ T6400] Buffer I/O error on dev loop0, logical block 136, lost sync page write [ 186.678113][ T5925] usb 2-1: new high-speed USB device number 3 using dummy_hcd [ 186.837059][ T6409] binder: 6407:6409 ioctl c018620c 0 returned -14 [ 187.055504][ T6400] exFAT-fs (loop0): error, failed to bmap (inode : ffff88805b26a188 iblock : 24, err : -5) [ 187.231109][ T6400] exFAT-fs (loop0): Filesystem has been set read-only [ 187.273349][ T6400] syz.0.119: attempt to access beyond end of device [ 187.273349][ T6400] loop0: rw=34817, sector=208, nr_sectors = 24 limit=64 [ 187.337009][ T6402] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 187.378246][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 187.392038][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 187.418313][ T5925] usb 2-1: can't read configurations, error -61 [ 187.768884][ T5925] usb 2-1: new high-speed USB device number 4 using dummy_hcd [ 188.098059][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 188.125710][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 188.149527][ T5925] usb 2-1: can't read configurations, error -61 [ 188.156319][ T5865] Bluetooth: Wrong link type (-71) [ 188.169297][ T5925] usb usb2-port1: attempt power cycle [ 188.207611][ T6413] loop4: detected capacity change from 0 to 1024 [ 188.843647][ T5925] usb 2-1: new high-speed USB device number 5 using dummy_hcd [ 188.948496][ T5925] usb 2-1: Using ep0 maxpacket: 32 [ 188.991438][ T5925] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 189.044444][ T5925] usb 2-1: can't read configurations, error -61 [ 191.162458][ T5925] usb 2-1: new high-speed USB device number 6 using dummy_hcd [ 191.550268][ T5925] usb 2-1: device descriptor read/8, error -71 [ 191.674316][ T6423] loop5: detected capacity change from 0 to 4096 [ 191.699299][ T5925] usb usb2-port1: unable to enumerate USB device [ 191.753216][ T6423] EXT4-fs: inline encryption not supported [ 192.897840][ T6423] EXT4-fs (loop5): Test dummy encryption mode enabled [ 192.948752][ T6423] workqueue: Failed to create a rescuer kthread for wq "ext4-rsv-conversion": -EINTR [ 192.958663][ T6423] EXT4-fs: failed to create workqueue [ 193.144656][ T5990] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.319313][ T6423] EXT4-fs (loop5): mount failed [ 194.060071][ T5990] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.644802][ T5990] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 194.943434][ T5990] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.017248][ T6442] loop3: detected capacity change from 0 to 256 [ 195.062364][ T6442] FAT-fs (loop3): utf8 is not a recommended IO charset for FAT filesystems, filesystem will be case sensitive! [ 195.445800][ T6445] binder: 6443:6445 ioctl c018620c 0 returned -14 [ 195.799115][ T6442] FAT-fs (loop3): Volume was not properly unmounted. Some data may be corrupt. Please run fsck. [ 198.232286][ T6451] loop1: detected capacity change from 0 to 512 [ 198.379552][ T6451] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.142: casefold flag without casefold feature [ 198.546452][ T6451] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.142: couldn't read orphan inode 15 (err -117) [ 198.639749][ T5990] bridge_slave_1: left allmulticast mode [ 198.645634][ T5990] bridge_slave_1: left promiscuous mode [ 198.660628][ T6451] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 198.734206][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.861293][ T5990] bridge_slave_0: left allmulticast mode [ 198.905164][ T5990] bridge_slave_0: left promiscuous mode [ 198.929804][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 198.950295][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.980058][ T5917] usb 4-1: new high-speed USB device number 3 using dummy_hcd [ 198.983331][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 199.165746][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 199.180771][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 199.189021][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 199.398650][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 199.498269][ T6463] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 199.666090][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 199.686327][ T5917] usb 4-1: can't read configurations, error -61 [ 199.818118][ T5917] usb 4-1: new high-speed USB device number 4 using dummy_hcd [ 200.003897][ T5917] usb 4-1: Using ep0 maxpacket: 32 [ 200.031231][ T5917] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 200.054201][ T5917] usb 4-1: can't read configurations, error -61 [ 200.069052][ T5917] usb usb4-port1: attempt power cycle [ 201.271386][ T5865] Bluetooth: hci1: command tx timeout [ 201.289618][ T5917] usb 4-1: new high-speed USB device number 5 using dummy_hcd [ 201.308196][ T30] audit: type=1326 audit(2000000009.159:6): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=unconfined pid=6470 comm="syz.5.146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f321ab8e929 code=0x0 [ 203.218628][ T5917] usb 4-1: device descriptor read/8, error -71 [ 203.348510][ T5865] Bluetooth: hci1: command tx timeout [ 203.911883][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 203.919195][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 204.634033][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 205.438194][ T5865] Bluetooth: hci1: command tx timeout [ 205.503273][ T6494] loop1: detected capacity change from 0 to 128 [ 205.586405][ T6494] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 205.670306][ T6494] ext4 filesystem being mounted at /23/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa supports timestamps until 2038-01-19 (0x7fffffff) [ 205.853291][ T6494] EXT4-fs error (device loop1): dx_make_map:1295: inode #2: block 18: comm syz.1.150: bad entry in directory: inode out of bounds - offset=988, inode=128, rec_len=36, size=1024 fake=1 [ 207.173785][ T6494] EXT4-fs error (device loop1) in do_split:2029: Corrupt filesystem [ 207.536573][ T5865] Bluetooth: hci1: command tx timeout [ 207.997636][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 208.199540][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.292073][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.519342][ T5990] bond0 (unregistering): Released all slaves [ 210.801380][ T6518] loop5: detected capacity change from 0 to 1024 [ 211.144635][ T5853] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 211.158324][ T5853] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 211.160581][ T6528] loop3: detected capacity change from 0 to 8 [ 211.167430][ T5853] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 211.204911][ T5853] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 211.225951][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 211.286895][ T6528] SQUASHFS error: zlib decompression failed, data probably corrupt [ 211.351158][ T6528] SQUASHFS error: Failed to read block 0x9b: -5 [ 211.357491][ T6528] SQUASHFS error: Unable to read metadata cache entry [99] [ 211.767740][ T6528] SQUASHFS error: Unable to read inode 0x127 [ 212.091978][ T6533] hfsplus: xattr searching failed [ 213.077991][ T6537] binder: 6534:6537 ioctl c018620c 0 returned -14 [ 213.334850][ T51] Bluetooth: hci6: command tx timeout [ 215.551390][ T51] Bluetooth: hci6: command tx timeout [ 217.177865][ T6561] loop3: detected capacity change from 0 to 1764 [ 217.628162][ T51] Bluetooth: hci6: command tx timeout [ 219.841681][ T51] Bluetooth: hci6: command tx timeout [ 220.297115][ T6577] loop4: detected capacity change from 0 to 1024 [ 220.359631][ T6577] EXT4-fs: Ignoring removed orlov option [ 220.433899][ T6577] EXT4-fs: Mount option(s) incompatible with ext2 [ 220.926570][ T6582] netlink: 'syz.4.168': attribute type 9 has an invalid length. [ 220.935608][ T6582] netlink: 'syz.4.168': attribute type 7 has an invalid length. [ 220.944461][ T6582] netlink: 'syz.4.168': attribute type 8 has an invalid length. [ 221.795568][ T6584] loop3: detected capacity change from 0 to 16 [ 221.872513][ T6584] erofs (device loop3): mounted with root inode @ nid 36. [ 222.236234][ T5990] hsr_slave_0: left promiscuous mode [ 222.278112][ T6017] usb 4-1: new full-speed USB device number 7 using dummy_hcd [ 222.322925][ T5990] hsr_slave_1: left promiscuous mode [ 222.341957][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 222.369058][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 222.401069][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 222.422172][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 222.461908][ T6017] usb 4-1: unable to get BOS descriptor or descriptor too short [ 222.493297][ T6017] usb 4-1: not running at top speed; connect to a high speed hub [ 222.521186][ T6017] usb 4-1: config 1 has an invalid interface number: 138 but max is 0 [ 222.534288][ T6017] usb 4-1: config 1 has no interface number 0 [ 222.549407][ T6017] usb 4-1: config 1 interface 138 has no altsetting 0 [ 222.573338][ T5990] veth1_macvtap: left promiscuous mode [ 222.608824][ T6017] usb 4-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 222.618237][ T5990] veth0_macvtap: left promiscuous mode [ 222.618503][ T5990] veth1_vlan: left promiscuous mode [ 222.653599][ T6017] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.678362][ T5990] veth0_vlan: left promiscuous mode [ 222.686828][ T6017] usb 4-1: Product: syz [ 222.705005][ T6017] usb 4-1: Manufacturer: syz [ 222.741557][ T6017] usb 4-1: SerialNumber: syz [ 223.848258][ T6017] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 224.131877][ T6017] usb 4-1: USB disconnect, device number 7 [ 225.003723][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 225.012147][ T6606] loop1: detected capacity change from 0 to 128 [ 225.588850][ T6606] EXT4-fs: Ignoring removed nobh option [ 225.696656][ T6606] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 227.297720][ T6606] ext4 filesystem being mounted at /26/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 228.324244][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 228.740221][ T6626] loop1: detected capacity change from 0 to 1024 [ 228.749504][ T6626] EXT4-fs: Ignoring removed orlov option [ 228.772337][ T6626] EXT4-fs: Mount option(s) incompatible with ext2 [ 229.195734][ T6628] netlink: 'syz.1.182': attribute type 9 has an invalid length. [ 229.203658][ T6628] netlink: 'syz.1.182': attribute type 7 has an invalid length. [ 229.211483][ T6628] netlink: 'syz.1.182': attribute type 8 has an invalid length. [ 230.669397][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 231.591566][ T5159] Bluetooth: hci3: command 0x0406 tx timeout [ 231.670724][ T51] Bluetooth: hci5: command 0x0406 tx timeout [ 231.676880][ T5865] Bluetooth: hci2: command 0x0406 tx timeout [ 231.684532][ T5853] Bluetooth: hci0: command 0x0406 tx timeout [ 231.701853][ T6652] loop4: detected capacity change from 0 to 8 [ 232.539055][ T6656] ubi31: attaching mtd0 [ 232.896362][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 234.758589][ T6656] ubi31: scanning is finished [ 234.763376][ T6656] ubi31: empty MTD device detected [ 234.884345][ T6656] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 235.710496][ T6670] netlink: 16 bytes leftover after parsing attributes in process `syz.3.194'. [ 236.783240][ T6680] loop4: detected capacity change from 0 to 256 [ 236.823384][ T6680] exfat: Deprecated parameter 'utf8' [ 236.851117][ T6680] exfat: Deprecated parameter 'utf8' [ 236.881252][ T6680] exfat: Deprecated parameter 'utf8' [ 236.912296][ T6680] exfat: Deprecated parameter 'utf8' [ 236.943436][ T6680] exFAT-fs (loop4): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 237.813297][ T6460] chnl_net:caif_netlink_parms(): no params data found [ 238.315124][ T6689] loop1: detected capacity change from 0 to 128 [ 238.354975][ T6689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.417551][ T6689] EXT4-fs: Ignoring removed nomblk_io_submit option [ 238.508288][ T6689] EXT4-fs (loop1): Test dummy encryption mode enabled [ 238.711069][ T6689] EXT4-fs (loop1): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 238.827705][ T6689] ext4 filesystem being mounted at /29/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 238.959710][ T6689] fscrypt: AES-256-CBC-CTS using implementation "cts-cbc-aes-aesni" [ 239.017901][ T6525] chnl_net:caif_netlink_parms(): no params data found [ 239.570050][ T6706] loop5: detected capacity change from 0 to 256 [ 239.577662][ T6706] exfat: Deprecated parameter 'utf8' [ 239.624225][ T6706] exfat: Deprecated parameter 'utf8' [ 239.654565][ T6706] exfat: Deprecated parameter 'utf8' [ 239.680675][ T6706] exfat: Deprecated parameter 'utf8' [ 239.760509][ T6706] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 239.982345][ T6460] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.001115][ T6460] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.009045][ T6460] bridge_slave_0: entered allmulticast mode [ 240.020907][ T6460] bridge_slave_0: entered promiscuous mode [ 240.053008][ T6460] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.062576][ T6460] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.070355][ T6460] bridge_slave_1: entered allmulticast mode [ 240.090350][ T6460] bridge_slave_1: entered promiscuous mode [ 240.502731][ T6525] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.542668][ T6525] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.580451][ T6525] bridge_slave_0: entered allmulticast mode [ 240.618393][ T6525] bridge_slave_0: entered promiscuous mode [ 240.670801][ T6460] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.743444][ T6460] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.094780][ T5990] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.130593][ T6525] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.156598][ T6525] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.167038][ T6525] bridge_slave_1: entered allmulticast mode [ 242.034136][ T6525] bridge_slave_1: entered promiscuous mode [ 242.481563][ T5990] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.698676][ T6460] team0: Port device team_slave_0 added [ 242.755137][ T5990] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.972743][ T6460] team0: Port device team_slave_1 added [ 243.282998][ T5854] EXT4-fs (loop1): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 243.362494][ T5990] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.521855][ T6525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.214045][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.230573][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.370816][ T6460] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.525277][ T6525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.561637][ T6744] netlink: 16 bytes leftover after parsing attributes in process `syz.4.207'. [ 246.523335][ T6460] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.557645][ T6460] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.605936][ T6460] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 249.025614][ T6525] team0: Port device team_slave_0 added [ 249.119898][ T6525] team0: Port device team_slave_1 added [ 250.435679][ T6764] process 'syz.3.212' launched '/dev/fd/4' with NULL argv: empty string added [ 250.506340][ T6460] hsr_slave_0: entered promiscuous mode [ 250.536766][ T6460] hsr_slave_1: entered promiscuous mode [ 250.759233][ T6460] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.766887][ T6460] Cannot create hsr debugfs directory [ 251.300667][ T6771] loop4: detected capacity change from 0 to 128 [ 251.469400][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.646711][ T6771] EXT4-fs: Ignoring removed nomblk_io_submit option [ 251.719533][ T6771] EXT4-fs (loop4): Test dummy encryption mode enabled [ 251.755551][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.798658][ T6771] EXT4-fs (loop4): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 251.818063][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.889981][ T6525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.908302][ T6771] ext4 filesystem being mounted at /55/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 252.330034][ T6525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.356277][ T6525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.425570][ T6525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.728752][ T5990] bridge_slave_1: left allmulticast mode [ 252.734543][ T5990] bridge_slave_1: left promiscuous mode [ 252.753037][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.815899][ T5990] bridge_slave_0: left allmulticast mode [ 252.908107][ T5990] bridge_slave_0: left promiscuous mode [ 252.929870][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.658753][ T6791] loop5: detected capacity change from 0 to 256 [ 254.075513][ T5851] EXT4-fs (loop4): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 254.086472][ T6791] exfat: Deprecated parameter 'utf8' [ 254.118144][ T6791] exfat: Deprecated parameter 'utf8' [ 254.211328][ T6791] exfat: Deprecated parameter 'utf8' [ 254.246247][ T6791] exfat: Deprecated parameter 'utf8' [ 254.449027][ T6797] loop4: detected capacity change from 0 to 1024 [ 254.455616][ T6791] exFAT-fs (loop5): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 254.466631][ T6800] loop1: detected capacity change from 0 to 512 [ 254.519661][ T6797] EXT4-fs: Ignoring removed orlov option [ 254.533113][ T6797] EXT4-fs: Mount option(s) incompatible with ext2 [ 255.158900][ T6809] netlink: 'syz.4.219': attribute type 9 has an invalid length. [ 255.166646][ T6809] netlink: 'syz.4.219': attribute type 7 has an invalid length. [ 255.174448][ T6809] netlink: 'syz.4.219': attribute type 8 has an invalid length. [ 255.476849][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1393: inode #15: comm syz.1.211: casefold flag without casefold feature [ 255.639496][ T6800] EXT4-fs error (device loop1): ext4_orphan_get:1396: comm syz.1.211: couldn't read orphan inode 15 (err -117) [ 255.714248][ T6800] EXT4-fs (loop1): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: writeback. [ 257.768545][ T6815] workqueue: Failed to create a rescuer kthread for wq "dio/loop1": -EINTR [ 257.795318][ T6815] workqueue: Failed to create a rescuer kthread for wq "dio/loop1": -EINTR [ 257.936370][ T6825] netlink: 16 bytes leftover after parsing attributes in process `syz.5.223'. [ 257.989414][ T5853] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 258.009383][ T5853] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 258.017893][ T5853] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 258.027346][ T5853] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 258.036875][ T5853] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 258.115258][ T5854] EXT4-fs (loop1): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 258.932494][ T6834] binder: 6832:6834 ioctl c0306201 200000000080 returned -14 [ 259.030829][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.165381][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.249292][ T5990] bond0 (unregistering): Released all slaves [ 259.867438][ T6525] hsr_slave_0: entered promiscuous mode [ 260.873642][ T5849] Bluetooth: hci4: command tx timeout [ 262.089267][ T6525] hsr_slave_1: entered promiscuous mode [ 262.097621][ T6525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.322739][ T6525] Cannot create hsr debugfs directory [ 262.708903][ T6849] loop3: detected capacity change from 0 to 128 [ 262.762898][ T6849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.802793][ T6849] EXT4-fs: Ignoring removed nomblk_io_submit option [ 262.889291][ T6849] EXT4-fs (loop3): Test dummy encryption mode enabled [ 262.955822][ T5849] Bluetooth: hci4: command tx timeout [ 262.962482][ T6849] EXT4-fs (loop3): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 263.026151][ T6849] ext4 filesystem being mounted at /42/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 265.406530][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 265.413350][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 265.428129][ T5849] Bluetooth: hci4: command tx timeout [ 265.458235][ T6865] ubi31: attaching mtd0 [ 265.464247][ T6865] ubi31: scanning is finished [ 266.001047][ T5990] hsr_slave_0: left promiscuous mode [ 266.070168][ T5990] hsr_slave_1: left promiscuous mode [ 266.099980][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 266.107509][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 266.161262][ T6865] ubi31 error: ubi_attach_mtd_dev: cannot spawn "ubi_bgt31d", error -4 [ 266.443843][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 266.505416][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 266.833470][ T5847] EXT4-fs (loop3): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 266.988118][ T5990] veth1_macvtap: left promiscuous mode [ 266.993759][ T5990] veth0_macvtap: left promiscuous mode [ 267.064827][ T5990] veth1_vlan: left promiscuous mode [ 267.098205][ T5990] veth0_vlan: left promiscuous mode [ 267.511906][ T5849] Bluetooth: hci4: command tx timeout [ 268.304416][ T6892] netlink: 8 bytes leftover after parsing attributes in process `syz.5.238'. [ 269.163263][ T6898] loop3: detected capacity change from 0 to 512 [ 269.267296][ T6898] EXT4-fs (loop3): mounted filesystem 00000000-0000-0000-0000-000000000000 r/w without journal. Quota mode: none. [ 269.572788][ T30] audit: type=1800 audit(2000000002.739:7): pid=6898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.239" name="file1" dev="loop3" ino=15 res=0 errno=0 [ 270.574447][ T6914] loop3: detected capacity change from 512 to 64 [ 270.574521][ T6917] syz.3.239: attempt to access beyond end of device [ 270.574521][ T6917] loop3: rw=34817, sector=342, nr_sectors = 24 limit=64 [ 270.670368][ T6912] syz.3.239: attempt to access beyond end of device [ 270.670368][ T6912] loop3: rw=524288, sector=258, nr_sectors = 8 limit=64 [ 270.781627][ T6912] syz.3.239: attempt to access beyond end of device [ 270.781627][ T6912] loop3: rw=524288, sector=390, nr_sectors = 8 limit=64 [ 270.938420][ T6912] syz.3.239: attempt to access beyond end of device [ 270.938420][ T6912] loop3: rw=524288, sector=144, nr_sectors = 8 limit=64 [ 270.958328][ T6912] syz.3.239: attempt to access beyond end of device [ 270.958328][ T6912] loop3: rw=524288, sector=286, nr_sectors = 8 limit=64 [ 271.049041][ T6912] syz.3.239: attempt to access beyond end of device [ 271.049041][ T6912] loop3: rw=524288, sector=414, nr_sectors = 8 limit=64 [ 271.077106][ T5853] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.118537][ T5853] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.141482][ T5853] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.150078][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.158582][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.179326][ T6912] syz.3.239: attempt to access beyond end of device [ 271.179326][ T6912] loop3: rw=524288, sector=168, nr_sectors = 8 limit=64 [ 271.197746][ T6912] syz.3.239: attempt to access beyond end of device [ 271.197746][ T6912] loop3: rw=524288, sector=310, nr_sectors = 8 limit=64 [ 271.219281][ T6912] syz.3.239: attempt to access beyond end of device [ 271.219281][ T6912] loop3: rw=524288, sector=438, nr_sectors = 8 limit=64 [ 271.233606][ T6912] syz.3.239: attempt to access beyond end of device [ 271.233606][ T6912] loop3: rw=524288, sector=192, nr_sectors = 8 limit=64 [ 271.507299][ T5847] EXT4-fs error (device loop3): ext4_free_branches:1020: inode #13: comm syz-executor: invalid indirect mapped block 1280 (level 0) [ 271.571454][ T5847] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 271.589572][ T5847] EXT4-fs error (device loop3): ext4_lookup:1787: inode #14: comm syz-executor: unexpected EA_INODE flag [ 271.858176][ T5955] usb 5-1: new high-speed USB device number 8 using dummy_hcd [ 271.869037][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 271.999992][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 272.028701][ T5955] usb 5-1: Using ep0 maxpacket: 32 [ 272.096512][ T5955] usb 5-1: unable to get BOS descriptor or descriptor too short [ 272.134829][ T5955] usb 5-1: config 5 has an invalid interface number: 105 but max is 0 [ 272.177727][ T5955] usb 5-1: config 5 has no interface number 0 [ 272.187875][ T5955] usb 5-1: config 5 interface 105 has no altsetting 0 [ 272.224638][ T5955] usb 5-1: New USB device found, idVendor=0403, idProduct=da70, bcdDevice=35.fd [ 272.257133][ T5955] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 272.268725][ T5955] usb 5-1: Product: syz [ 272.272935][ T5955] usb 5-1: Manufacturer: syz [ 272.277603][ T5955] usb 5-1: SerialNumber: syz [ 272.853838][ T5955] usb 5-1: NDI device with a latency value of 1 [ 272.918442][ T5955] ftdi_sio 5-1:5.105: FTDI USB Serial Device converter detected [ 272.952423][ T5955] ftdi_sio ttyUSB0: unknown device type: 0x35fd [ 273.028352][ T5955] usb 5-1: USB disconnect, device number 8 [ 273.071973][ T5955] ftdi_sio 5-1:5.105: device disconnected [ 273.188427][ T5853] Bluetooth: hci1: command tx timeout [ 275.275450][ T5853] Bluetooth: hci1: command tx timeout [ 275.351690][ T5847] EXT4-fs (loop3): unmounting filesystem 00000000-0000-0000-0000-000000000000. [ 277.348262][ T5853] Bluetooth: hci1: command tx timeout [ 277.696408][ T6957] loop5: detected capacity change from 0 to 1024 [ 277.916313][ T6957] EXT4-fs: Ignoring removed orlov option [ 277.960367][ T6957] EXT4-fs: Mount option(s) incompatible with ext2 [ 278.780532][ T6972] loop5: detected capacity change from 0 to 128 [ 278.806451][ T6918] chnl_net:caif_netlink_parms(): no params data found [ 278.822390][ T6972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.864102][ T6972] EXT4-fs: Ignoring removed nomblk_io_submit option [ 278.907661][ T6972] EXT4-fs (loop5): Test dummy encryption mode enabled [ 278.928101][ T5917] usb 2-1: new full-speed USB device number 7 using dummy_hcd [ 278.981242][ T6972] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 279.000828][ T6972] ext4 filesystem being mounted at /56/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 279.045770][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 279.068208][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 279.082021][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 279.098836][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 279.107851][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 279.131183][ T5917] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.146592][ T5917] usb 2-1: not running at top speed; connect to a high speed hub [ 279.159491][ T5917] usb 2-1: config 1 has an invalid interface number: 138 but max is 0 [ 279.167684][ T5917] usb 2-1: config 1 has no interface number 0 [ 279.185545][ T5917] usb 2-1: config 1 interface 138 has no altsetting 0 [ 279.234696][ T5917] usb 2-1: New USB device found, idVendor=0cb8, idProduct=c90b, bcdDevice= d.ae [ 279.253294][ T5917] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.297812][ T5917] usb 2-1: Product: syz [ 279.338280][ T5917] usb 2-1: Manufacturer: syz [ 279.395609][ T5917] usb 2-1: SerialNumber: syz [ 279.428345][ T5853] Bluetooth: hci1: command tx timeout [ 279.639669][ T6826] chnl_net:caif_netlink_parms(): no params data found [ 279.784016][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.4.258'. [ 279.798573][ T5917] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 279.907147][ T5917] usb 2-1: USB disconnect, device number 7 [ 280.070027][ T5990] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.090398][ T6065] udevd[6065]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.138/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.619431][ T5990] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.188167][ T5853] Bluetooth: hci0: command tx timeout [ 281.220625][ T6918] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.296364][ T7006] ubi31: attaching mtd0 [ 281.319451][ T7006] ubi31: scanning is finished [ 281.978219][ T6918] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.985578][ T6918] bridge_slave_0: entered allmulticast mode [ 282.000135][ T6918] bridge_slave_0: entered promiscuous mode [ 282.088170][ T7006] ubi31: attached mtd0 (name "mtdram test device", size 0 MiB) [ 282.095817][ T7006] ubi31: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 282.103389][ T7006] ubi31: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 282.110545][ T7006] ubi31: VID header offset: 64 (aligned 64), data offset: 128 [ 282.118124][ T7006] ubi31: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 282.125068][ T7006] ubi31: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 282.133304][ T7006] ubi31: max/mean erase counter: 1/1, WL threshold: 4096, image sequence number: 1134709846 [ 282.143518][ T7006] ubi31: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 282.155049][ T7012] ubi31: background thread "ubi_bgt31d" started, PID 7012 [ 282.555307][ T5990] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.625743][ T6918] bridge0: port 2(bridge_slave_1) entered blocking state [ 282.657021][ T6918] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.697777][ T6918] bridge_slave_1: entered allmulticast mode [ 282.740718][ T6918] bridge_slave_1: entered promiscuous mode [ 282.956156][ T5990] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.269155][ T5853] Bluetooth: hci0: command tx timeout [ 283.418457][ T5860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 283.501878][ T6918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 283.545050][ T6918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 283.556763][ T7020] loop1: detected capacity change from 0 to 256 [ 283.565003][ T7020] exfat: Deprecated parameter 'utf8' [ 283.596144][ T7020] exfat: Deprecated parameter 'utf8' [ 283.626404][ T7020] exfat: Deprecated parameter 'utf8' [ 283.658111][ T7020] exfat: Deprecated parameter 'utf8' [ 283.704357][ T7020] exFAT-fs (loop1): failed to load upcase table (idx : 0x00010000, chksum : 0xac5c0b1f, utbl_chksum : 0xe619d30d) [ 283.751408][ T6826] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.790768][ T6826] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.928373][ T6826] bridge_slave_0: entered allmulticast mode [ 283.936617][ T6826] bridge_slave_0: entered promiscuous mode [ 284.100090][ T6826] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.218771][ T6826] bridge0: port 2(bridge_slave_1) entered disabled state [ 284.286494][ T6826] bridge_slave_1: entered allmulticast mode [ 284.564381][ T6826] bridge_slave_1: entered promiscuous mode [ 285.152718][ T6918] team0: Port device team_slave_0 added [ 285.163837][ T6918] team0: Port device team_slave_1 added [ 285.168357][ T7034] loop1: detected capacity change from 0 to 1024 [ 285.190896][ T7034] EXT4-fs: Ignoring removed orlov option [ 285.200142][ T7034] EXT4-fs: Mount option(s) incompatible with ext2 [ 285.446126][ T5853] Bluetooth: hci0: command tx timeout [ 285.826235][ T6826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.043916][ T7041] netlink: 8 bytes leftover after parsing attributes in process `syz.4.269'. [ 286.440705][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.447741][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.473779][ C1] vkms_vblank_simulate: vblank timer overrun [ 286.489884][ T6918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.519793][ T6918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.526837][ T6918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.603079][ T6918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.642727][ T6826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.666491][ T7053] input: syz1 as /devices/virtual/input/input8 [ 287.939963][ T7056] loop1: detected capacity change from 0 to 512 [ 287.962561][ T7056] EXT4-fs: Ignoring removed i_version option [ 287.968857][ T7056] EXT4-fs: Ignoring removed mblk_io_submit option [ 287.976838][ T7056] ext4: Unknown parameter 'seclabel' [ 288.044957][ T5853] Bluetooth: hci0: command tx timeout [ 288.050830][ T5853] Bluetooth: hci3: SCO packet for unknown connection handle 200 [ 289.572968][ T7061] loop5: detected capacity change from 0 to 128 [ 289.665508][ T7061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.688332][ T7061] EXT4-fs: Ignoring removed nomblk_io_submit option [ 289.814489][ T7061] EXT4-fs (loop5): Test dummy encryption mode enabled [ 290.313501][ T7061] EXT4-fs (loop5): mounted filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09 r/w without journal. Quota mode: none. [ 290.327682][ T7061] ext4 filesystem being mounted at /60/mnt supports timestamps until 2038-01-19 (0x7fffffff) [ 290.547599][ T6918] hsr_slave_0: entered promiscuous mode [ 290.569630][ T6918] hsr_slave_1: entered promiscuous mode [ 290.576186][ T6918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 290.651126][ T6918] Cannot create hsr debugfs directory [ 290.664174][ T6826] team0: Port device team_slave_0 added [ 290.722052][ T6826] team0: Port device team_slave_1 added [ 290.836395][ T7074] loop4: detected capacity change from 0 to 1024 [ 290.873394][ T7074] EXT4-fs: Ignoring removed orlov option [ 290.901447][ T7074] EXT4-fs: Mount option(s) incompatible with ext2 [ 291.343149][ T7080] netlink: 'syz.4.275': attribute type 9 has an invalid length. [ 291.351100][ T7080] netlink: 'syz.4.275': attribute type 7 has an invalid length. [ 291.358875][ T7080] netlink: 'syz.4.275': attribute type 8 has an invalid length. [ 291.752138][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 291.788805][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.928385][ T6826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 291.963624][ T6826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 291.970723][ T6826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 291.998079][ T6826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.027540][ T5990] bridge_slave_1: left allmulticast mode [ 292.034049][ T5990] bridge_slave_1: left promiscuous mode [ 292.055796][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.171370][ T5990] bridge_slave_0: left allmulticast mode [ 292.177112][ T5990] bridge_slave_0: left promiscuous mode [ 292.201672][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.250962][ T5990] bridge_slave_1: left allmulticast mode [ 292.256727][ T5990] bridge_slave_1: left promiscuous mode [ 292.268363][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.296275][ T5990] bridge_slave_0: left allmulticast mode [ 292.315060][ T5990] bridge_slave_0: left promiscuous mode [ 292.327534][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.419351][ T5990] bridge_slave_1: left allmulticast mode [ 292.425087][ T5990] bridge_slave_1: left promiscuous mode [ 292.448574][ T5990] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.478434][ T5990] bridge_slave_0: left allmulticast mode [ 292.497394][ T5990] bridge_slave_0: left promiscuous mode [ 292.503899][ T5990] bridge0: port 1(bridge_slave_0) entered disabled state [ 293.800030][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 293.843940][ T5860] EXT4-fs (loop5): unmounting filesystem 76b65be2-f6da-4727-8c75-0525a5b65a09. [ 293.895178][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 293.984168][ T5990] bond0 (unregistering): Released all slaves [ 294.195524][ T7099] loop5: detected capacity change from 0 to 1024 [ 294.209499][ T7099] EXT4-fs: Ignoring removed orlov option [ 294.235790][ T7099] EXT4-fs: Mount option(s) incompatible with ext2 [ 296.739178][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.765960][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.784899][ T5990] bond0 (unregistering): Released all slaves [ 296.973917][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.996576][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.009486][ T5990] bond0 (unregistering): Released all slaves [ 297.519036][ T7115] loop5: detected capacity change from 0 to 512 [ 297.571936][ T7115] EXT4-fs (loop5): mounted filesystem 00800000-0000-0000-0000-000000000000 ro without journal. Quota mode: writeback. [ 298.142890][ T7117] input: syz1 as /devices/virtual/input/input9 [ 298.244770][ T7119] loop4: detected capacity change from 0 to 512 [ 298.389145][ T7119] EXT4-fs: Ignoring removed i_version option [ 298.395238][ T7119] EXT4-fs: Ignoring removed mblk_io_submit option [ 298.401863][ T7119] ext4: Unknown parameter 'seclabel' [ 298.608428][ T5849] Bluetooth: hci2: SCO packet for unknown connection handle 200 [ 299.199765][ T7115] Quota error (device loop5): v2_read_file_info: Free block number 58381 out of range (1, 6). [ 299.270288][ T7115] EXT4-fs warning (device loop5): ext4_enable_quotas:7164: Failed to enable quota tracking (type=1, err=-117, ino=4). Please run e2fsck to fix. [ 299.971643][ T5860] EXT4-fs (loop5): unmounting filesystem 00800000-0000-0000-0000-000000000000. [ 299.991237][ T6826] hsr_slave_0: entered promiscuous mode [ 300.011585][ T6826] hsr_slave_1: entered promiscuous mode [ 300.019089][ T6826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 300.026818][ T6826] Cannot create hsr debugfs directory [ 302.118275][ T5990] hsr_slave_0: left promiscuous mode [ 302.143406][ T5990] hsr_slave_1: left promiscuous mode [ 302.168682][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.200098][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.233951][ T5990] hsr_slave_0: left promiscuous mode [ 302.249156][ T5990] hsr_slave_1: left promiscuous mode [ 302.259476][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.304846][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.339102][ T5990] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.356896][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.419003][ T5990] hsr_slave_0: left promiscuous mode [ 302.425477][ T5990] hsr_slave_1: left promiscuous mode [ 302.435399][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.470188][ T5990] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.565884][ T5990] veth1_macvtap: left promiscuous mode [ 302.612794][ T5990] veth0_macvtap: left promiscuous mode [ 302.633254][ T5990] veth1_vlan: left promiscuous mode [ 302.660140][ T5990] veth0_vlan: left promiscuous mode [ 303.462894][ T7144] loop1: detected capacity change from 0 to 1024 [ 303.520739][ T7144] VFS_BUG_ON_INODE(!IS_ANON_FILE(inode)) encountered for inode ffff88802f51be70 [ 303.521172][ T7144] ------------[ cut here ]------------ [ 303.536163][ T7144] kernel BUG at fs/namei.c:3483! [ 303.556870][ T7144] Oops: invalid opcode: 0000 [#1] SMP KASAN NOPTI [ 303.563652][ T7144] CPU: 0 UID: 0 PID: 7144 Comm: syz.1.291 Not tainted 6.16.0-rc5-syzkaller-00121-gbc9ff192a6c9 #0 PREEMPT(full) [ 303.575614][ T7144] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 303.585711][ T7144] RIP: 0010:may_open+0x2b3/0x470 [ 303.590727][ T7144] Code: 81 e3 00 00 08 00 89 de e8 6a ee 84 ff 85 db 0f 85 5d fe ff ff e8 1d f3 84 ff 48 c7 c6 c0 7a bf 8b 48 89 ef e8 be ca 04 00 90 <0f> 0b e8 06 f3 84 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 303.610411][ T7144] RSP: 0018:ffffc90003bbfaa8 EFLAGS: 00010286 [ 303.616536][ T7144] RAX: 000000000000004d RBX: 0000000000000000 RCX: ffffc9000bf4a000 [ 303.624535][ T7144] RDX: 0000000000000000 RSI: ffffffff819b9126 RDI: 0000000000000005 [ 303.632565][ T7144] RBP: ffff88802f51be70 R08: 0000000000000005 R09: 0000000000000000 [ 303.640657][ T7144] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000008042 [ 303.648666][ T7144] R13: ffffffff8e7ef440 R14: 0000000000000006 R15: ffffc90003bbfc30 [ 303.656663][ T7144] FS: 00007fdaaf6c96c0(0000) GS:ffff88812471a000(0000) knlGS:0000000000000000 [ 303.665664][ T7144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 303.672278][ T7144] CR2: 0000001b30e1fffc CR3: 00000000359c7000 CR4: 0000000000350ef0 [ 303.680283][ T7144] Call Trace: [ 303.683602][ T7144] [ 303.686549][ T7144] path_openat+0x1354/0x2cb0 [ 303.691194][ T7144] ? __pfx_path_openat+0x10/0x10 [ 303.696182][ T7144] ? __lock_acquire+0xb8a/0x1c90 [ 303.701215][ T7144] do_filp_open+0x20b/0x470 [ 303.705768][ T7144] ? __pfx_do_filp_open+0x10/0x10 [ 303.710866][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.716539][ T7144] ? alloc_fd+0x471/0x7d0 [ 303.720907][ T7144] do_sys_openat2+0x11b/0x1d0 [ 303.725719][ T7144] ? __pfx_do_sys_openat2+0x10/0x10 [ 303.731056][ T7144] __x64_sys_openat+0x174/0x210 [ 303.735954][ T7144] ? __pfx___x64_sys_openat+0x10/0x10 [ 303.741382][ T7144] ? srso_alias_return_thunk+0x5/0xfbef5 [ 303.747065][ T7144] do_syscall_64+0xcd/0x4c0 [ 303.751631][ T7144] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 303.757561][ T7144] RIP: 0033:0x7fdaae78e929 [ 303.762002][ T7144] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 303.781660][ T7144] RSP: 002b:00007fdaaf6c9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 303.790116][ T7144] RAX: ffffffffffffffda RBX: 00007fdaae9b5fa0 RCX: 00007fdaae78e929 [ 303.798116][ T7144] RDX: 0000000000000042 RSI: 0000200000000040 RDI: ffffffffffffff9c [ 303.806110][ T7144] RBP: 00007fdaae810b39 R08: 0000000000000000 R09: 0000000000000000 [ 303.814103][ T7144] R10: 0000000000000010 R11: 0000000000000246 R12: 0000000000000000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.822137][ T7144] R13: 0000000000000000 R14: 00007fdaae9b5fa0 R15: 00007ffce68e4848 [ 303.830236][ T7144] [ 303.833266][ T7144] Modules linked in: [ 303.838138][ T7144] ---[ end trace 0000000000000000 ]--- [ 303.861326][ T7144] RIP: 0010:may_open+0x2b3/0x470 [ 303.867207][ T7144] Code: 81 e3 00 00 08 00 89 de e8 6a ee 84 ff 85 db 0f 85 5d fe ff ff e8 1d f3 84 ff 48 c7 c6 c0 7a bf 8b 48 89 ef e8 be ca 04 00 90 <0f> 0b e8 06 f3 84 ff 4c 89 fa 48 b8 00 00 00 00 00 fc ff df 48 c1 [ 303.888288][ T5990] team0 (unregistering): Port device team_slave_1 removed [ 303.913778][ T7144] RSP: 0018:ffffc90003bbfaa8 EFLAGS: 00010286 [ 303.997989][ T7144] RAX: 000000000000004d RBX: 0000000000000000 RCX: ffffc9000bf4a000 [ 304.006063][ T7144] RDX: 0000000000000000 RSI: ffffffff819b9126 RDI: 0000000000000005 [ 304.021323][ T5990] team0 (unregistering): Port device team_slave_0 removed [ 304.068180][ T7144] RBP: ffff88802f51be70 R08: 0000000000000005 R09: 0000000000000000 [ 304.076542][ T7144] R10: 0000000080000000 R11: 0000000000000001 R12: 0000000000008042 [ 304.118067][ T7144] R13: ffffffff8e7ef440 R14: 0000000000000006 R15: ffffc90003bbfc30 [ 304.128061][ T7144] FS: 00007fdaaf6c96c0(0000) GS:ffff88812481a000(0000) knlGS:0000000000000000 [ 304.137631][ T7144] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 304.157904][ T7144] CR2: 0000560c680f3000 CR3: 00000000359c7000 CR4: 0000000000350ef0 [ 304.166255][ T7144] Kernel panic - not syncing: Fatal exception [ 304.172648][ T7144] Kernel Offset: disabled [ 304.177086][ T7144] Rebooting in 86400 seconds..